$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa File: 16f0dc12-1d8d-394f-9b50-2a3247b35075.roa (raw, json) Hash identifier: xpSncWVyUgW+rdNpwOQr8Fql+U5HmMKebH2E7AnXMm4= Subject key identifier: 51:5A:44:F2:07:C0:FE:67:7B:BC:F7:7F:26:B9:70:11:F6:3D:15:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B2E5837A68321E658580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b2:e5:83:7a:68:32:1e:65:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=8ac14873-c79e-4505-b43f-4b240fa17929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7c:ac:f5:f4:0c:45:8a:a0:ef:43:c2:33:90: 8e:59:c7:fd:51:0d:39:6c:bc:07:44:94:5a:02:e3: 36:01:75:67:31:8f:69:f1:a3:0f:96:02:6e:fc:24: 5d:85:e7:76:98:bc:68:7e:38:56:13:30:18:f0:fd: 67:c2:05:32:de:e5:89:9b:aa:c9:85:8a:43:a4:d6: e2:e5:0f:d2:2d:fd:5e:c9:49:2e:58:06:2d:1c:6e: 2a:f8:93:b8:0c:13:cb:4e:c3:b8:10:54:ba:d5:df: b5:9e:49:a7:ed:62:12:c3:63:2c:fb:96:63:11:6b: a3:1e:9f:83:80:42:43:ae:95:14:79:c8:4f:c2:b3: 75:33:67:6c:b5:24:0a:57:99:e0:67:e3:1d:47:8c: 8f:19:cd:4e:85:da:c0:e1:18:b5:d1:37:b8:7e:fb: 91:20:e8:5f:66:fc:7c:c9:01:90:eb:25:01:67:95: 59:85:ca:b8:0e:c1:46:2f:9a:17:b9:43:ad:5c:f5: f8:49:44:af:e4:ad:85:9d:41:4f:b4:4d:42:ad:6c: c2:e9:c9:cd:f7:e1:71:92:d1:e8:44:b4:91:1f:83: c4:bc:29:87:55:c8:3f:0f:b8:7c:45:a9:dc:d7:e2: 29:51:b9:2d:9d:10:3e:09:59:f7:48:2b:86:0d:c3: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:44:F2:07:C0:FE:67:7B:BC:F7:7F:26:B9:70:11:F6:3D:15:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e3:97:be:9b:4a:26:09:4a:98:0a:62:10:09:cb:db:6f:f4: 71:a8:2b:9d:e2:bc:a4:e0:7d:98:90:97:0f:33:87:bb:52:54: b4:eb:92:8a:ad:ac:c2:c4:6c:38:bd:5b:e6:12:4b:2e:77:3f: 0c:3b:77:de:5e:d2:b4:02:8a:d5:ac:84:c0:e1:a7:79:2c:5a: 6c:98:61:e7:3c:8a:10:f7:40:0c:4e:cf:e4:65:ae:e5:56:0e: 7e:2e:8c:74:c0:d7:15:44:59:f8:04:b2:b8:41:17:af:8d:a6: a4:db:f8:9e:68:fe:7e:32:2a:49:e2:5c:ba:4c:0e:de:ae:e6: 91:63:12:c9:7c:2e:2e:ec:30:cd:72:7d:38:0d:17:4f:1a:57: 9e:28:e2:ad:9f:89:e8:d1:30:a2:f9:38:5a:d3:46:29:79:a0: 25:84:c4:c2:54:3c:39:42:41:f4:a9:49:5f:0d:61:c3:56:25: 54:86:87:56:e7:1b:88:3a:d4:7b:63:ad:ad:22:90:9a:eb:2e: 7e:7c:e0:9e:b3:dc:7d:b5:02:8f:f1:08:d2:3e:ca:d3:f2:e7: 95:e4:d5:fd:03:9f:29:f7:50:c6:a4:97:f7:db:de:2d:60:69: 8d:76:cc:86:e4:7c:9a:64:d0:d1:f1:31:f5:42:46:36:1b:28: d9:e4:a7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULLlg3poMh5lhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk OGFjMTQ4NzMtYzc5ZS00NTA1LWI0M2YtNGIyNDBmYTE3OTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Hys9fQMRYqg70PCM5COWcf9UQ05bLwHRJRa AuM2AXVnMY9p8aMPlgJu/CRdhed2mLxofjhWEzAY8P1nwgUy3uWJm6rJhYpDpNbi 5Q/SLf1eyUkuWAYtHG4q+JO4DBPLTsO4EFS61d+1nkmn7WISw2Ms+5ZjEWujHp+D gEJDrpUUechPwrN1M2dstSQKV5ngZ+MdR4yPGc1OhdrA4Ri10Te4fvuRIOhfZvx8 yQGQ6yUBZ5VZhcq4DsFGL5oXuUOtXPX4SUSv5K2FnUFPtE1CrWzC6cnN9+FxktHo RLSRH4PEvCmHVcg/D7h8Ranc1+IpUbktnRA+CVn3SCuGDcMaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFaRPIHwP5ne7z3fya5cBH2PRW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTZmMGRjMTItMWQ4ZC0z OTRmLTliNTAtMmEzMjQ3YjM1MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3jl76bSiYJSpgKYhAJy9tv9HGoK53ivKTgfZiQlw8zh7tSVLTrkoqt rMLEbDi9W+YSSy53Pww7d95e0rQCitWshMDhp3ksWmyYYec8ihD3QAxOz+RlruVW Dn4ujHTA1xVEWfgEsrhBF6+NpqTb+J5o/n4yKkniXLpMDt6u5pFjEsl8Li7sMM1y fTgNF08aV54o4q2fiejRMKL5OFrTRil5oCWExMJUPDlCQfSpSV8NYcNWJVSGh1bn G4g61Htjra0ikJrrLn584J6z3H21Ao/xCNI+ytPy55Xk1f0Dnyn3UMakl/fb3i1g aY12zIbkfJpk0NHxMfVCRjYbKNnkp6c= -----END CERTIFICATE-----Generated at Thu Jul 10 09:45:11 2025 by rpki-client