$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3937d9f3-56bb-32dc-b40d-3096669be6bd.roa File: 3937d9f3-56bb-32dc-b40d-3096669be6bd.roa (raw, json) Hash identifier: fASwA81zHXh/OK8h/21rz9jnTZqeoTJdWgpm8GrMIWk= Subject key identifier: 83:51:90:33:07:C1:8E:45:1F:18:A7:40:10:B3:03:68:D5:EC:13:7D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350AD555EF5CC827709AD60 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3937d9f3-56bb-32dc-b40d-3096669be6bd.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:ad:55:5e:f5:cc:82:77:09:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=3a8b04e5-48d2-4719-a579-7dbbd053207f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:14:5c:b6:44:c7:46:b4:53:13:55:f5:20: 3b:91:c2:d2:98:0a:fe:13:fa:4b:2e:79:fd:2f:e8: 9e:c2:c6:75:76:50:69:e8:fb:d8:03:b4:5e:38:1d: 22:4c:2c:6f:1a:11:b4:e9:cb:ce:53:dd:d1:f9:0a: 53:d2:f7:9e:32:90:2c:51:91:e2:41:fa:86:5e:de: 23:ff:92:70:af:05:5b:42:a6:fe:6d:ae:07:34:be: f9:94:0e:91:f5:06:ff:31:61:35:3a:c1:81:7d:6c: c4:5a:6c:1f:23:70:81:be:4c:5e:5b:28:31:b8:4f: 7d:ba:1e:63:95:ab:41:9b:43:b5:ff:d9:07:ab:08: f6:8e:8d:f6:7f:63:ee:17:d1:20:15:4e:d1:a7:05: 07:ef:7b:55:8d:f7:91:79:9b:d2:1e:07:87:23:8d: 17:0a:56:52:87:cc:b4:3e:c6:6c:8f:db:a3:34:6b: 8d:39:6d:4d:f7:2f:8f:55:59:34:cf:cc:06:d5:52: 85:20:90:c0:ad:35:c1:8e:e7:53:49:54:c0:c4:78: b8:96:c1:9b:94:3f:4d:8d:61:f7:70:b3:3d:9f:e4: 53:66:71:9f:ae:1d:21:a0:93:6e:18:61:7a:d7:31: 2c:73:48:70:13:96:59:5d:5c:f0:26:70:1f:5b:60: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:51:90:33:07:C1:8E:45:1F:18:A7:40:10:B3:03:68:D5:EC:13:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3937d9f3-56bb-32dc-b40d-3096669be6bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:57:c9:a1:89:29:ab:0d:e0:e7:2a:1e:b1:60:fa:24:7d:0b: 09:0b:a1:b1:a3:a7:f3:b4:f9:14:0b:37:f5:fd:b2:e2:61:99: e4:91:3a:3a:45:40:e0:f1:02:ba:04:0d:57:b1:f4:43:47:d8: bb:0f:e6:32:0e:7b:b0:cf:c9:77:bf:35:ef:89:9a:41:2d:cc: d1:62:ad:fc:b9:da:af:dd:56:1e:a2:70:a9:5e:45:3d:d3:bf: ce:8a:83:7c:d6:25:df:bc:f2:e3:84:34:7e:78:be:a7:d9:54: a4:46:20:cd:7b:32:1a:8b:59:be:67:7d:9a:67:66:5d:c1:3f: b7:1d:eb:24:da:17:75:72:d7:b6:12:75:04:8a:55:79:28:da: 4c:be:3e:72:fd:06:17:0b:eb:f0:11:56:9a:37:13:c0:52:6a: ce:0a:0c:6a:31:ad:bf:23:c1:0e:ad:d6:90:6d:84:96:92:d2: 05:5c:99:2b:a0:88:f9:3b:0b:be:7c:10:8f:c2:57:e9:19:a4: 76:4c:2f:a8:f9:22:1b:56:42:b5:88:46:60:15:49:3e:fc:46: ce:b1:28:55:8a:78:9c:93:cb:b9:46:89:d8:bf:7e:64:92:9a: 88:c2:c2:25:c2:4d:e8:63:31:30:82:d1:36:86:84:6a:25:02: bd:ad:ce:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUK1VXvXMgncJrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk M2E4YjA0ZTUtNDhkMi00NzE5LWE1NzktN2RiYmQwNTMyMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYcUXLZEx0a0UxNV9SA7kcLSmAr+E/pLLnn9 L+iewsZ1dlBp6PvYA7ReOB0iTCxvGhG06cvOU93R+QpT0veeMpAsUZHiQfqGXt4j /5JwrwVbQqb+ba4HNL75lA6R9Qb/MWE1OsGBfWzEWmwfI3CBvkxeWygxuE99uh5j latBm0O1/9kHqwj2jo32f2PuF9EgFU7RpwUH73tVjfeReZvSHgeHI40XClZSh8y0 PsZsj9ujNGuNOW1N9y+PVVk0z8wG1VKFIJDArTXBjudTSVTAxHi4lsGblD9NjWH3 cLM9n+RTZnGfrh0hoJNuGGF61zEsc0hwE5ZZXVzwJnAfW2CwGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINRkDMHwY5FHxinQBCzA2jV7BN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzkzN2Q5ZjMtNTZiYi0z MmRjLWI0MGQtMzA5NjY2OWJlNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5XyaGJKasN4OcqHrFg+iR9CwkLobGjp/O0+RQLN/X9suJhmeSROjpF QODxAroEDVex9ENH2LsP5jIOe7DPyXe/Ne+JmkEtzNFirfy52q/dVh6icKleRT3T v86Kg3zWJd+88uOENH54vqfZVKRGIM17MhqLWb5nfZpnZl3BP7cd6yTaF3Vy17YS dQSKVXko2ky+PnL9BhcL6/ARVpo3E8BSas4KDGoxrb8jwQ6t1pBthJaS0gVcmSug iPk7C758EI/CV+kZpHZML6j5IhtWQrWIRmAVST78Rs6xKFWKeJyTy7lGidi/fmSS mojCwiXCTehjMTCC0TaGhGolAr2tzmY= -----END CERTIFICATE-----Generated at Thu Jul 10 13:43:29 2025 by rpki-client