$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/561eda92-cdf3-37cc-8c56-60ff4bef7921.roa File: 561eda92-cdf3-37cc-8c56-60ff4bef7921.roa (raw, json) Hash identifier: VDa8vr3u4y8iIx5sb/xh3QAlMa0B1I8myiZtnPEUaPg= Subject key identifier: 73:45:0F:5C:F0:26:20:C8:E2:FA:59:B6:B5:07:D6:7C:E2:C1:BF:E1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C3ADA51FC475F3C06000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/561eda92-cdf3-37cc-8c56-60ff4bef7921.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c3:ad:a5:1f:c4:75:f3:c0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=978b40e5-842e-4385-ad0d-32795d662f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:b7:8f:a7:16:1d:84:83:d6:02:39:dd:df: 78:60:a7:fa:be:1a:7a:99:96:b2:c9:ce:a9:81:46: 7f:fe:ee:c1:87:03:78:d8:e1:0f:16:c4:82:ac:d2: d4:4b:3e:dd:00:e8:53:87:a0:7d:d6:6f:df:5e:3a: 21:94:33:47:02:8d:db:3c:46:90:21:74:99:1c:75: 6e:d7:6c:94:24:4c:31:05:4a:63:c0:0b:6e:72:31: a1:10:c6:80:35:66:de:20:23:4d:af:96:38:83:73: 68:af:50:be:77:14:96:b4:fc:9f:f7:54:9d:a1:96: b9:e9:01:62:a0:22:f2:b9:8e:4a:e0:99:c1:27:1f: 63:3c:e6:d4:0f:5d:15:34:47:3a:f0:c7:47:a3:2f: 42:14:49:8c:ff:07:8d:9d:02:d1:73:00:8c:1b:e0: c6:3e:7a:13:53:4e:a3:99:5f:01:ec:69:48:a7:1e: a3:04:70:c6:89:4f:bf:f0:44:6b:a1:4b:1e:fe:25: 28:13:d7:e7:5e:25:04:19:16:c9:a3:63:bd:a3:0d: a3:13:36:58:5f:37:04:35:c7:2a:2a:0c:33:48:56: 8f:33:68:85:a3:3d:05:84:80:f7:56:03:82:ae:64: c0:4b:95:67:c9:18:28:7c:51:69:fe:a5:8b:67:87: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:45:0F:5C:F0:26:20:C8:E2:FA:59:B6:B5:07:D6:7C:E2:C1:BF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/561eda92-cdf3-37cc-8c56-60ff4bef7921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:25:20:c8:42:08:a9:58:91:73:1c:fc:77:fa:41:a3:45:3d: b7:b6:85:2a:9e:3a:f0:82:3e:c5:5b:dd:3a:47:14:4e:76:e7: df:8a:5d:bc:09:08:04:cb:8b:36:54:e4:d5:21:2f:7a:c0:e3: 24:79:92:af:fc:cf:9d:45:f1:0a:d4:cf:92:a2:98:96:82:0c: f8:1a:3e:ec:f4:cc:bb:63:6e:e0:2d:15:1f:3c:5c:5e:cb:f3: d5:f7:4a:77:9a:6a:d3:3f:96:be:6f:e3:f6:32:6d:74:61:4a: 25:6e:26:51:ca:08:00:50:99:43:23:65:a5:91:74:3f:28:3f: 84:3b:f6:a3:d9:8a:17:59:ff:c4:80:80:32:4f:d6:37:49:74: f2:ab:cf:c3:f8:27:96:d8:5a:d6:77:d8:c5:e2:3b:28:0d:30: be:70:8b:93:c0:f7:d9:6e:9d:63:5f:7c:22:82:37:fe:97:fd: 49:fa:03:81:7e:49:10:fd:3a:9c:42:e8:36:06:7c:70:98:90: 7c:27:53:3c:b5:e3:4c:32:13:52:b1:ca:b0:b1:04:c3:e8:4b: d1:9c:85:65:e3:05:7a:78:b7:40:6d:34:24:14:b3:99:84:a9: 7b:ea:9d:73:b8:8f:9d:e2:5c:6f:c9:d6:7a:ff:9b:da:ad:4a: b7:05:f4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMOtpR/EdfPAYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk OTc4YjQwZTUtODQyZS00Mzg1LWFkMGQtMzI3OTVkNjYyZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy+3j6cWHYSD1gI53d94YKf6vhp6mZayyc6p gUZ//u7BhwN42OEPFsSCrNLUSz7dAOhTh6B91m/fXjohlDNHAo3bPEaQIXSZHHVu 12yUJEwxBUpjwAtucjGhEMaANWbeICNNr5Y4g3Nor1C+dxSWtPyf91SdoZa56QFi oCLyuY5K4JnBJx9jPObUD10VNEc68MdHoy9CFEmM/weNnQLRcwCMG+DGPnoTU06j mV8B7GlIpx6jBHDGiU+/8ERroUse/iUoE9fnXiUEGRbJo2O9ow2jEzZYXzcENccq KgwzSFaPM2iFoz0FhID3VgOCrmTAS5VnyRgofFFp/qWLZ4dQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNFD1zwJiDI4vpZtrUH1nziwb/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTYxZWRhOTItY2RmMy0z N2NjLThjNTYtNjBmZjRiZWY3OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8lIMhCCKlYkXMc/Hf6QaNFPbe2hSqeOvCCPsVb3TpHFE5259+KXbwJ CATLizZU5NUhL3rA4yR5kq/8z51F8QrUz5KimJaCDPgaPuz0zLtjbuAtFR88XF7L 89X3SneaatM/lr5v4/YybXRhSiVuJlHKCABQmUMjZaWRdD8oP4Q79qPZihdZ/8SA gDJP1jdJdPKrz8P4J5bYWtZ32MXiOygNML5wi5PA99lunWNffCKCN/6X/Un6A4F+ SRD9OpxC6DYGfHCYkHwnUzy140wyE1KxyrCxBMPoS9GchWXjBXp4t0BtNCQUs5mE qXvqnXO4j53iXG/J1nr/m9qtSrcF9Nc= -----END CERTIFICATE-----Generated at Thu Jul 10 03:42:58 2025 by rpki-client