$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa File: b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa (raw, json) Hash identifier: nxg3A0/FG+Thz890fTgzEVYxoGq2sw9+TTS2zLqa/BA= Subject key identifier: 04:C1:F4:20:E7:A5:F5:71:31:D4:96:68:21:2C:D5:17:CA:F3:3D:47 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C23E119A9F3EB8E18E98 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c2:3e:11:9a:9f:3e:b8:e1:8e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c173ef18-0fe8-470c-950b-f91a96ea2da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:2b:2d:8b:e5:99:62:77:0d:5d:4b:35:39: 9c:96:d4:31:c3:4b:30:aa:55:55:ee:4e:c4:45:39: dc:00:22:30:db:03:e4:7e:5e:55:9b:3e:6d:bd:b4: 1e:3c:ed:df:01:56:33:30:8f:ee:3a:4d:a6:b5:46: f1:9b:18:7b:26:cc:4b:98:47:88:b1:c0:b8:36:19: 7b:dd:52:fb:d3:4d:40:29:5d:2a:c3:f2:54:cc:e1: 60:4d:04:e2:d6:10:30:cb:89:6a:65:7e:da:8d:30: 8a:a9:a1:b8:46:e6:8b:27:f9:e2:b0:56:c1:42:da: 97:a2:46:f5:1e:f5:2c:46:0b:ed:e5:fb:31:6a:ad: 6a:47:02:1b:18:7f:6f:68:20:70:2f:0e:c2:65:36: 4f:a9:09:dc:73:50:63:30:f3:c7:e6:08:a1:5b:44: cc:15:6b:8e:ac:7c:ad:c4:7c:98:6a:fe:25:22:1c: d4:ec:f5:98:fb:c9:86:a4:75:71:c2:10:cb:e5:76: 64:af:67:62:2f:ef:54:36:ed:f2:79:2c:b1:2f:95: e2:f9:e3:59:3b:e6:93:d1:b6:74:8d:b3:91:e6:84: 1b:dc:35:05:10:e7:ba:3a:bf:88:62:3b:b9:42:98: aa:d9:cd:9c:f6:af:e2:f5:8c:5d:84:1e:68:21:bd: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C1:F4:20:E7:A5:F5:71:31:D4:96:68:21:2C:D5:17:CA:F3:3D:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a5:3a:ca:b9:4a:36:05:ac:b5:fb:6b:17:44:57:49:bd:91: 0e:a7:c1:08:d0:82:ee:48:2f:04:bc:87:bc:8a:b2:13:53:ac: f9:94:e4:28:5b:60:89:91:e5:54:ad:7b:b7:51:c7:ae:75:9e: a1:36:d5:1a:bf:a2:0d:e4:ce:55:17:77:60:07:f9:c3:df:40: 5d:bb:13:11:95:ff:01:fb:98:0e:5e:39:ec:9e:48:68:67:00: f1:33:fb:ba:cf:dd:ab:58:11:3d:16:4c:2d:44:d2:26:76:f0: 5a:bb:5c:47:79:87:97:13:dd:5b:97:65:33:e1:ad:56:cf:9b: 08:89:e0:5e:ea:5c:be:13:2b:b3:d5:94:67:8a:fc:00:d8:66: 49:4d:62:ee:d3:2e:76:54:27:ee:16:59:f6:4f:92:91:76:5e: 6b:fc:b8:22:d0:ef:6d:b4:81:0f:a5:25:30:78:c6:55:09:49: da:4d:fa:39:c2:29:4a:a4:46:13:8b:51:0c:0d:80:ca:fa:43: 0b:08:b4:72:25:3f:b7:84:8d:a3:19:5c:81:40:52:a0:94:0b: 23:29:b7:05:9d:6b:54:01:e9:43:63:c8:bf:90:8d:74:24:03: a6:8a:e1:ef:97:0f:15:34:9e:23:2f:fb:90:2d:65:be:f3:42: 7f:a8:71:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMI+EZqfPrjhjpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzE3M2VmMTgtMGZlOC00NzBjLTk1MGItZjkxYTk2ZWEyZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRkrLYvlmWJ3DV1LNTmcltQxw0swqlVV7k7E RTncACIw2wPkfl5Vmz5tvbQePO3fAVYzMI/uOk2mtUbxmxh7JsxLmEeIscC4Nhl7 3VL7001AKV0qw/JUzOFgTQTi1hAwy4lqZX7ajTCKqaG4RuaLJ/nisFbBQtqXokb1 HvUsRgvt5fsxaq1qRwIbGH9vaCBwLw7CZTZPqQncc1BjMPPH5gihW0TMFWuOrHyt xHyYav4lIhzU7PWY+8mGpHVxwhDL5XZkr2diL+9UNu3yeSyxL5Xi+eNZO+aT0bZ0 jbOR5oQb3DUFEOe6Or+IYju5Qpiq2c2c9q/i9YxdhB5oIb1xfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATB9CDnpfVxMdSWaCEs1RfK8z1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjRjMzllMGEtYzdkMy0z NDU1LTgyMzItM2Q3NDAyYzEzYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSlOsq5SjYFrLX7axdEV0m9kQ6nwQjQgu5ILwS8h7yKshNTrPmU5Chb YImR5VSte7dRx651nqE21Rq/og3kzlUXd2AH+cPfQF27ExGV/wH7mA5eOeyeSGhn APEz+7rP3atYET0WTC1E0iZ28Fq7XEd5h5cT3VuXZTPhrVbPmwiJ4F7qXL4TK7PV lGeK/ADYZklNYu7TLnZUJ+4WWfZPkpF2Xmv8uCLQ7220gQ+lJTB4xlUJSdpN+jnC KUqkRhOLUQwNgMr6QwsItHIlP7eEjaMZXIFAUqCUCyMptwWda1QB6UNjyL+QjXQk A6aK4e+XDxU0niMv+5AtZb7zQn+ocTs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:41 2025 by rpki-client