$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa File: 3579afbb-c9be-3aac-96b3-6f9060525a56.roa (raw, json) Hash identifier: XuZMcPlciLy5bYqSlWBhp6/ncxV3Y3VPLYfCJa/E4Gs= Subject key identifier: 70:73:9D:49:27:0C:8A:89:EC:28:C9:F1:ED:27:4A:31:BF:1A:AB:40 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A70860EBBEB96AAB830D9F280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 41264 IP address blocks: 104.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:0e:bb:eb:96:aa:b8:30:d9:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=88c154cd-60da-4014-a574-40acfb7b26ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:63:7e:82:57:90:f6:77:72:0b:96:d6:e4: d0:fe:2c:7a:44:e4:30:5a:e4:02:76:7c:e0:fe:d8: 42:b9:62:32:da:a4:0e:62:12:33:83:28:9f:6f:ae: ec:dc:15:3c:f7:59:e4:41:2e:0a:d5:62:82:9d:e0: 70:50:bc:c7:44:b5:8b:3b:31:ef:7e:12:6e:75:c3: b0:73:93:f1:d5:23:e5:6b:32:15:5c:89:5e:49:0c: 11:2d:d0:7f:0c:76:cb:b0:69:bd:dc:0e:7c:e8:3d: 55:13:a6:c0:35:27:d9:39:c6:2c:38:b3:39:ed:43: 45:8c:6e:07:c1:61:e3:09:d8:ce:a5:74:86:3d:5e: a8:84:71:4e:16:7d:de:bf:73:49:6f:71:c4:16:fa: e2:4c:10:4a:0a:e3:e6:5c:2b:a1:95:a7:d9:0d:e9: 4a:4d:b3:10:23:f2:07:fb:09:15:44:ec:a9:5d:53: 07:e2:63:70:94:a6:0a:d2:f0:cf:4e:8e:3e:8c:85: 61:cd:61:c8:33:22:54:a7:ac:50:f2:37:dc:e1:b9: 8c:b4:76:f2:97:bb:7c:df:c2:7d:d9:82:c1:e9:6f: 34:06:85:53:61:dd:e8:7b:46:5c:8a:26:e1:39:30: cc:12:65:32:ef:90:2c:70:28:74:d1:51:af:ce:34: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:73:9D:49:27:0C:8A:89:EC:28:C9:F1:ED:27:4A:31:BF:1A:AB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:91:9c:ca:f2:f0:8b:32:70:b7:df:2b:35:98:29:de:2f:2e: f1:7b:84:ca:7c:96:5d:55:2a:d2:b0:7e:8d:0b:12:69:63:91: 97:f4:fd:a9:a1:a8:3c:10:d0:cd:61:3b:ab:02:f4:90:af:88: 4a:47:26:ac:b9:ca:14:d2:af:bf:ed:12:09:cf:ff:18:69:c8: a5:07:3c:9f:25:23:94:f5:e9:f0:fc:ab:79:ad:db:a1:8e:24: 13:03:b9:ee:2a:c9:52:87:83:2a:ab:81:29:ed:19:98:a3:ff: c9:9a:be:fe:09:b8:75:5e:fd:73:cd:d3:06:eb:32:96:5e:2f: aa:72:ba:c2:f6:39:d6:c1:3c:88:cd:8f:22:3f:a8:cf:bd:ca: cd:3b:14:51:16:71:7d:f5:fd:a2:8a:73:04:a0:89:ea:da:0b: b7:82:6b:b0:b4:3f:81:23:70:59:f4:a3:ae:91:4c:bd:71:09: a0:e1:9c:84:dd:c7:dd:f7:4d:cc:77:ff:73:33:ed:69:45:5d: 8a:db:0c:7d:11:3f:27:f0:50:22:a8:c6:c2:34:8e:00:7a:2f: 2b:0b:19:44:53:63:2e:22:4f:95:a9:e8:b7:c6:03:8b:01:69: 28:86:60:6b:75:45:a1:25:3a:f5:b1:ed:4e:5d:da:be:14:cb: c7:bf:e6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhg6765aquDDZ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk ODhjMTU0Y2QtNjBkYS00MDE0LWE1NzQtNDBhY2ZiN2IyNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyJjfoJXkPZ3cguW1uTQ/ix6ROQwWuQCdnzg /thCuWIy2qQOYhIzgyifb67s3BU891nkQS4K1WKCneBwULzHRLWLOzHvfhJudcOw c5Px1SPlazIVXIleSQwRLdB/DHbLsGm93A586D1VE6bANSfZOcYsOLM57UNFjG4H wWHjCdjOpXSGPV6ohHFOFn3ev3NJb3HEFvriTBBKCuPmXCuhlafZDelKTbMQI/IH +wkVROypXVMH4mNwlKYK0vDPTo4+jIVhzWHIMyJUp6xQ8jfc4bmMtHbyl7t838J9 2YLB6W80BoVTYd3oe0ZciibhOTDMEmUy75AscCh00VGvzjTkzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBznUknDIqJ7CjJ8e0nSjG/GqtAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU3OWFmYmItYzliZS0z YWFjLTk2YjMtNmY5MDYwNTI1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiRnMry8IsycLffKzWYKd4vLvF7hMp8ll1VKtKwfo0LEmljkZf0/amh qDwQ0M1hO6sC9JCviEpHJqy5yhTSr7/tEgnP/xhpyKUHPJ8lI5T16fD8q3mt26GO JBMDue4qyVKHgyqrgSntGZij/8mavv4JuHVe/XPN0wbrMpZeL6pyusL2OdbBPIjN jyI/qM+9ys07FFEWcX31/aKKcwSgieraC7eCa7C0P4EjcFn0o66RTL1xCaDhnITd x933Tcx3/3Mz7WlFXYrbDH0RPyfwUCKoxsI0jgB6LysLGURTYy4iT5Wp6LfGA4sB aSiGYGt1RaElOvWx7U5d2r4Uy8e/5iA= -----END CERTIFICATE-----Generated at Thu Jul 10 03:27:46 2025 by rpki-client