$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa File: 9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa (raw, json) Hash identifier: 0Zpv7VcsoqCnOWaYDpsk5ZNWjnhsZSKxbk1N/wgDXcg= Subject key identifier: 13:2D:C7:82:2E:22:F3:8E:2C:DA:92:93:14:14:B1:D8:3E:D4:3A:CF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350AF2090845AEE363C4D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:af:20:90:84:5a:ee:36:3c:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c570fb97-17e8-4d61-b618-b11ca36bef94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:8c:fa:30:c1:02:b4:7f:94:27:36:2b:fa: af:00:ea:c0:44:ed:71:5b:40:98:bf:63:0f:e5:03: 27:28:77:86:4c:06:2a:e0:e2:2a:60:30:57:d1:d8: 8f:27:8f:3d:60:2b:ef:16:66:15:bd:19:67:f8:bb: 30:0f:a5:e0:7b:b6:b0:e0:78:47:9f:9d:f3:ac:0b: 43:ce:3e:25:c6:6b:f5:2d:4b:46:fb:9b:8f:5f:b1: 2c:9a:39:d8:7d:91:49:92:df:0b:7e:79:9f:a5:19: 8a:40:e7:e8:42:92:f8:58:88:ef:32:56:dc:cb:b0: ac:2b:95:78:40:6c:cc:ee:01:31:71:f8:ff:80:8e: 55:ce:e4:f7:5c:35:90:da:24:92:1d:8f:22:44:74: 32:87:db:4a:61:ec:b7:f9:41:20:6e:f7:cf:42:d5: 7c:b2:26:c9:f5:9e:0c:08:7b:5a:e2:68:2e:fe:9d: cd:56:82:02:59:18:19:71:e9:d3:0c:0e:34:15:5f: 4d:07:6e:77:0c:d5:96:37:c9:da:46:78:15:e0:52: 41:76:13:ae:4e:b3:a4:49:db:ef:bb:70:e7:f8:a9: 65:cd:50:29:08:b4:cc:65:87:ec:a3:c9:59:ad:b8: 67:6d:d5:c4:dc:d2:8b:91:cb:e1:ba:17:92:9c:90: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:C7:82:2E:22:F3:8E:2C:DA:92:93:14:14:B1:D8:3E:D4:3A:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b8:7b:1c:fb:1a:12:9e:39:bc:38:52:95:fa:30:1b:36:62: 97:17:10:a0:9a:48:e2:ea:8d:c2:09:ae:27:c4:32:b9:b4:be: 50:67:c6:af:cd:6b:9a:e0:89:7f:83:30:3e:6f:29:2e:06:46: 59:c1:9d:b4:78:2e:ff:25:3d:73:9f:76:e0:33:35:27:a6:11: 6e:69:45:0f:63:a1:7b:59:64:f3:a2:3c:f3:35:4d:ee:56:d9: ed:08:4a:42:d2:2e:45:c9:c0:8a:a1:3f:1d:20:87:d9:a2:ea: 02:42:cb:0e:22:7d:cd:54:ab:d4:75:d4:24:3c:54:2c:de:86: b1:00:36:9c:a1:e4:59:f0:9d:d4:09:f5:8e:9c:8b:dc:ec:61: 22:0d:bb:db:af:73:d0:2c:87:74:33:73:73:06:29:fa:d1:d6: eb:ac:49:0a:64:dc:2e:77:79:94:c4:c5:76:f6:95:96:8a:70: 45:d1:28:79:59:d6:c6:0f:9e:c7:cc:93:b4:6f:4e:62:ad:88: 15:18:26:3f:22:11:ce:47:5c:52:a7:43:4e:84:9f:b1:9d:85: b4:7f:e4:79:25:e0:c3:1e:4c:d0:d8:c1:27:9d:65:7c:2e:82: f9:7b:01:a4:f8:39:84:22:4b:c6:07:04:35:1f:22:85:1b:17: ba:4a:71:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUK8gkIRa7jY8TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzU3MGZiOTctMTdlOC00ZDYxLWI2MTgtYjExY2EzNmJlZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXiM+jDBArR/lCc2K/qvAOrARO1xW0CYv2MP 5QMnKHeGTAYq4OIqYDBX0diPJ489YCvvFmYVvRln+LswD6Xge7aw4HhHn53zrAtD zj4lxmv1LUtG+5uPX7EsmjnYfZFJkt8LfnmfpRmKQOfoQpL4WIjvMlbcy7CsK5V4 QGzM7gExcfj/gI5VzuT3XDWQ2iSSHY8iRHQyh9tKYey3+UEgbvfPQtV8sibJ9Z4M CHta4mgu/p3NVoICWRgZcenTDA40FV9NB253DNWWN8naRngV4FJBdhOuTrOkSdvv u3Dn+KllzVApCLTMZYfso8lZrbhnbdXE3NKLkcvhuheSnJBkPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMtx4IuIvOOLNqSkxQUsdg+1DrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWQ5NTE5YWYtYjBkNy0z YzY0LThhYTctNGVmMDNjMjVkNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS4exz7GhKeObw4UpX6MBs2YpcXEKCaSOLqjcIJrifEMrm0vlBnxq/N a5rgiX+DMD5vKS4GRlnBnbR4Lv8lPXOfduAzNSemEW5pRQ9joXtZZPOiPPM1Te5W 2e0ISkLSLkXJwIqhPx0gh9mi6gJCyw4ifc1Uq9R11CQ8VCzehrEANpyh5FnwndQJ 9Y6ci9zsYSINu9uvc9Ash3Qzc3MGKfrR1uusSQpk3C53eZTExXb2lZaKcEXRKHlZ 1sYPnsfMk7RvTmKtiBUYJj8iEc5HXFKnQ06En7GdhbR/5Hkl4MMeTNDYwSedZXwu gvl7AaT4OYQiS8YHBDUfIoUbF7pKcYQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:51:24 2025 by rpki-client