$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa File: d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa (raw, json) Hash identifier: BrtV3p6n0V+N8bJLM+cBGU+ndkOHn8AbxLmvY+pxjGU= Subject key identifier: 91:80:72:51:75:1A:3B:FE:EE:FE:E9:9A:60:D7:82:92:BC:BC:22:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A886CED8E9309D55D4C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a8:86:ce:d8:e9:30:9d:55:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c2cab044-5cdd-45ab-9dfb-44fd589f0199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:6c:d8:af:c9:dd:9b:3f:27:90:d3:95:41: 71:c8:fd:51:3f:af:01:b3:06:c0:dc:f6:21:2b:31: 46:9b:be:fe:6f:ce:f8:7e:87:d7:52:3d:02:8b:85: a9:c4:65:f4:a2:3a:bd:8f:65:7e:ba:44:78:fb:44: cd:16:24:ec:6b:07:72:21:91:e1:1c:92:91:bb:46: d1:85:20:70:d6:de:dd:bf:76:80:06:ef:30:99:8b: 56:76:88:60:f2:bb:d6:d8:62:1b:c0:a8:09:29:fe: b8:0b:ce:95:7b:86:cb:9f:ee:ad:9e:e0:71:c1:88: 58:2f:e9:bf:c4:2d:06:e4:6f:1b:e2:2c:16:93:5e: 49:99:3d:7e:f7:7d:76:89:65:ec:40:aa:cf:3e:aa: 40:fd:f5:5c:29:91:7b:3f:2a:72:4b:ea:0b:44:35: f7:f4:ee:a1:72:24:69:2f:a4:3d:92:bc:d1:ab:7d: c3:b0:97:61:9f:d4:d1:4d:4b:05:14:6a:35:a7:15: c9:23:97:31:4b:25:0a:14:d3:a6:89:d5:9b:ec:6f: 80:28:12:7d:83:93:a5:28:a8:a6:c0:e2:c8:4e:e4: fe:d0:29:49:eb:62:3b:ad:27:51:70:6f:d1:64:25: cf:94:ad:b9:bf:69:d3:26:d1:fe:20:88:32:42:5f: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:80:72:51:75:1A:3B:FE:EE:FE:E9:9A:60:D7:82:92:BC:BC:22:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d10bb535-0a69-30d4-bd3e-c3ad366549c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:8b:e4:d5:e1:9c:e4:24:19:41:01:c0:fb:cf:43:77:fc:82: 5d:1f:5e:eb:5d:2d:00:79:b0:7b:a8:9c:64:05:cb:30:45:f1: 89:64:fb:2b:13:88:10:69:b0:c2:28:42:ea:e4:b6:e8:94:36: bd:94:a1:bb:26:e5:1f:07:78:ff:0b:7d:c2:fc:16:0f:27:0f: 68:a6:da:05:2c:3f:84:8d:0e:b5:35:07:6f:df:35:0a:64:47: 72:e4:73:aa:d7:ef:8c:a9:74:7e:bb:9f:4d:1f:be:29:f7:69: af:a9:0c:48:6f:24:b7:17:82:03:b2:52:90:8c:a2:72:19:55: 53:de:a9:6f:e0:fa:ea:52:f6:69:bd:5f:77:bf:32:8e:96:b1: f9:b5:ab:f2:67:9d:1d:5e:8b:34:24:10:e0:c4:b6:e5:d2:1e: 39:0d:af:62:44:6a:a3:8c:48:5e:e2:43:01:a3:c6:81:69:e9: b7:91:9a:41:f7:e0:be:10:f8:37:06:1f:f7:43:40:28:dc:86: 9e:d9:87:1f:da:fe:47:b5:52:67:49:46:75:e7:cf:eb:3c:b1: 53:f2:58:a8:ec:ca:3b:31:aa:b0:57:ef:1c:e2:2c:01:3e:c0: 70:3e:b9:c9:16:f0:b3:fb:6d:2e:25:c6:a9:63:f6:d2:2c:9d: 9c:d3:91:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKiGztjpMJ1V1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzJjYWIwNDQtNWNkZC00NWFiLTlkZmItNDRmZDU4OWYwMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqBs2K/J3Zs/J5DTlUFxyP1RP68BswbA3PYh KzFGm77+b874fofXUj0Ci4WpxGX0ojq9j2V+ukR4+0TNFiTsawdyIZHhHJKRu0bR hSBw1t7dv3aABu8wmYtWdohg8rvW2GIbwKgJKf64C86Ve4bLn+6tnuBxwYhYL+m/ xC0G5G8b4iwWk15JmT1+9312iWXsQKrPPqpA/fVcKZF7PypyS+oLRDX39O6hciRp L6Q9krzRq33DsJdhn9TRTUsFFGo1pxXJI5cxSyUKFNOmidWb7G+AKBJ9g5OlKKim wOLITuT+0ClJ62I7rSdRcG/RZCXPlK25v2nTJtH+IIgyQl9FWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGAclF1Gjv+7v7pmmDXgpK8vCK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDEwYmI1MzUtMGE2OS0z MGQ0LWJkM2UtYzNhZDM2NjU0OWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKL5NXhnOQkGUEBwPvPQ3f8gl0fXutdLQB5sHuonGQFyzBF8Ylk+ysT iBBpsMIoQurktuiUNr2Uobsm5R8HeP8LfcL8Fg8nD2im2gUsP4SNDrU1B2/fNQpk R3Lkc6rX74ypdH67n00fvin3aa+pDEhvJLcXggOyUpCMonIZVVPeqW/g+upS9mm9 X3e/Mo6Wsfm1q/JnnR1eizQkEODEtuXSHjkNr2JEaqOMSF7iQwGjxoFp6beRmkH3 4L4Q+DcGH/dDQCjchp7Zhx/a/ke1UmdJRnXnz+s8sVPyWKjsyjsxqrBX7xziLAE+ wHA+uckW8LP7bS4lxqlj9tIsnZzTkec= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:49 2025 by rpki-client