$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa File: 9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa (raw, json) Hash identifier: QN+tAtGR0PPJArb9p3I1lH1+vt/yVLy+5Y+HKhg0Log= Subject key identifier: 03:41:E7:FA:C1:71:E8:7F:71:A6:40:83:32:BC:E7:5E:A8:45:08:AE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350AA8A5500CBD34DC17908 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:aa:8a:55:00:cb:d3:4d:c1:79:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=f7c85e10-63c7-4fe8-87d8-56bd0ccc3a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:5f:f9:bd:df:4b:56:f0:e0:cf:20:1d:a2: 6f:5d:b0:52:68:cc:e5:b1:cd:17:ae:cc:aa:1c:33: 65:99:b4:0f:bc:b6:f5:bb:f3:8f:13:fc:07:24:f9: f1:67:59:6f:c2:71:10:7b:20:15:7b:d5:8a:74:9f: fa:4c:78:5d:a7:06:53:e9:0d:45:a2:82:fd:88:d9: 76:1c:df:7c:72:75:1f:36:e8:46:db:a3:9a:9f:e5: ca:f3:7b:ba:44:bf:6a:bd:7c:c7:e8:20:df:a3:3f: 5b:c4:33:a0:51:6c:38:cf:68:82:3e:49:0b:99:f5: 57:e6:43:52:d4:67:0d:4a:68:d2:86:ea:58:d1:44: 02:a6:e1:38:a4:09:20:4c:18:df:07:a8:15:d9:d6: 9f:7a:9d:ed:d5:44:71:e6:b5:74:39:bb:a0:74:b2: af:a6:9b:36:ca:df:b0:fa:af:10:38:82:c9:bb:89: dc:cd:ce:6e:d3:af:a1:f0:a1:94:bd:18:d6:91:06: 56:16:28:90:f3:6f:28:91:4a:a5:f0:58:6f:f3:87: 67:49:d7:aa:f5:e3:de:60:87:7c:ea:1d:f2:6e:99: 11:dc:ff:a4:90:ca:4b:4e:0b:6d:66:e0:bd:d4:38: db:64:68:59:01:ed:b1:55:84:e2:05:58:f3:b1:74: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:41:E7:FA:C1:71:E8:7F:71:A6:40:83:32:BC:E7:5E:A8:45:08:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f2:22:3d:4a:95:ed:12:3d:fd:db:39:6a:c3:de:8b:a7:fa: e8:77:7d:13:25:23:af:e3:11:81:4b:8f:60:b9:f3:0c:60:dd: bb:9b:38:38:27:ae:77:64:ce:39:85:67:75:06:1b:c9:08:dd: 01:f4:00:46:a1:e9:93:eb:1d:23:48:74:10:e6:85:17:6b:71: a6:67:76:d8:11:b8:89:dd:7b:fc:89:a3:c3:c2:f2:d9:de:0c: 06:1b:d8:ca:c6:15:ab:42:b8:28:ca:eb:19:91:59:e4:52:85: ff:84:84:3d:8d:8e:e9:56:80:ba:fb:d4:85:58:40:a2:7c:07: 0f:65:b7:97:7b:a1:0c:be:c1:ef:98:3e:02:6f:e3:7b:cf:a0: 8e:36:55:f7:b4:70:70:01:fd:47:1e:bc:0e:6b:56:43:10:a3: 53:56:c9:d0:99:c5:82:1c:3b:09:8b:ae:a5:72:13:d7:02:8b: fd:de:59:04:19:f9:6b:91:e7:cb:f7:53:17:59:4f:ed:cf:16: 7e:17:2a:ba:db:40:8c:71:8c:e1:c8:ed:34:7d:87:66:16:18: bf:66:2a:73:76:4c:e7:ca:53:78:55:29:69:09:f1:93:9a:19: 62:73:a1:86:d0:a6:db:28:3a:73:ac:b0:2b:a5:c2:96:a4:e5: 3f:5d:63:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKqKVQDL003BeQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjdjODVlMTAtNjNjNy00ZmU4LTg3ZDgtNTZiZDBjY2MzYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyZf+b3fS1bw4M8gHaJvXbBSaMzlsc0Xrsyq HDNlmbQPvLb1u/OPE/wHJPnxZ1lvwnEQeyAVe9WKdJ/6THhdpwZT6Q1FooL9iNl2 HN98cnUfNuhG26Oan+XK83u6RL9qvXzH6CDfoz9bxDOgUWw4z2iCPkkLmfVX5kNS 1GcNSmjShupY0UQCpuE4pAkgTBjfB6gV2dafep3t1URx5rV0ObugdLKvpps2yt+w +q8QOILJu4nczc5u06+h8KGUvRjWkQZWFiiQ828okUql8Fhv84dnSdeq9ePeYId8 6h3ybpkR3P+kkMpLTgttZuC91DjbZGhZAe2xVYTiBVjzsXQCVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANB5/rBceh/caZAgzK8516oRQiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWU0ZTk5OGQtYzgxOS0z ZTZhLTljZDgtMWYwZTUyNjkzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXyIj1Kle0SPf3bOWrD3oun+uh3fRMlI6/jEYFLj2C58wxg3bubODgn rndkzjmFZ3UGG8kI3QH0AEah6ZPrHSNIdBDmhRdrcaZndtgRuInde/yJo8PC8tne DAYb2MrGFatCuCjK6xmRWeRShf+EhD2NjulWgLr71IVYQKJ8Bw9lt5d7oQy+we+Y PgJv43vPoI42Vfe0cHAB/UcevA5rVkMQo1NWydCZxYIcOwmLrqVyE9cCi/3eWQQZ +WuR58v3UxdZT+3PFn4XKrrbQIxxjOHI7TR9h2YWGL9mKnN2TOfKU3hVKWkJ8ZOa GWJzoYbQptsoOnOssCulwpak5T9dY7U= -----END CERTIFICATE-----Generated at Thu Jul 10 02:07:32 2025 by rpki-client