$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba174b33-108b-3d7a-b508-4c226394c6d0.roa File: ba174b33-108b-3d7a-b508-4c226394c6d0.roa (raw, json) Hash identifier: +l3WEiJ31bKbx5ZRGGKoAnjeZfdmXm0ruds/ncyejK0= Subject key identifier: 67:EA:72:CB:4E:4F:5A:50:1F:68:5A:9A:E7:F1:91:B3:D7:BD:1F:FF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C5D2CFAC5CBB97451C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba174b33-108b-3d7a-b508-4c226394c6d0.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c5:d2:cf:ac:5c:bb:97:45:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=f95b6012-374c-4a4e-8eef-b5b47a30d985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:72:3d:20:8f:3c:38:51:69:56:97:9b:67: 56:0f:3e:b5:e9:e4:a3:b7:56:95:9d:01:5a:aa:24: a3:89:31:4a:39:09:f2:cc:92:3c:86:12:30:0a:6d: 52:22:99:cf:20:8d:b9:43:5e:de:c7:70:0b:74:bf: 9b:d5:a0:c9:4c:36:dc:15:e8:0f:8e:dc:cc:3c:66: 57:24:da:e3:3e:f5:06:3a:b0:0b:d5:88:db:20:3a: 94:d1:4f:42:f1:cf:d5:0c:89:61:8a:2c:4e:3b:33: 8f:40:b9:be:66:61:e9:d8:5a:33:58:86:7d:fa:d1: 9d:9e:3d:66:b0:ad:d5:5f:6f:38:66:29:d2:00:36: 29:9e:7f:33:01:42:73:df:bd:64:6e:30:78:39:00: 8a:69:8f:4c:e8:7e:ff:e2:c4:fe:dd:8a:23:d4:a8: 17:68:77:b5:10:94:11:58:44:9e:b7:18:34:e3:74: 3f:8b:cb:48:89:b2:dd:33:48:3b:96:1d:88:37:f7: fb:4a:b8:ef:31:f6:09:62:09:4e:6a:ef:4f:c5:8a: 96:c2:d1:ef:a3:99:26:ee:86:3f:17:a5:bc:28:a3: 8d:f3:85:c0:ec:94:16:b3:fa:08:c6:20:07:d9:0a: 8c:3e:3f:f2:97:16:56:44:91:03:8b:b5:9b:e6:fd: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EA:72:CB:4E:4F:5A:50:1F:68:5A:9A:E7:F1:91:B3:D7:BD:1F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba174b33-108b-3d7a-b508-4c226394c6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a2:c4:4f:08:f6:5e:b6:a7:0d:19:36:4d:07:89:c2:ae:b5: 31:dd:4c:5a:1b:93:96:7c:af:e1:71:14:0b:42:f6:06:00:ba: 88:07:8a:92:1c:b8:b5:b6:57:a1:36:49:95:db:46:d4:06:96: b0:54:1e:8d:4d:4e:33:ad:b6:dd:53:c2:7b:b1:40:d4:98:6a: f0:f2:95:68:5d:85:2c:13:f1:89:f0:ca:6b:f2:6f:2b:11:b0: 4a:b0:24:28:bc:6c:d5:55:78:5b:eb:52:27:ef:02:ed:1b:23: c0:c0:14:cb:7e:5d:7a:90:86:9a:07:25:ed:ef:e1:fd:b7:90: 38:4f:b6:d2:f2:c2:e6:e5:0d:5e:6f:23:37:94:68:b8:5b:18: 09:9a:dd:9b:46:ad:e8:08:ad:56:9a:a3:4b:7b:0b:d8:b2:8f: 8f:0a:e0:c9:27:42:0a:31:70:49:42:72:5c:0d:ac:5d:b3:4d: 4c:c5:16:d2:af:cd:09:69:d5:14:d4:6a:1b:51:a8:3e:ab:7f: 9d:d6:8c:be:e5:25:5f:c9:44:89:40:07:84:b3:0e:95:f8:2f: 00:11:40:a8:c0:0f:bd:87:bd:1b:9e:53:af:68:a5:e3:73:fa: 45:09:a5:35:ad:b3:67:2c:0e:0b:13:30:0d:6b:dd:16:d5:0a: 57:d7:7e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMXSz6xcu5dFHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk Zjk1YjYwMTItMzc0Yy00YTRlLThlZWYtYjViNDdhMzBkOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA289yPSCPPDhRaVaXm2dWDz616eSjt1aVnQFa qiSjiTFKOQnyzJI8hhIwCm1SIpnPII25Q17ex3ALdL+b1aDJTDbcFegPjtzMPGZX JNrjPvUGOrAL1YjbIDqU0U9C8c/VDIlhiixOOzOPQLm+ZmHp2FozWIZ9+tGdnj1m sK3VX284ZinSADYpnn8zAUJz371kbjB4OQCKaY9M6H7/4sT+3Yoj1KgXaHe1EJQR WESetxg043Q/i8tIibLdM0g7lh2IN/f7SrjvMfYJYglOau9PxYqWwtHvo5km7oY/ F6W8KKON84XA7JQWs/oIxiAH2QqMPj/ylxZWRJEDi7Wb5v1ICQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfqcstOT1pQH2hamufxkbPXvR//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmExNzRiMzMtMTA4Yi0z ZDdhLWI1MDgtNGMyMjYzOTRjNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIamMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOixE8I9l62pw0ZNk0HicKutTHdTFobk5Z8r+FxFAtC9gYAuogHipIc uLW2V6E2SZXbRtQGlrBUHo1NTjOttt1TwnuxQNSYavDylWhdhSwT8YnwymvybysR sEqwJCi8bNVVeFvrUifvAu0bI8DAFMt+XXqQhpoHJe3v4f23kDhPttLywublDV5v IzeUaLhbGAma3ZtGregIrVaao0t7C9iyj48K4MknQgoxcElCclwNrF2zTUzFFtKv zQlp1RTUahtRqD6rf53WjL7lJV/JRIlAB4SzDpX4LwARQKjAD72HvRueU69opeNz +kUJpTWts2csDgsTMA1r3RbVClfXflI= -----END CERTIFICATE-----Generated at Thu Jul 10 10:38:44 2025 by rpki-client