$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa File: 5aeacd74-e399-342f-a107-f69488f9e9e1.roa (raw, json) Hash identifier: gdlb13A6GZiPG4rbWdGxuNPdTeyHFWftXdAGqs4RP7A= Subject key identifier: E2:7D:78:99:DD:BF:E7:73:23:44:F6:36:74:24:A9:AE:8A:F1:21:A1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C57AF11907F2810DB288 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c5:7a:f1:19:07:f2:81:0d:b2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=e50b8b59-95e4-4270-a8d1-6210a158f6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:2c:cb:9a:16:24:22:5b:05:2d:2b:4f:0b: f3:1a:e5:7b:8e:55:ce:57:69:dd:ac:e7:58:c5:28: 03:9c:02:82:6d:e8:78:61:8a:b0:15:ca:c9:16:36: 5c:55:3f:b1:c9:c0:6a:0d:55:e0:68:0e:fb:69:ba: d9:ef:24:0a:be:49:47:c9:d8:30:22:c3:83:80:31: 64:ad:15:2e:11:26:a3:2e:1c:3e:22:b3:1e:0d:4c: 81:16:70:75:8e:47:f4:be:48:91:29:2f:2d:07:fc: 08:d9:4d:3c:9b:a2:a6:0e:c0:e1:1d:60:3f:94:a1: 8d:67:0d:c6:4e:ff:93:2e:35:0b:c7:5e:50:76:09: c2:2a:c7:ab:94:6d:35:01:85:bd:82:9a:6a:d8:33: f5:5b:64:50:e3:22:68:80:f5:6a:bd:c2:ed:19:86: ca:21:b1:3e:73:1b:9b:f7:78:10:c6:03:e6:99:84: e6:ef:97:57:d6:6f:8d:ef:4e:bf:dc:73:93:73:5b: 07:f1:31:a6:9e:76:0a:ab:e2:05:ee:1f:4f:35:a3: 9f:ff:b7:83:3a:5b:25:08:87:c8:1a:b5:81:80:c2: ec:f5:09:39:ed:d5:76:01:50:50:07:e8:8c:3f:69: cb:e5:60:c2:01:ac:59:6c:b8:d3:ad:e2:97:55:1f: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7D:78:99:DD:BF:E7:73:23:44:F6:36:74:24:A9:AE:8A:F1:21:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9b:4d:14:fb:45:e4:56:b1:b6:a9:76:1b:6b:52:d0:60:e3: 20:3b:a6:cb:14:8b:87:c3:b7:64:72:35:35:64:44:aa:c0:eb: ab:ef:05:46:9e:4a:ec:00:51:28:81:7d:15:2d:eb:87:ae:10: e3:79:8c:7b:7c:64:96:3b:13:24:f8:6d:bf:18:a6:98:04:fe: 0a:6c:45:84:d9:6a:42:3f:86:d8:da:a6:d1:64:4a:74:7d:19: f1:63:be:33:89:3f:19:0c:45:b8:27:fa:51:3d:ab:15:93:75: 4e:94:c5:87:a4:34:9a:c3:77:85:14:53:7c:5e:a1:ff:60:7c: ac:fe:bc:60:4f:d8:ba:8b:dc:b7:db:93:58:d2:d9:6d:ae:63: f9:08:39:b9:93:d0:80:6d:03:b4:0b:83:e2:c1:05:29:f2:5a: 67:d7:94:2c:8a:15:03:85:17:10:61:04:7f:3c:8b:81:63:b6: 14:1b:eb:7b:0b:8b:b7:cc:db:1d:31:8e:6a:44:be:9f:5b:96: 80:a3:e6:b5:11:01:58:49:30:6c:57:fe:6a:f0:5a:d4:51:06: 77:c2:a6:54:9a:5e:2e:3f:b8:60:0e:dc:a5:83:3a:76:a1:66: df:02:a7:81:e0:b1:cf:e1:fe:7d:ac:1e:47:ed:84:8f:64:86: 36:c6:d7:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMV68RkH8oENsogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZTUwYjhiNTktOTVlNC00MjcwLWE4ZDEtNjIxMGExNThmNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiYsy5oWJCJbBS0rTwvzGuV7jlXOV2ndrOdY xSgDnAKCbeh4YYqwFcrJFjZcVT+xycBqDVXgaA77abrZ7yQKvklHydgwIsODgDFk rRUuESajLhw+IrMeDUyBFnB1jkf0vkiRKS8tB/wI2U08m6KmDsDhHWA/lKGNZw3G Tv+TLjULx15QdgnCKserlG01AYW9gppq2DP1W2RQ4yJogPVqvcLtGYbKIbE+cxub 93gQxgPmmYTm75dX1m+N706/3HOTc1sH8TGmnnYKq+IF7h9PNaOf/7eDOlslCIfI GrWBgMLs9Qk57dV2AVBQB+iMP2nL5WDCAaxZbLjTreKXVR9j8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ9eJndv+dzI0T2NnQkqa6K8SGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWFlYWNkNzQtZTM5OS0z NDJmLWExMDctZjY5NDg4ZjllOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+bTRT7ReRWsbapdhtrUtBg4yA7pssUi4fDt2RyNTVkRKrA66vvBUae SuwAUSiBfRUt64euEON5jHt8ZJY7EyT4bb8YppgE/gpsRYTZakI/htjaptFkSnR9 GfFjvjOJPxkMRbgn+lE9qxWTdU6UxYekNJrDd4UUU3xeof9gfKz+vGBP2LqL3Lfb k1jS2W2uY/kIObmT0IBtA7QLg+LBBSnyWmfXlCyKFQOFFxBhBH88i4FjthQb63sL i7fM2x0xjmpEvp9bloCj5rURAVhJMGxX/mrwWtRRBnfCplSaXi4/uGAO3KWDOnah Zt8Cp4Hgsc/h/n2sHkfthI9khjbG11k= -----END CERTIFICATE-----Generated at Thu Jul 10 10:23:10 2025 by rpki-client