$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa File: 8242b901-13b8-31fc-b0af-a3b05bee017f.roa (raw, json) Hash identifier: Lgfnw0hvd9s0Y79ltLspj2PsdehdmuYFCzWIJa7ezRA= Subject key identifier: 0A:71:C6:3A:FC:23:74:C8:60:CA:3E:1C:0D:BD:1D:7B:9D:7A:BC:B4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B5AFF7C6DFF03261CDC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b5:af:f7:c6:df:f0:32:61:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=88e6873a-b5e9-4c6f-a1d8-8721c339e87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a9:a9:3c:fe:f1:83:16:62:91:3e:e9:e6:78: c1:d4:47:e4:9e:61:e4:bd:bd:82:e1:81:48:eb:0b: a8:ca:39:33:94:6b:7d:a6:9f:45:48:7c:c8:54:b0: 62:03:d4:a5:54:4d:cc:5f:df:30:d9:1f:5b:cf:a0: 44:b0:3f:a9:6a:f7:00:e1:23:0a:4c:6f:2c:fd:58: db:3f:32:f7:2f:5b:1c:c5:b3:3e:92:2a:6c:80:b1: 67:f7:6f:ca:da:02:18:dd:03:03:f7:38:05:a9:4f: 63:5c:0f:21:20:a6:b0:a5:64:c4:d6:14:3a:b4:61: de:e5:18:a2:79:84:63:8d:ea:48:c2:1a:03:92:7d: e4:46:5a:b2:dd:a3:eb:f3:86:03:47:e8:0e:ef:ee: 84:78:fc:9b:cb:2c:69:96:5c:76:7c:2c:a7:83:34: 56:94:f4:44:d2:d9:bc:e9:26:70:e8:fc:3c:b3:69: 14:3c:87:ba:16:e9:db:6e:e0:7c:8f:74:80:12:7b: de:08:08:56:7d:f6:60:44:6d:3b:da:15:76:6a:e0: 13:9e:6b:9f:87:0f:e8:e5:4a:70:22:9b:9f:a2:94: d0:12:00:a6:a2:31:1c:21:f9:a7:54:eb:9f:5c:17: 53:bc:f0:27:1a:b2:3a:f4:3a:58:cb:fc:c9:23:52: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:71:C6:3A:FC:23:74:C8:60:CA:3E:1C:0D:BD:1D:7B:9D:7A:BC:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:31:c1:0c:92:11:de:73:db:5c:5d:af:28:f6:2e:0e:a8:75: 30:01:6f:cc:c9:85:e2:0f:a1:b7:41:9c:f4:27:9e:65:11:94: 3d:ae:36:c1:24:72:51:c4:a3:db:0c:c8:69:2a:5e:08:cf:f8: 0a:47:5d:a4:39:02:07:07:1b:8f:04:d7:f4:b0:2a:89:f3:ee: 01:02:11:ed:50:78:8d:f6:8e:3f:e7:f2:65:fd:21:b4:5e:f2: c1:f8:a6:1d:94:49:a1:bb:cb:cf:45:e5:0e:ce:4d:2f:63:0e: 65:5a:88:d3:ef:2e:55:e0:db:46:09:89:ed:c8:1c:31:10:72: 00:80:d0:8a:ed:9a:87:c3:6c:0f:27:fa:d4:90:54:6b:de:1a: de:48:89:f0:52:7c:98:95:2e:ff:ee:2b:c2:d4:c7:a5:7e:9a: 50:92:6e:16:fa:08:76:29:0b:e1:54:c1:32:62:07:37:c7:d2: 3f:2f:b9:72:25:f6:ef:85:bb:9f:40:43:b6:da:09:b9:4d:45: d9:9c:19:1d:52:76:d2:f2:f1:f3:e4:0b:45:9e:9f:93:d4:b9: 22:35:cf:d8:1f:aa:38:97:5b:31:9c:7e:bb:42:be:21:71:be: bd:96:d8:f7:6a:a0:98:ca:f6:7f:dc:dd:bd:4a:11:fd:fd:d9: 0d:30:35:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULWv98bf8DJhzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ODhlNjg3M2EtYjVlOS00YzZmLWExZDgtODcyMWMzMzllODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiampPP7xgxZikT7p5njB1EfknmHkvb2C4YFI 6wuoyjkzlGt9pp9FSHzIVLBiA9SlVE3MX98w2R9bz6BEsD+pavcA4SMKTG8s/Vjb PzL3L1scxbM+kipsgLFn92/K2gIY3QMD9zgFqU9jXA8hIKawpWTE1hQ6tGHe5Rii eYRjjepIwhoDkn3kRlqy3aPr84YDR+gO7+6EePybyyxpllx2fCyngzRWlPRE0tm8 6SZw6Pw8s2kUPIe6FunbbuB8j3SAEnveCAhWffZgRG072hV2auATnmufhw/o5Upw IpufopTQEgCmojEcIfmnVOufXBdTvPAnGrI69DpYy/zJI1KenwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApxxjr8I3TIYMo+HA29HXudery0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODI0MmI5MDEtMTNiOC0z MWZjLWIwYWYtYTNiMDViZWUwMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEExwQySEd5z21xdryj2Lg6odTABb8zJheIPobdBnPQnnmURlD2uNsEk clHEo9sMyGkqXgjP+ApHXaQ5AgcHG48E1/SwKonz7gECEe1QeI32jj/n8mX9IbRe 8sH4ph2USaG7y89F5Q7OTS9jDmVaiNPvLlXg20YJie3IHDEQcgCA0IrtmofDbA8n +tSQVGveGt5IifBSfJiVLv/uK8LUx6V+mlCSbhb6CHYpC+FUwTJiBzfH0j8vuXIl 9u+Fu59AQ7baCblNRdmcGR1SdtLy8fPkC0Wen5PUuSI1z9gfqjiXWzGcfrtCviFx vr2W2PdqoJjK9n/c3b1KEf392Q0wNSE= -----END CERTIFICATE-----Generated at Thu Jul 10 03:02:05 2025 by rpki-client