$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa File: 20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa (raw, json) Hash identifier: ycqxldNIA/lskFRjeOgO0r/dp+o1maoc1v32uquTcYI= Subject key identifier: D8:F2:4B:F1:AF:53:C3:D6:73:4C:AF:B4:50:84:5B:A0:6B:41:17:54 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B2BAABB4935CEDE01580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b2:ba:ab:b4:93:5c:ed:e0:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=1e552523-7a49-4bcb-ace8-86888343e7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:3a:ee:7d:9f:2a:9a:2b:08:3d:16:22:f1: e2:a7:d0:23:aa:cf:37:bb:c6:91:f2:ae:b4:af:8f: b2:36:04:44:e2:5c:f8:f9:7a:e7:f4:3f:36:c0:a4: 73:4c:78:20:05:6b:72:41:ab:52:02:65:07:69:71: 17:b7:29:2f:c3:c4:16:d6:d1:5c:69:04:33:60:49: 79:5e:ac:af:52:bc:50:2e:51:c1:15:7b:cf:2b:4e: 4c:13:75:81:01:99:ab:d3:08:5f:9d:18:0a:12:df: af:a1:91:bb:af:d9:f2:8c:6a:18:b4:fd:2c:4d:4e: 87:54:f5:50:ce:7c:38:75:0b:47:ea:2c:0b:8f:9d: 02:67:c7:68:eb:c1:96:b6:c5:76:50:41:43:89:05: 52:6c:b3:24:36:da:b2:5b:48:3d:39:ec:9e:1b:cd: ba:20:c7:2a:c0:40:72:5c:d1:7a:70:be:c1:05:c9: be:f3:e1:b1:a8:2f:55:f3:a9:51:6e:72:4e:8c:50: cd:12:da:c9:65:de:bb:d4:dd:7f:f2:34:01:15:86: 04:6e:df:9a:fd:7b:3a:3a:8a:a8:55:05:d6:f1:e8: 0a:9b:33:f0:e0:02:88:f0:bc:c3:3e:3e:2d:47:56: 51:0d:6a:24:43:2c:66:42:46:eb:b1:30:52:00:3b: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F2:4B:F1:AF:53:C3:D6:73:4C:AF:B4:50:84:5B:A0:6B:41:17:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8f:46:e9:be:ab:88:25:f8:73:f3:6a:1d:bb:e7:59:a4:94: 47:ee:48:ff:98:29:76:e3:3c:13:14:37:0b:21:ad:ea:3c:79: e4:69:a4:c8:d8:e2:ee:65:3c:6a:7d:e3:b6:5f:f5:3c:4f:af: 8a:40:21:07:67:a7:92:a4:2d:91:21:98:9a:21:fe:d5:12:46: 79:a4:6c:03:01:c4:fd:43:ff:9e:72:76:03:d4:47:9e:6f:53: f5:6b:51:c1:41:33:4c:a8:92:23:21:10:a9:81:da:2d:9c:66: 11:fd:6b:a4:1b:f4:99:88:d6:1d:52:03:99:d8:47:9b:96:76: ca:cd:29:e0:bc:f6:72:4f:00:49:d0:13:c4:23:91:57:e4:f0: f2:a7:36:ca:00:45:15:2a:cd:62:21:33:97:eb:5b:e6:d1:55: c0:80:31:c3:3d:fa:53:ae:39:91:c7:ce:f2:af:72:1a:85:98: cc:0f:28:e5:bd:ab:6a:a0:70:b3:a1:4b:ed:5a:bd:43:fd:b7: d5:33:26:6a:a9:e4:63:49:84:c3:a5:98:7e:ed:57:dd:35:58: b9:6a:ab:0e:47:58:63:fd:f9:08:6c:2b:82:0e:32:ea:7a:40: 07:7f:cf:16:44:38:ae:de:56:aa:60:53:c3:6f:81:dd:60:de: 30:67:6b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULK6q7STXO3gFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MWU1NTI1MjMtN2E0OS00YmNiLWFjZTgtODY4ODgzNDNlN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli867n2fKporCD0WIvHip9Ajqs83u8aR8q60 r4+yNgRE4lz4+Xrn9D82wKRzTHggBWtyQatSAmUHaXEXtykvw8QW1tFcaQQzYEl5 XqyvUrxQLlHBFXvPK05ME3WBAZmr0whfnRgKEt+voZG7r9nyjGoYtP0sTU6HVPVQ znw4dQtH6iwLj50CZ8do68GWtsV2UEFDiQVSbLMkNtqyW0g9OeyeG826IMcqwEBy XNF6cL7BBcm+8+GxqC9V86lRbnJOjFDNEtrJZd671N1/8jQBFYYEbt+a/Xs6Ooqo VQXW8egKmzPw4AKI8LzDPj4tR1ZRDWokQyxmQkbrsTBSADv75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjyS/GvU8PWc0yvtFCEW6BrQRdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjBkZjA3ZTUtYzQxOS0z ZDNkLTkzNzctNGI1MmZjNTliNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiPRum+q4gl+HPzah2751mklEfuSP+YKXbjPBMUNwshreo8eeRppMjY 4u5lPGp947Zf9TxPr4pAIQdnp5KkLZEhmJoh/tUSRnmkbAMBxP1D/55ydgPUR55v U/VrUcFBM0yokiMhEKmB2i2cZhH9a6Qb9JmI1h1SA5nYR5uWdsrNKeC89nJPAEnQ E8QjkVfk8PKnNsoARRUqzWIhM5frW+bRVcCAMcM9+lOuOZHHzvKvchqFmMwPKOW9 q2qgcLOhS+1avUP9t9UzJmqp5GNJhMOlmH7tV901WLlqqw5HWGP9+QhsK4IOMup6 QAd/zxZEOK7eVqpgU8Nvgd1g3jBna+Q= -----END CERTIFICATE-----Generated at Thu Jul 10 09:19:04 2025 by rpki-client