$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa File: fa64b528-4d5e-3048-93d6-79bf8737e58c.roa (raw, json) Hash identifier: OcqgS4gTQVWbEXqMqIDO8qZlnA0YbDOC4BYvZipsLrY= Subject key identifier: 1D:38:B2:4A:D8:46:66:18:E2:22:85:B2:0C:85:BA:1A:EA:E2:09:B2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7086106B73622E0AC3728000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 41264 IP address blocks: 104.133.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:10:6b:73:62:2e:0a:c3:72:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=5f07cd69-a641-4480-a1dc-284d066465de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:72:db:00:ea:0a:b7:3c:61:66:44:fa:1c: 56:bc:f4:bd:40:ab:c6:6d:cb:f0:ec:ef:df:f9:63: 74:99:d7:09:3d:f0:a9:71:ba:be:93:62:72:8c:1f: ba:86:e6:03:34:39:f0:fe:bd:03:6f:8c:48:13:19: 1e:24:6b:bb:94:f9:22:39:64:ff:f4:87:45:0d:10: 78:e9:a0:9f:51:03:1e:e2:7a:ca:a9:02:a8:d5:1c: 73:58:a1:fd:f2:46:db:41:d2:57:8f:32:02:49:0f: 51:cc:94:d9:7d:e8:5b:15:29:bf:78:b8:7a:4e:95: cd:95:c2:79:49:2f:cd:1d:df:fa:c5:a9:ce:eb:81: f3:2a:dc:cc:19:5f:e3:ff:bb:fc:fc:20:81:eb:53: 27:f3:02:dc:c8:69:7d:78:ee:fb:aa:d7:b6:35:5d: c3:93:48:a5:5f:a7:c5:5c:c2:82:82:98:61:20:fd: cb:7b:4f:6d:ab:c6:b8:20:d9:02:70:f0:8a:8e:22: 71:bb:d9:6c:86:20:f1:3f:1f:8a:5c:a5:41:71:0a: c5:35:b6:25:68:5d:37:35:95:6c:f6:8d:79:04:28: 87:05:1c:1f:bf:32:68:6a:9c:98:9a:c2:cd:e2:a5: c8:0f:0f:d3:43:5a:bf:2b:a4:5c:2a:fa:56:d5:6e: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:B2:4A:D8:46:66:18:E2:22:85:B2:0C:85:BA:1A:EA:E2:09:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:9d:eb:7b:e5:0c:3f:8d:68:71:4f:1b:1d:c0:1b:dc:40:4e: 9e:5d:07:e5:ee:2f:ee:01:2d:2e:f1:d5:d1:00:5b:19:ab:da: d8:d5:e1:09:24:61:6d:b3:11:ac:c6:c8:49:e6:8a:18:fa:7b: d7:af:bb:6f:37:d7:60:81:32:a8:a2:3b:81:60:cd:3a:0f:87: 38:c2:f4:e9:4f:04:96:8a:4d:ed:8f:11:4d:a0:87:37:7a:0c: 33:d5:40:97:ae:98:e8:ef:00:af:88:98:87:2c:5d:49:89:c4: 6c:c1:8d:b8:e1:e6:78:c9:34:49:d1:bb:f6:6e:1e:2d:f9:ef: cf:de:21:b3:a4:68:0b:d3:5d:b6:48:53:f2:2b:ef:84:61:0b: 27:e3:63:49:2f:9c:d5:87:7b:ee:c2:04:b0:a9:5d:4d:95:e4: af:14:ec:7e:61:ec:dc:80:f8:ba:6e:76:83:17:ea:c6:62:c7: 15:15:6b:08:00:95:da:41:26:90:23:7d:25:2b:db:96:aa:47: 47:42:bd:b4:81:e8:a2:be:2a:45:1e:c1:35:3c:83:d4:e9:d7: 7c:6c:74:e3:d1:81:51:e9:1f:67:19:6e:63:f4:9d:1a:f6:85: 6d:c2:19:76:c6:75:d7:f9:f7:c2:97:24:17:f9:31:37:70:8b: ed:2e:bc:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhBrc2IuCsNygAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk NWYwN2NkNjktYTY0MS00NDgwLWExZGMtMjg0ZDA2NjQ2NWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFdy2wDqCrc8YWZE+hxWvPS9QKvGbcvw7O/f +WN0mdcJPfCpcbq+k2JyjB+6huYDNDnw/r0Db4xIExkeJGu7lPkiOWT/9IdFDRB4 6aCfUQMe4nrKqQKo1RxzWKH98kbbQdJXjzICSQ9RzJTZfehbFSm/eLh6TpXNlcJ5 SS/NHd/6xanO64HzKtzMGV/j/7v8/CCB61Mn8wLcyGl9eO77qte2NV3Dk0ilX6fF XMKCgphhIP3Le09tq8a4INkCcPCKjiJxu9lshiDxPx+KXKVBcQrFNbYlaF03NZVs 9o15BCiHBRwfvzJoapyYmsLN4qXIDw/TQ1q/K6RcKvpW1W5CKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB04skrYRmYY4iKFsgyFuhrq4gmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmE2NGI1MjgtNGQ1ZS0z MDQ4LTkzZDYtNzliZjg3MzdlNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCd63vlDD+NaHFPGx3AG9xATp5dB+XuL+4BLS7x1dEAWxmr2tjV4Qkk YW2zEazGyEnmihj6e9evu28312CBMqiiO4FgzToPhzjC9OlPBJaKTe2PEU2ghzd6 DDPVQJeumOjvAK+ImIcsXUmJxGzBjbjh5njJNEnRu/ZuHi3578/eIbOkaAvTXbZI U/Ir74RhCyfjY0kvnNWHe+7CBLCpXU2V5K8U7H5h7NyA+LpudoMX6sZixxUVawgA ldpBJpAjfSUr25aqR0dCvbSB6KK+KkUewTU8g9Tp13xsdOPRgVHpH2cZbmP0nRr2 hW3CGXbGddf598KXJBf5MTdwi+0uvJU= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:06 2025 by rpki-client