$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa File: 2e33a78a-a08a-30af-89e7-9b336e2d0057.roa (raw, json) Hash identifier: 9mTiy1pxxRwQlZMcrRGcTpHtHM4HCn0Lgz7wmKhlwQM= Subject key identifier: 9D:08:65:48:6E:7D:CD:41:AE:4F:AC:D0:29:FC:52:A3:04:FC:68:44 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A8CB1B20D944A322BAA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a8:cb:1b:20:d9:44:a3:22:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=263a4071-d41d-42a5-917d-c6b5bb5ee15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:f4:85:f5:8f:86:07:89:43:42:2c:ca:35: 10:84:95:2d:7d:d6:41:e3:bf:e9:3c:11:b1:ff:8d: 79:75:d3:7a:39:8b:ab:03:09:58:4d:66:c7:49:e3: 1d:e9:34:fa:57:58:f0:74:0b:05:29:92:0a:6d:b5: fe:f0:22:59:26:32:6c:f1:75:2f:54:7c:e3:e4:2a: 91:bc:92:1e:0f:cd:8a:5b:13:d3:8b:5c:31:24:2e: cf:74:a9:d1:22:23:85:90:29:1b:be:28:b7:8b:c3: e2:fd:76:5b:a3:92:be:bf:87:89:76:b4:82:c6:09: 5e:90:e7:a4:27:7b:86:f6:4d:e1:c6:d6:a7:57:20: ad:79:47:75:56:e9:44:9d:1b:2c:20:5a:6b:2f:ee: ef:d1:61:bf:9e:a5:41:e3:7a:9c:ee:bb:b0:24:20: 32:75:d8:81:36:46:f5:8a:f5:fe:f2:34:de:4c:7d: 12:65:37:fb:94:cc:45:43:84:96:c6:32:f0:46:36: db:88:a8:68:a4:ef:e3:f7:20:c3:90:77:76:ee:8f: 99:3d:07:d6:00:1e:c5:c0:c3:ce:60:23:16:60:15: 47:b9:07:99:35:15:b5:1d:e5:ba:1c:ff:d1:e8:5c: 3c:57:f4:7e:4a:f4:c1:3f:7c:33:00:88:98:e3:19: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:65:48:6E:7D:CD:41:AE:4F:AC:D0:29:FC:52:A3:04:FC:68:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:72:ee:73:a0:dc:01:95:d8:de:b1:4d:e7:da:6d:83:57:84: 9f:3f:33:22:1c:15:8c:26:dd:2e:a4:79:da:15:a7:01:43:d4: e9:e3:6b:1a:11:ea:76:d7:75:47:35:97:9f:8b:a0:99:fa:ed: 67:8c:54:da:53:00:ea:40:cb:b0:74:1e:3e:39:5e:c6:e9:75: 29:03:24:2e:35:26:de:9a:89:b4:80:b9:48:c3:11:dc:4f:7b: 34:cc:f8:c5:a3:75:51:fc:29:c3:32:4a:88:d2:b5:de:44:7f: 91:2f:4e:c8:81:5e:6b:56:6d:42:22:d4:ab:fe:12:28:fe:89: 1e:1a:29:39:87:fa:51:9a:86:39:4b:59:4c:72:f7:65:ad:b7: 79:1e:85:87:b7:35:42:33:47:09:12:ea:6b:10:6b:38:e4:3a: da:85:fb:4a:19:51:6e:a0:b6:dd:81:fc:c9:8b:c1:c7:fc:1b: 3c:7d:36:5b:a3:03:23:b6:a0:88:0f:14:0e:f6:35:c2:9a:8e: 21:ab:bc:63:73:b6:4b:55:92:bd:78:3f:5f:37:4f:0a:cc:90: 83:ed:2c:88:3c:75:2e:13:39:de:fb:a5:ed:5b:5b:ff:bf:57: 82:a1:06:23:3a:fd:57:37:67:7c:ca:9a:75:4d:29:b5:0d:7c: 6a:ed:81:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKjLGyDZRKMiuqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk MjYzYTQwNzEtZDQxZC00MmE1LTkxN2QtYzZiNWJiNWVlMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQj0hfWPhgeJQ0IsyjUQhJUtfdZB47/pPBGx /415ddN6OYurAwlYTWbHSeMd6TT6V1jwdAsFKZIKbbX+8CJZJjJs8XUvVHzj5CqR vJIeD82KWxPTi1wxJC7PdKnRIiOFkCkbvii3i8Pi/XZbo5K+v4eJdrSCxglekOek J3uG9k3hxtanVyCteUd1VulEnRssIFprL+7v0WG/nqVB43qc7ruwJCAyddiBNkb1 ivX+8jTeTH0SZTf7lMxFQ4SWxjLwRjbbiKhopO/j9yDDkHd27o+ZPQfWAB7FwMPO YCMWYBVHuQeZNRW1HeW6HP/R6Fw8V/R+SvTBP3wzAIiY4xnoewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0IZUhufc1Brk+s0Cn8UqME/GhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmUzM2E3OGEtYTA4YS0z MGFmLTg5ZTctOWIzMzZlMmQwMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdy7nOg3AGV2N6xTefabYNXhJ8/MyIcFYwm3S6kedoVpwFD1OnjaxoR 6nbXdUc1l5+LoJn67WeMVNpTAOpAy7B0Hj45XsbpdSkDJC41Jt6aibSAuUjDEdxP ezTM+MWjdVH8KcMySojStd5Ef5EvTsiBXmtWbUIi1Kv+Eij+iR4aKTmH+lGahjlL WUxy92Wtt3kehYe3NUIzRwkS6msQazjkOtqF+0oZUW6gtt2B/MmLwcf8Gzx9Nluj AyO2oIgPFA72NcKajiGrvGNztktVkr14P183TwrMkIPtLIg8dS4TOd77pe1bW/+/ V4KhBiM6/Vc3Z3zKmnVNKbUNfGrtgR4= -----END CERTIFICATE-----Generated at Thu Jul 10 02:43:09 2025 by rpki-client