$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dd642af-3336-3758-b4e3-2a66c11e4cf7.roa File: 1dd642af-3336-3758-b4e3-2a66c11e4cf7.roa (raw, json) Hash identifier: tKJdHBxsUOufhXNhyZCVpXS5r7H9oB/YkEMKTQ3Cz3I= Subject key identifier: C8:22:27:9D:DB:DB:F0:92:9D:E4:44:E8:C5:0C:0A:15:9D:42:61:A2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B373829E7E7E7C872980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dd642af-3336-3758-b4e3-2a66c11e4cf7.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b3:73:82:9e:7e:7e:7c:87:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=0e4edb54-bf6a-4e91-b0f6-ccbf44080a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:7e:85:13:7c:c3:04:e0:1a:26:2d:c9:9f: fc:0a:b8:a9:23:78:a6:f8:16:52:31:b9:52:78:1b: 21:61:5c:9d:9a:26:9c:93:12:a6:4b:37:05:69:56: 88:ff:9e:01:f9:d9:7a:03:95:75:85:1d:65:3b:7e: 27:66:3e:67:04:55:2f:ab:e7:3e:2c:58:52:9d:66: 24:d4:7e:df:9b:84:ca:42:bd:7e:19:4d:bb:ba:1c: 75:bd:ea:cc:85:80:a7:54:32:bb:1a:c0:50:76:68: 55:6c:04:c8:41:a4:2f:06:d6:ee:96:96:d8:93:12: 02:6b:9f:ed:ea:77:e5:63:96:7a:9c:65:96:c6:ae: 89:2a:60:95:b3:24:ac:c4:e6:cc:75:42:ba:db:60: 5f:5b:3a:19:13:01:b4:dd:d9:dc:a4:ab:a5:60:7c: 08:2b:55:f8:f6:9d:93:7c:28:dc:78:a5:84:52:63: 97:07:bf:40:97:6a:2a:3c:5c:e8:58:67:04:46:4d: a5:df:67:13:91:10:4f:d6:9d:e0:86:fe:bb:58:6a: cc:54:ce:62:c2:46:cd:62:e6:46:00:93:05:fe:ce: 4a:8c:88:bf:26:94:e8:a2:b2:08:b8:9d:8f:52:97: db:ae:ae:7b:cf:3e:a5:6b:83:c0:14:56:a7:a7:f7: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:22:27:9D:DB:DB:F0:92:9D:E4:44:E8:C5:0C:0A:15:9D:42:61:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dd642af-3336-3758-b4e3-2a66c11e4cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:15:4b:16:28:9b:22:89:dd:1f:23:a0:fb:d2:2f:04:49:18: a3:e8:42:80:d7:bb:52:11:1a:b6:f5:59:7d:df:f3:66:ba:b3: 5e:a8:71:3d:b8:d3:65:71:c1:6c:cb:44:79:d3:06:a5:34:74: d4:08:53:db:f8:31:18:35:0a:3b:10:c8:9e:a7:50:9b:0d:24: f5:d8:f9:b7:cc:72:5b:8e:48:51:df:90:51:c9:92:09:cb:f0: 7d:e9:2f:87:8a:22:c8:97:2e:1d:46:73:3e:df:39:e3:22:28: ce:8d:39:d3:fc:54:cb:36:81:de:7d:b9:19:44:c1:4f:c7:8b: b3:88:20:69:6b:f9:75:42:e2:85:d5:7d:62:58:d0:8e:40:cf: c0:30:ef:55:40:d5:41:36:54:89:84:f9:81:80:0d:af:1d:38: dd:b6:19:f8:30:c5:24:54:1a:e8:91:f0:ab:fa:f2:c1:66:82: 63:8a:2d:ce:1c:ef:fa:68:78:29:68:1e:98:48:92:60:c3:50: c2:e9:93:6e:0b:ca:3d:c9:c2:61:6e:5e:92:c5:57:e7:19:14: 63:0e:be:ab:95:cb:a4:26:61:1c:dc:a2:5c:ec:bc:4f:57:88: 93:62:0a:ea:eb:ec:67:13:12:69:d3:b6:96:ae:7c:d2:d8:cc: ff:00:20:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULNzgp5+fnyHKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MGU0ZWRiNTQtYmY2YS00ZTkxLWIwZjYtY2NiZjQ0MDgwYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM5+hRN8wwTgGiYtyZ/8CripI3im+BZSMblS eBshYVydmiackxKmSzcFaVaI/54B+dl6A5V1hR1lO34nZj5nBFUvq+c+LFhSnWYk 1H7fm4TKQr1+GU27uhx1verMhYCnVDK7GsBQdmhVbATIQaQvBtbulpbYkxICa5/t 6nflY5Z6nGWWxq6JKmCVsySsxObMdUK622BfWzoZEwG03dncpKulYHwIK1X49p2T fCjceKWEUmOXB79Al2oqPFzoWGcERk2l32cTkRBP1p3ghv67WGrMVM5iwkbNYuZG AJMF/s5KjIi/JpToorIIuJ2PUpfbrq57zz6la4PAFFanp/fkmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgiJ53b2/CSneRE6MUMChWdQmGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWRkNjQyYWYtMzMzNi0z NzU4LWI0ZTMtMmE2NmMxMWU0Y2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsVSxYomyKJ3R8joPvSLwRJGKPoQoDXu1IRGrb1WX3f82a6s16ocT24 02VxwWzLRHnTBqU0dNQIU9v4MRg1CjsQyJ6nUJsNJPXY+bfMcluOSFHfkFHJkgnL 8H3pL4eKIsiXLh1Gcz7fOeMiKM6NOdP8VMs2gd59uRlEwU/Hi7OIIGlr+XVC4oXV fWJY0I5Az8Aw71VA1UE2VImE+YGADa8dON22GfgwxSRUGuiR8Kv68sFmgmOKLc4c 7/poeCloHphIkmDDUMLpk24Lyj3JwmFuXpLFV+cZFGMOvquVy6QmYRzcolzsvE9X iJNiCurr7GcTEmnTtpaufNLYzP8AID0= -----END CERTIFICATE-----Generated at Thu Jul 10 10:37:17 2025 by rpki-client