$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa File: f0440698-04bf-35f0-99b8-a957ee70ef6d.roa (raw, json) Hash identifier: 5XvNN8YO5PIoMSJgD36N1dIQESFDZzWVGkwfSQztuXw= Subject key identifier: 24:F0:56:6B:3E:A1:D9:EB:3A:E3:10:C4:1F:C7:01:6A:6E:DC:EB:23 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A70860D3036F6B4E17816C580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 41264 IP address blocks: 104.133.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:0d:30:36:f6:b4:e1:78:16:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=120e1fac-3691-4491-a845-b2dff2e78028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a4:7f:2b:04:07:77:c9:ba:ac:e9:a0:63:16: 39:99:b7:5d:cf:ef:c8:25:3a:04:5f:b4:01:7e:51: b8:1e:c8:eb:60:04:73:5a:c1:a0:53:c3:d7:a9:70: 27:e2:b0:b2:d9:f9:40:30:f4:d7:4f:21:a6:1b:ce: 6c:fb:67:6e:e8:e8:36:97:7d:fe:f0:13:6c:3e:14: ea:f8:09:23:ac:92:19:6f:89:5b:5f:73:86:7e:57: da:10:a1:51:dc:e5:6c:84:3f:6f:f1:72:36:3c:01: 05:bb:69:1a:d1:9a:90:e7:7c:a6:3d:d6:77:f6:8b: 70:e0:75:2d:b2:a9:f1:5d:ea:00:be:42:40:7d:48: ef:fd:dc:55:2a:5c:b9:fa:66:e5:f0:26:91:65:80: 17:e9:21:d9:36:4d:62:ba:92:e0:32:91:89:9f:3c: b4:56:d1:3e:35:a4:87:e2:09:2f:f3:8a:43:5d:f6: d3:01:09:47:84:88:fa:e8:7a:2e:30:b7:fb:ca:ac: eb:bd:7d:1b:75:03:ca:ad:03:c4:b1:7b:b5:f5:fa: 26:d7:6f:d4:15:2e:c3:87:ad:3b:40:9d:9f:ac:4f: 0b:08:90:51:ba:f2:1d:4f:84:78:a0:f9:d2:cc:7d: 33:5e:8c:4d:06:a0:18:7e:3a:6f:39:bd:1f:48:1d: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:56:6B:3E:A1:D9:EB:3A:E3:10:C4:1F:C7:01:6A:6E:DC:EB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:55:fb:8c:21:bd:60:5f:4c:90:b4:eb:f8:52:b1:89:87:c8: 6b:cd:db:e9:0c:fe:44:8a:4e:0b:57:d5:c4:18:0f:ee:25:58: 81:55:03:de:a1:de:50:2e:57:29:7f:c1:7e:ac:a0:56:12:9f: e4:75:96:00:af:00:85:0d:99:18:8b:70:70:e7:2e:af:91:23: 80:67:2f:a6:48:40:b9:72:30:ba:d2:98:12:ce:c9:e5:94:d0: ae:79:2e:a2:f0:d9:63:31:95:0c:b1:05:19:c2:d4:8b:8d:59: 93:5f:dc:e9:ac:90:78:23:0c:f3:a7:f0:4c:65:3a:92:07:c3: 69:c7:22:03:9a:16:3b:c5:d7:3c:a7:f4:b4:22:e5:fc:e6:18: 87:9b:59:c7:f0:c8:4c:7e:3f:8e:84:93:d2:39:3f:31:9c:3d: 46:f3:e0:a9:95:6d:a7:37:b6:ef:1e:73:c0:b8:0a:3e:14:a2: 4e:95:4b:8c:e3:da:9e:9c:13:ce:b4:a6:eb:62:39:11:fe:a0: 5d:2b:84:d5:40:6b:ac:6f:2c:75:9e:4a:6f:c4:70:d7:ce:5c: bd:1c:1e:00:b3:dc:99:c0:73:51:de:dc:d7:82:7e:07:c8:42: 31:23:80:14:60:5c:db:12:84:0d:10:5c:2f:6a:24:3e:64:3e: 85:8a:71:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhg0wNva04XgWxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk MTIwZTFmYWMtMzY5MS00NDkxLWE4NDUtYjJkZmYyZTc4MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aR/KwQHd8m6rOmgYxY5mbddz+/IJToEX7QB flG4HsjrYARzWsGgU8PXqXAn4rCy2flAMPTXTyGmG85s+2du6Og2l33+8BNsPhTq +AkjrJIZb4lbX3OGflfaEKFR3OVshD9v8XI2PAEFu2ka0ZqQ53ymPdZ39otw4HUt sqnxXeoAvkJAfUjv/dxVKly5+mbl8CaRZYAX6SHZNk1iupLgMpGJnzy0VtE+NaSH 4gkv84pDXfbTAQlHhIj66HouMLf7yqzrvX0bdQPKrQPEsXu19fom12/UFS7Dh607 QJ2frE8LCJBRuvIdT4R4oPnSzH0zXoxNBqAYfjpvOb0fSB2hXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTwVms+odnrOuMQxB/HAWpu3OsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjA0NDA2OTgtMDRiZi0z NWYwLTk5YjgtYTk1N2VlNzBlZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9V+4whvWBfTJC06/hSsYmHyGvN2+kM/kSKTgtX1cQYD+4lWIFVA96h 3lAuVyl/wX6soFYSn+R1lgCvAIUNmRiLcHDnLq+RI4BnL6ZIQLlyMLrSmBLOyeWU 0K55LqLw2WMxlQyxBRnC1IuNWZNf3OmskHgjDPOn8ExlOpIHw2nHIgOaFjvF1zyn 9LQi5fzmGIebWcfwyEx+P46Ek9I5PzGcPUbz4KmVbac3tu8ec8C4Cj4Uok6VS4zj 2p6cE860putiORH+oF0rhNVAa6xvLHWeSm/EcNfOXL0cHgCz3JnAc1He3NeCfgfI QjEjgBRgXNsShA0QXC9qJD5kPoWKcRI= -----END CERTIFICATE-----Generated at Wed Aug 6 00:34:18 2025 by rpki-client