$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e20df362-1a1f-3c7c-aec7-f5f6818c5b1c.roa File: e20df362-1a1f-3c7c-aec7-f5f6818c5b1c.roa (raw, json) Hash identifier: 4/Bzn4zWFefN0YkoYu4VdXElKT3KJ5F9IY5G2BruTDE= Subject key identifier: FE:75:52:75:43:FB:C8:DD:14:2D:09:4E:7E:B6:C5:53:D2:AD:52:6E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B0C312287B771838D000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e20df362-1a1f-3c7c-aec7-f5f6818c5b1c.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b0:c3:12:28:7b:77:18:38:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=f22aef21-1af7-4daf-84a7-d0a6ca41e172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:ac:8a:d8:5f:34:a4:13:55:d2:8d:95:be: a6:a8:3f:20:0f:82:5b:d6:09:5c:d3:98:8f:ba:dc: c9:6b:bf:50:91:24:52:d3:ba:0b:e7:0c:83:2c:64: 91:cb:d4:ee:4a:f3:bc:d4:ce:55:5b:a0:18:22:91: 9e:14:3e:a7:20:17:9b:c9:dd:11:bb:2a:33:33:af: df:bd:21:46:8e:f0:63:5e:2b:6e:d4:fd:45:0c:aa: 18:80:73:43:59:44:50:2d:f1:b5:ed:89:52:b3:a8: 89:de:4c:f5:6a:65:a1:77:56:21:d7:fb:f4:c2:85: 28:f5:b2:50:ff:fe:1b:f7:2f:36:ef:14:af:2a:a9: a7:f1:4e:5a:3a:d5:ec:de:14:bd:b3:95:58:7c:81: 05:82:22:3f:4d:05:43:f7:30:19:9b:ea:b2:52:42: cf:1f:33:a3:4f:c9:99:65:90:a4:8c:3e:8a:b0:84: 94:b7:1b:24:ea:a4:e8:12:1f:5a:8b:88:41:8d:c9: 62:01:d0:ae:5e:dc:21:32:81:55:82:b9:da:9f:37: f0:b4:0a:d0:17:80:79:01:62:a7:69:9d:31:fa:1d: 19:3b:a2:1e:5f:9c:73:85:b8:bf:4e:15:35:9e:32: e1:7a:70:25:26:ec:98:3c:2a:60:6e:38:07:00:0f: 91:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:75:52:75:43:FB:C8:DD:14:2D:09:4E:7E:B6:C5:53:D2:AD:52:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e20df362-1a1f-3c7c-aec7-f5f6818c5b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:e6:9f:9c:fe:07:6b:59:ac:87:e1:32:72:db:eb:b8:d4: dc:8d:5b:bb:62:24:cb:d0:8c:7e:4d:8a:00:ad:85:19:84:ba: cb:ba:34:f2:c8:04:08:c7:c2:63:ab:10:63:31:ef:c0:04:2f: c5:4b:dd:bb:f4:b4:a8:8c:90:6a:9a:b8:4f:5d:85:43:ab:d5: 95:52:17:a2:6b:6a:af:5a:36:dd:b5:2b:d2:35:b2:84:12:2d: 5e:b0:40:c7:12:c1:76:09:2d:15:fe:0b:59:89:ff:af:8e:c6: 37:b5:9d:24:4e:fb:6e:f9:29:8b:3d:01:b8:34:46:ee:61:75: d8:d7:3d:e7:de:8c:74:3e:ea:74:e4:40:48:0d:ab:ca:69:34: 44:4f:1e:ce:d3:0a:aa:1f:0b:3b:d6:68:d6:9a:6b:ff:b2:c7: e6:c4:82:51:f9:6a:1d:5f:a7:fe:88:49:27:8f:0e:f3:1f:f4: 5c:d4:87:c7:14:4f:a6:3d:49:c1:58:82:9a:87:9a:7b:3c:ba: d1:3c:57:7d:45:bd:4d:7c:a2:58:41:be:36:85:2b:ce:d2:47: 1a:f0:aa:70:6d:85:e0:00:cf:d2:21:b6:66:e9:f2:7a:49:2a: 1c:0e:25:e3:0b:f7:70:77:4f:4a:f4:45:1f:a1:03:f3:39:ed: 34:9c:26:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULDDEih7dxg40AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjIyYWVmMjEtMWFmNy00ZGFmLTg0YTctZDBhNmNhNDFlMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIGsithfNKQTVdKNlb6mqD8gD4Jb1glc05iP utzJa79QkSRS07oL5wyDLGSRy9TuSvO81M5VW6AYIpGeFD6nIBebyd0RuyozM6/f vSFGjvBjXitu1P1FDKoYgHNDWURQLfG17YlSs6iJ3kz1amWhd1Yh1/v0woUo9bJQ //4b9y827xSvKqmn8U5aOtXs3hS9s5VYfIEFgiI/TQVD9zAZm+qyUkLPHzOjT8mZ ZZCkjD6KsISUtxsk6qToEh9ai4hBjcliAdCuXtwhMoFVgrnanzfwtArQF4B5AWKn aZ0x+h0ZO6IeX5xzhbi/ThU1njLhenAlJuyYPCpgbjgHAA+RVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP51UnVD+8jdFC0JTn62xVPSrVJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTIwZGYzNjItMWExZi0z YzdjLWFlYzctZjVmNjgxOGM1YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9/5p+c/gdrWayH4TJy2+u41NyNW7tiJMvQjH5NigCthRmEusu6NPLI BAjHwmOrEGMx78AEL8VL3bv0tKiMkGqauE9dhUOr1ZVSF6Jraq9aNt21K9I1soQS LV6wQMcSwXYJLRX+C1mJ/6+Oxje1nSRO+275KYs9Abg0Ru5hddjXPefejHQ+6nTk QEgNq8ppNERPHs7TCqofCzvWaNaaa/+yx+bEglH5ah1fp/6ISSePDvMf9FzUh8cU T6Y9ScFYgpqHmns8utE8V31FvU18olhBvjaFK87SRxrwqnBtheAAz9Ihtmbp8npJ KhwOJeML93B3T0r0RR+hA/M57TScJsM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:03:51 2025 by rpki-client