$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94e67aec-589f-3acb-a0b9-0f1ea21d5a66.roa File: 94e67aec-589f-3acb-a0b9-0f1ea21d5a66.roa (raw, json) Hash identifier: dzKzp8nTxHQndsIfZClPxHUq1mcgsvM7ERqnr1g4Rq8= Subject key identifier: ED:C8:C2:9D:F7:4C:41:A0:CB:38:5F:DC:A4:1A:85:41:47:CD:2E:0D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A919B3CD9B3B8683A400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94e67aec-589f-3acb-a0b9-0f1ea21d5a66.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a9:19:b3:cd:9b:3b:86:83:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=3fff244a-0518-405a-8260-edc8100cd145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:f0:7f:2c:9d:fe:dd:28:c6:21:06:5c:a3: b9:09:09:d9:41:dc:f9:ec:2c:bb:a2:7c:df:5e:c5: 26:fd:f5:56:33:ae:70:a5:fd:54:b3:92:f0:54:da: 25:84:af:d9:03:47:2a:fb:10:be:49:6e:b9:92:3e: 81:e0:90:40:55:0d:ca:a9:cc:14:0a:ce:f7:86:f6: 6e:63:62:3b:23:23:41:f6:80:74:22:91:4a:53:44: 03:9d:85:30:98:b4:84:fa:64:ad:c1:93:d4:d2:7a: ea:9a:92:7d:64:d6:fb:2c:00:3c:c2:83:14:e4:20: f6:bc:14:ea:8c:c2:b3:3d:f4:ba:e8:df:14:82:67: 0e:21:cf:27:14:0d:b6:66:ad:e4:61:a4:78:f1:51: 0e:30:3c:bd:39:00:02:59:6d:aa:2e:2b:98:70:b7: 17:8a:59:fe:43:c5:2d:fb:64:2b:e1:1e:62:c1:68: 2e:ff:74:97:b5:2e:c4:71:82:c4:6b:d5:7e:26:79: d2:12:37:98:91:fd:a6:4e:ea:a6:0a:a2:e2:4e:51: 66:c1:5d:d8:fd:ae:53:fb:13:5c:84:7f:85:4e:68: 38:06:51:ed:04:68:1a:2a:12:86:69:73:09:ab:62: 60:19:bd:a3:4e:80:c1:5e:5a:c9:43:77:7a:df:d7: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C8:C2:9D:F7:4C:41:A0:CB:38:5F:DC:A4:1A:85:41:47:CD:2E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94e67aec-589f-3acb-a0b9-0f1ea21d5a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:12:d6:25:c8:b2:73:e1:9e:1d:3e:bb:02:80:08:64:53:2f: 37:0b:b7:12:4e:82:ba:83:5a:38:8f:83:7c:a0:bf:15:6b:3e: 27:bb:5b:78:99:b6:8f:04:90:95:fa:f1:c0:5c:58:39:ce:36: 2d:2c:15:a6:d1:ec:4c:e5:67:cb:c2:0d:9e:83:13:e4:45:90: 1f:f3:b3:db:8a:da:5a:57:b9:d3:f3:45:10:b2:26:1b:08:bd: c3:d3:c2:20:31:ee:15:d0:52:25:3d:bd:6b:95:4a:bd:cc:f4: 03:be:30:76:93:b6:e7:c5:02:05:06:0d:1f:3a:5b:43:be:d9: 85:69:99:77:90:63:5b:d8:70:2e:4b:88:36:60:e7:9d:0b:20: 8c:d1:6c:ef:d5:5a:47:27:17:11:ed:d8:e6:93:ad:1c:3c:68: bc:45:3f:ec:ce:94:e2:eb:79:3c:9c:55:72:c0:5e:95:2b:c0: 1c:02:ae:73:22:8b:dd:99:f6:34:0a:a9:df:7d:99:96:71:25: d8:8e:f3:50:c3:59:fd:2e:cf:73:55:01:8f:6b:1a:0e:a7:04: 26:ab:f5:45:d2:c9:e4:f4:a4:e2:04:75:3f:01:75:a2:b4:d4: 71:56:4e:b1:66:b6:2b:12:3f:98:1c:d2:8a:4c:ca:3b:64:8b: f8:f7:25:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKkZs82bO4aDpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk M2ZmZjI0NGEtMDUxOC00MDVhLTgyNjAtZWRjODEwMGNkMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPnwfyyd/t0oxiEGXKO5CQnZQdz57Cy7onzf XsUm/fVWM65wpf1Us5LwVNolhK/ZA0cq+xC+SW65kj6B4JBAVQ3KqcwUCs73hvZu Y2I7IyNB9oB0IpFKU0QDnYUwmLSE+mStwZPU0nrqmpJ9ZNb7LAA8woMU5CD2vBTq jMKzPfS66N8UgmcOIc8nFA22Zq3kYaR48VEOMDy9OQACWW2qLiuYcLcXiln+Q8Ut +2Qr4R5iwWgu/3SXtS7EcYLEa9V+JnnSEjeYkf2mTuqmCqLiTlFmwV3Y/a5T+xNc hH+FTmg4BlHtBGgaKhKGaXMJq2JgGb2jToDBXlrJQ3d639cgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3Iwp33TEGgyzhf3KQahUFHzS4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTRlNjdhZWMtNTg5Zi0z YWNiLWEwYjktMGYxZWEyMWQ1YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMES1iXIsnPhnh0+uwKACGRTLzcLtxJOgrqDWjiPg3ygvxVrPie7W3iZ to8EkJX68cBcWDnONi0sFabR7EzlZ8vCDZ6DE+RFkB/zs9uK2lpXudPzRRCyJhsI vcPTwiAx7hXQUiU9vWuVSr3M9AO+MHaTtufFAgUGDR86W0O+2YVpmXeQY1vYcC5L iDZg550LIIzRbO/VWkcnFxHt2OaTrRw8aLxFP+zOlOLreTycVXLAXpUrwBwCrnMi i92Z9jQKqd99mZZxJdiO81DDWf0uz3NVAY9rGg6nBCar9UXSyeT0pOIEdT8BdaK0 1HFWTrFmtisSP5gc0opMyjtki/j3Jao= -----END CERTIFICATE-----Generated at Mon Aug 4 14:15:22 2025 by rpki-client