$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa File: fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa (raw, json) Hash identifier: eg7hDHsOmbnE/RjlQkbKD++0XDPTgAvkxXbp6oPdjSU= Subject key identifier: E9:E3:6A:C9:F4:2A:8C:59:5E:61:97:D1:41:67:0B:C2:4B:F6:58:D6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B576811F67DC2A91F480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b5:76:81:1f:67:dc:2a:91:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=902906ec-dc70-4460-a1fe-031af7faf283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:bf:6a:17:a7:1a:6f:52:b2:f2:b0:78:19: 8c:28:32:cb:4d:26:c9:30:3f:e0:94:e3:a6:8b:f6: d8:30:f2:c2:bc:fb:76:66:1d:96:b7:44:1c:4d:83: 16:b3:20:17:ef:40:1d:3a:a6:a7:6b:ac:0c:7c:96: 79:ae:28:e1:97:11:97:84:a3:e8:d0:d0:22:e4:c4: 3a:3c:fd:6f:8d:1b:68:ee:06:e3:71:2f:d5:aa:8b: e3:49:4c:5a:7f:7a:d3:ed:58:08:ce:67:86:44:79: cc:28:6d:55:5f:cc:3c:dc:cc:8e:91:95:61:f1:bd: cd:13:73:02:df:5a:39:c8:6e:61:00:a2:23:a9:54: 6b:2b:da:88:c2:76:ce:f8:c7:40:b4:a6:c4:c5:ef: 8e:e6:2a:d9:4d:23:53:fb:6a:2d:11:23:9b:cb:1b: c9:60:08:55:64:fe:3d:90:d9:5c:b2:c3:b1:33:fd: c5:dd:69:b6:4e:f2:ee:3b:76:a5:e9:52:1b:33:07: 85:58:c7:63:f7:60:9b:42:7a:b8:b3:da:38:f0:53: 8b:ce:4b:d9:80:dd:bf:a1:34:31:a9:43:33:5a:93: 3d:97:22:4a:28:d6:a6:00:c1:d4:2c:c0:0f:35:c7: 17:4b:b5:34:1f:4b:92:d4:69:e7:f1:e6:c4:85:4f: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E3:6A:C9:F4:2A:8C:59:5E:61:97:D1:41:67:0B:C2:4B:F6:58:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:8f:93:d0:d4:b0:96:10:e8:16:65:07:02:9c:9e:4c:a3:17: f3:1d:39:45:aa:a5:ed:d8:f9:de:fb:11:0e:89:ff:a6:e4:98: 2e:11:70:ac:17:38:57:e8:bb:e5:7a:7b:58:0f:46:dc:2e:f5: 94:ef:d7:a0:4a:8f:0c:e7:dd:cb:4d:5c:9f:32:14:53:d9:de: 15:b5:05:b9:bd:9f:e6:ae:d9:d2:79:1d:e4:f2:df:99:ab:a3: d1:58:a1:d5:e7:6a:b4:b2:76:f6:d0:4b:b3:78:ad:50:7e:03: ce:95:03:e7:18:67:12:e2:54:61:56:ca:c6:74:8f:29:ed:06: dc:d3:e4:c9:06:f9:5e:18:be:8f:9d:5a:41:5e:45:83:a1:29: d6:aa:ce:17:fe:f7:6f:b1:39:ae:fa:0d:b9:bd:46:41:ec:2d: c4:c4:9a:6b:03:3c:c4:70:c7:f0:63:e6:f6:f8:e1:ca:e6:10: 81:a9:44:ad:44:0b:28:c1:f6:be:24:ab:b5:b9:1a:7c:c7:13: e9:5e:78:11:ef:64:e1:ed:8e:88:41:a1:71:71:37:b4:52:b2: 06:89:da:d0:fd:9e:78:7a:9c:02:74:56:c8:73:47:38:4a:09: 79:6a:bc:4b:a5:37:66:ad:0b:b8:e6:2e:fd:08:eb:94:cf:5f: 76:65:ef:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULV2gR9n3CqR9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk OTAyOTA2ZWMtZGM3MC00NDYwLWExZmUtMDMxYWY3ZmFmMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfC/ahenGm9SsvKweBmMKDLLTSbJMD/glOOm i/bYMPLCvPt2Zh2Wt0QcTYMWsyAX70AdOqana6wMfJZ5rijhlxGXhKPo0NAi5MQ6 PP1vjRto7gbjcS/VqovjSUxaf3rT7VgIzmeGRHnMKG1VX8w83MyOkZVh8b3NE3MC 31o5yG5hAKIjqVRrK9qIwnbO+MdAtKbExe+O5irZTSNT+2otESObyxvJYAhVZP49 kNlcssOxM/3F3Wm2TvLuO3al6VIbMweFWMdj92CbQnq4s9o48FOLzkvZgN2/oTQx qUMzWpM9lyJKKNamAMHULMAPNccXS7U0H0uS1Gnn8ebEhU9/PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnjasn0KoxZXmGX0UFnC8JL9ljWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmJmYzkxZjMtYWZlZS0z ZDQzLWFjNzAtMTZhMTE4ZWI3MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCPk9DUsJYQ6BZlBwKcnkyjF/MdOUWqpe3Y+d77EQ6J/6bkmC4RcKwX OFfou+V6e1gPRtwu9ZTv16BKjwzn3ctNXJ8yFFPZ3hW1Bbm9n+au2dJ5HeTy35mr o9FYodXnarSydvbQS7N4rVB+A86VA+cYZxLiVGFWysZ0jyntBtzT5MkG+V4Yvo+d WkFeRYOhKdaqzhf+92+xOa76Dbm9RkHsLcTEmmsDPMRwx/Bj5vb44crmEIGpRK1E CyjB9r4kq7W5GnzHE+leeBHvZOHtjohBoXFxN7RSsgaJ2tD9nnh6nAJ0VshzRzhK CXlqvEulN2atC7jmLv0I65TPX3Zl76Q= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:50 2025 by rpki-client