$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa File: bd8071dc-d868-3f91-a4bc-822224a2e269.roa (raw, json) Hash identifier: vGcvLhaTqCBK9BsJZ0w0IEzNzuMSXtFyca5muIJjt5s= Subject key identifier: 20:6C:CE:D6:A4:CB:1A:E4:C6:35:EF:BC:B2:24:5E:32:56:72:DF:A4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584AC0164DDBC23D4E82D21DA400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 395973 IP address blocks: 104.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4d:db:c2:3d:4e:82:d2:1d:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=2b61cc18-4183-40e4-a490-73937c3dc6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:84:e1:80:59:e1:91:87:c6:21:c6:a5:59:29: 6e:95:4f:9d:06:bc:dd:5a:ad:7f:be:5c:ac:10:41: f5:c0:9c:a3:93:41:a9:a6:1a:ab:c2:00:99:27:3b: 95:82:73:93:d7:da:a0:d1:5b:e4:f6:43:61:16:16: 9b:a4:ae:c1:a4:ad:a2:23:9f:0b:a2:ae:db:f7:ef: af:83:2e:58:90:e3:26:25:8f:07:e2:6b:b8:72:5a: e0:92:0f:9c:3e:81:14:8a:24:6d:be:44:4e:a2:94: 01:19:76:37:84:3e:6f:81:c0:3e:b6:b5:7f:81:bb: 7f:6e:1d:f6:c8:90:a3:40:cb:e7:9b:89:0b:c9:19: d9:72:b0:0b:1d:3b:cc:c0:d6:95:f1:c1:f2:69:00: a6:e3:e3:b6:22:3e:13:4a:16:28:8f:2a:b3:56:94: 7e:8d:39:ff:38:c3:9e:71:f9:48:c4:86:ca:2c:b9: c5:c1:62:35:24:1e:84:21:5d:73:69:26:de:a0:35: 17:3f:33:65:ad:37:38:c0:bb:01:f1:01:72:1d:8d: af:63:15:9e:a7:43:46:b0:e1:c3:62:08:07:94:71: 07:76:18:bc:56:65:b3:1c:d1:26:4e:b1:7a:6c:a4: 49:41:a5:42:cf:6f:2d:c5:4e:30:26:9f:aa:6f:75: e1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6C:CE:D6:A4:CB:1A:E4:C6:35:EF:BC:B2:24:5E:32:56:72:DF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:49:b6:ce:62:a4:59:e0:fa:c6:ba:73:32:54:dd:ac:55:0f: 2f:b1:a9:63:bc:8e:30:8a:a7:08:3b:7c:ac:f2:b6:a0:36:98: 09:4d:81:33:f2:62:fa:6a:5b:2a:50:4a:0c:ec:dc:6e:2f:a2: ca:bb:52:b6:86:04:47:59:84:d7:63:bd:b8:20:5a:8e:ab:32: f1:5a:0e:0d:a9:71:aa:54:e5:cc:75:ab:00:18:45:49:23:a1: a3:ba:db:43:01:53:7a:f9:aa:75:45:19:56:e0:90:1f:5f:2b: 5d:a7:c4:e2:52:df:42:0a:6e:ec:31:2c:a6:af:9b:23:be:4c: 43:a4:68:22:a5:6e:9b:06:50:c5:a2:54:67:8b:2f:c2:ef:b3: 9f:ca:35:09:93:04:e2:24:70:3e:9f:45:9b:77:a3:cc:b4:49: c0:a9:1a:62:63:7a:e7:d3:4a:ca:8f:48:4c:a4:71:28:88:75: 2a:d3:a1:23:90:a1:be:c5:08:8e:6f:b0:06:34:b7:e1:95:2e: 39:4c:45:50:76:6b:bf:f9:4b:64:1b:d6:1c:82:e1:73:14:b0: fb:e8:40:9d:c6:13:ef:63:b7:86:27:bc:6a:09:13:1d:da:7d: 86:3c:a2:7a:29:2d:0c:c3:2c:d9:b9:8c:e8:41:f9:19:8d:7c: 2b:e0:28:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk3bwj1OgtIdpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MmI2MWNjMTgtNDE4My00MGU0LWE0OTAtNzM5MzdjM2RjNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ThgFnhkYfGIcalWSlulU+dBrzdWq1/vlys EEH1wJyjk0GpphqrwgCZJzuVgnOT19qg0Vvk9kNhFhabpK7BpK2iI58Loq7b9++v gy5YkOMmJY8H4mu4clrgkg+cPoEUiiRtvkROopQBGXY3hD5vgcA+trV/gbt/bh32 yJCjQMvnm4kLyRnZcrALHTvMwNaV8cHyaQCm4+O2Ij4TShYojyqzVpR+jTn/OMOe cflIxIbKLLnFwWI1JB6EIV1zaSbeoDUXPzNlrTc4wLsB8QFyHY2vYxWep0NGsOHD YggHlHEHdhi8VmWzHNEmTrF6bKRJQaVCz28txU4wJp+qb3XhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBsztakyxrkxjXvvLIkXjJWct+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmQ4MDcxZGMtZDg2OC0z ZjkxLWE0YmMtODIyMjI0YTJlMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZJts5ipFng+sa6czJU3axVDy+xqWO8jjCKpwg7fKzytqA2mAlNgTPy YvpqWypQSgzs3G4vosq7UraGBEdZhNdjvbggWo6rMvFaDg2pcapU5cx1qwAYRUkj oaO620MBU3r5qnVFGVbgkB9fK12nxOJS30IKbuwxLKavmyO+TEOkaCKlbpsGUMWi VGeLL8Lvs5/KNQmTBOIkcD6fRZt3o8y0ScCpGmJjeufTSsqPSEykcSiIdSrToSOQ ob7FCI5vsAY0t+GVLjlMRVB2a7/5S2Qb1hyC4XMUsPvoQJ3GE+9jt4YnvGoJEx3a fYY8onopLQzDLNm5jOhB+RmNfCvgKNk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:02:55 2025 by rpki-client