$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa File: cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa (raw, json) Hash identifier: 63fmeR33wVexFKhJ9VSW6F/oCIKw6icFs31nQIFKIuo= Subject key identifier: D3:B6:3A:00:CE:0B:07:1A:60:1A:DA:6F:D1:84:18:09:25:06:D2:40 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A70861AE27DEE338AA0C68D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 41264 IP address blocks: 104.133.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:1a:e2:7d:ee:33:8a:a0:c6:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=dd455aaf-6927-45d5-a0f7-d7f79efaa405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:f0:2c:8f:55:da:40:7d:39:f8:7d:d7:8e: 2c:9b:10:57:a9:16:7c:60:25:20:54:97:a8:65:bd: c7:e0:2e:37:48:d2:d9:8d:dd:a0:f4:25:c2:ac:40: 2b:79:71:d3:76:e1:54:66:50:69:ac:11:36:f5:a8: 27:f0:7a:29:2b:c8:4d:b7:84:72:1d:b3:23:52:05: 32:c8:30:fb:e4:d6:b4:46:35:69:26:c6:5f:9f:7b: 20:9e:55:57:dc:a5:c9:a4:e2:54:e9:16:5a:e3:fc: 85:a1:6f:d6:d0:43:c6:d8:88:54:c5:c8:14:0a:78: cc:b8:ae:1c:63:9d:d9:8f:fe:00:f4:66:27:41:0e: d9:c2:77:61:cf:07:72:dc:8b:b5:68:39:88:78:7b: 22:f9:4a:92:09:49:4a:6a:e0:c8:e9:b5:94:e0:4e: da:1e:98:3a:88:2a:86:2a:49:f0:4c:24:e5:e2:ad: e2:67:53:93:94:00:26:00:58:24:f5:c9:88:e7:b8: 29:7f:3d:03:3a:80:dc:e8:df:77:47:e3:3c:8d:f3: d6:c8:d1:4d:b6:17:d6:af:51:43:20:09:7b:89:99: f9:d7:10:c0:73:4f:15:51:7b:0c:42:e8:9b:a6:f8: fb:84:70:4b:51:c8:ab:d6:60:2d:1f:d0:41:27:d2: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B6:3A:00:CE:0B:07:1A:60:1A:DA:6F:D1:84:18:09:25:06:D2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8b:db:29:b2:ce:70:47:a9:5e:0a:55:05:b3:5b:df:d2:d5: 20:75:d6:a9:a5:b9:71:db:ec:2b:e7:c7:62:dc:d9:d0:e0:4a: f1:ef:0c:86:47:fc:2d:14:a6:bb:da:64:58:f1:49:a0:a0:91: 78:55:57:56:cf:f9:06:9d:34:e3:a8:8e:c2:cd:3f:1a:0a:5b: b5:aa:91:c4:64:29:2d:5c:36:b2:5d:06:c1:23:b1:e2:44:c4: 13:33:e6:60:5b:3d:97:a1:28:14:02:15:c8:69:2c:d9:a6:0d: 28:74:17:22:4e:1a:aa:51:00:7d:73:01:09:4f:c1:d5:c6:63: f1:b2:c3:7e:bc:db:73:92:0f:ab:1a:9c:ed:e7:a8:fd:2a:d2: 8c:bb:ef:c3:73:3f:53:12:bf:d9:55:89:4a:da:13:d4:ca:29: 46:56:22:b1:14:cc:4c:8a:be:63:a3:57:66:c8:87:b0:cb:62: db:26:63:ec:68:e5:dc:93:eb:86:ae:1b:70:30:b9:ac:85:b7: ca:b1:f2:5a:2a:cb:12:5b:62:29:af:b9:3a:3f:05:b3:00:84: 21:bd:40:1a:8d:76:e6:9b:64:c3:d1:4e:85:33:97:e5:5d:dc: 24:23:76:f1:b4:fe:10:7b:21:6d:36:55:f2:75:48:40:b8:e0: 83:c1:69:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhrife4ziqDGjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ZGQ0NTVhYWYtNjkyNy00NWQ1LWEwZjctZDdmNzllZmFhNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYnwLI9V2kB9Ofh9144smxBXqRZ8YCUgVJeo Zb3H4C43SNLZjd2g9CXCrEAreXHTduFUZlBprBE29agn8HopK8hNt4RyHbMjUgUy yDD75Na0RjVpJsZfn3sgnlVX3KXJpOJU6RZa4/yFoW/W0EPG2IhUxcgUCnjMuK4c Y53Zj/4A9GYnQQ7Zwndhzwdy3Iu1aDmIeHsi+UqSCUlKauDI6bWU4E7aHpg6iCqG KknwTCTl4q3iZ1OTlAAmAFgk9cmI57gpfz0DOoDc6N93R+M8jfPWyNFNthfWr1FD IAl7iZn51xDAc08VUXsMQuibpvj7hHBLUcir1mAtH9BBJ9LqZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO2OgDOCwcaYBrab9GEGAklBtJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2FmZDFiYzEtZTY5YS0z NmZkLTlmODktYzgzZmEzN2Q2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmL2ymyznBHqV4KVQWzW9/S1SB11qmluXHb7Cvnx2Lc2dDgSvHvDIZH /C0UprvaZFjxSaCgkXhVV1bP+QadNOOojsLNPxoKW7WqkcRkKS1cNrJdBsEjseJE xBMz5mBbPZehKBQCFchpLNmmDSh0FyJOGqpRAH1zAQlPwdXGY/Gyw36823OSD6sa nO3nqP0q0oy778NzP1MSv9lViUraE9TKKUZWIrEUzEyKvmOjV2bIh7DLYtsmY+xo 5dyT64auG3AwuayFt8qx8loqyxJbYimvuTo/BbMAhCG9QBqNduabZMPRToUzl+Vd 3CQjdvG0/hB7IW02VfJ1SEC44IPBafs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:18 2025 by rpki-client