$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa File: 4268df17-96c8-3b1f-b764-7fdc745f282b.roa (raw, json) Hash identifier: tG0I1GTlKBA++KSS700CZJG2hMaB73Jytg3Y8Sn45Zw= Subject key identifier: 27:BD:88:D1:29:52:B5:73:5F:D3:B2:1A:9F:A7:C9:2A:54:B7:81:5F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A70860D8F94B09EF1B0D6DDE0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 396982 IP address blocks: 104.133.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:0d:8f:94:b0:9e:f1:b0:d6:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=343cb9fc-b9ab-44dd-a1db-e5b233ca431e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:45:71:47:98:eb:62:87:60:37:1c:3e:eb: 6e:cc:66:22:65:53:f6:a8:81:a4:ad:ad:aa:4d:30: ba:26:60:bb:cc:66:5a:47:e2:8e:92:bf:e2:b9:ab: 39:84:a9:4b:cd:75:56:33:e8:89:a4:23:9b:1a:d3: f6:4e:aa:6e:ef:12:89:aa:c2:0d:a8:92:99:88:3b: 19:6a:5c:23:d6:70:15:67:c3:16:d9:f8:89:b4:b6: 76:d7:39:20:eb:51:03:d2:fc:b1:87:6c:8f:6d:b3: dc:18:8c:05:67:37:12:33:34:8c:29:fe:74:3f:a9: 06:81:34:ee:27:00:e9:69:7f:2c:38:33:27:df:0e: 83:ec:fc:12:80:49:ec:14:52:1f:a3:64:58:6d:29: 00:6f:f1:7c:ca:66:a4:39:b1:99:e8:67:bb:fb:58: 3c:b2:9e:d4:c8:35:df:c6:ff:48:3c:27:39:86:89: dc:76:61:d1:20:fb:82:f4:bf:4e:21:8d:ad:14:91: 68:72:08:5d:ee:5b:54:8b:a9:fe:e1:1a:1f:67:4d: 0d:7a:16:59:93:39:99:60:d9:08:6f:8b:07:1d:34: c1:76:cb:e7:3b:9d:b8:71:a0:6b:49:d7:7e:6c:ad: 45:35:e6:30:1b:8a:65:48:dc:52:92:c0:94:70:ff: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:88:D1:29:52:B5:73:5F:D3:B2:1A:9F:A7:C9:2A:54:B7:81:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:02:01:d0:f7:f3:40:51:71:d6:bb:2e:01:d0:85:a4:05:3e: 2a:34:5d:3b:52:fa:32:6e:9f:43:ca:c3:25:29:6d:4f:1d:f1: 09:b8:89:eb:96:47:16:3d:ff:34:f4:38:cc:d4:8a:a5:18:20: 57:f2:62:aa:b6:53:38:b5:d5:a0:f4:48:8b:37:90:ce:e6:37: e8:c1:19:7e:85:fc:aa:91:b0:53:e7:16:0f:48:49:7b:bc:a2: da:8d:b8:86:9e:c3:0b:03:65:78:a1:dd:d6:de:15:a3:d8:0f: 26:82:79:3f:b4:ff:0c:87:97:06:f2:d2:73:88:5f:00:29:7b: 00:08:d0:b8:2d:34:54:3b:23:0a:38:0d:d2:4e:ee:d3:4e:f5: 6b:ee:59:3e:18:18:8a:5d:10:e2:cd:53:1b:e5:02:0e:c8:e5: 77:bc:a3:31:cc:55:5f:f8:09:18:d0:fd:bd:be:dc:cb:ee:4b: a6:60:08:98:2c:2b:00:c1:f2:a6:4f:75:e9:38:be:9e:5a:56: de:4e:06:7f:ec:a8:28:e5:67:68:7c:fa:e6:fd:18:82:2a:9e: 89:82:1e:3f:f4:37:f9:da:5d:82:d0:0b:cb:8b:48:cd:51:71: 11:06:57:bd:98:19:ae:2a:5c:ee:b3:fc:87:07:9e:9a:fe:20: e9:3c:23:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhg2PlLCe8bDW3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk MzQzY2I5ZmMtYjlhYi00NGRkLWExZGItZTViMjMzY2E0MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1hFcUeY62KHYDccPutuzGYiZVP2qIGkra2q TTC6JmC7zGZaR+KOkr/iuas5hKlLzXVWM+iJpCObGtP2Tqpu7xKJqsINqJKZiDsZ alwj1nAVZ8MW2fiJtLZ21zkg61ED0vyxh2yPbbPcGIwFZzcSMzSMKf50P6kGgTTu JwDpaX8sODMn3w6D7PwSgEnsFFIfo2RYbSkAb/F8ymakObGZ6Ge7+1g8sp7UyDXf xv9IPCc5honcdmHRIPuC9L9OIY2tFJFocghd7ltUi6n+4RofZ00NehZZkzmZYNkI b4sHHTTBdsvnO524caBrSdd+bK1FNeYwG4plSNxSksCUcP8qnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe9iNEpUrVzX9OyGp+nySpUt4FfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDI2OGRmMTctOTZjOC0z YjFmLWI3NjQtN2ZkYzc0NWYyODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALICAdD380BRcda7LgHQhaQFPio0XTtS+jJun0PKwyUpbU8d8Qm4ieuW RxY9/zT0OMzUiqUYIFfyYqq2Uzi11aD0SIs3kM7mN+jBGX6F/KqRsFPnFg9ISXu8 otqNuIaewwsDZXih3dbeFaPYDyaCeT+0/wyHlwby0nOIXwApewAI0LgtNFQ7Iwo4 DdJO7tNO9WvuWT4YGIpdEOLNUxvlAg7I5Xe8ozHMVV/4CRjQ/b2+3MvuS6ZgCJgs KwDB8qZPdek4vp5aVt5OBn/sqCjlZ2h8+ub9GIIqnomCHj/0N/naXYLQC8uLSM1R cREGV72YGa4qXO6z/IcHnpr+IOk8I2A= -----END CERTIFICATE-----Generated at Thu Jul 10 02:54:27 2025 by rpki-client