$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa File: d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa (raw, json) Hash identifier: j2B8M5WFEKy+I1NTHID0g7dprbFWWRXmDQsMQ79ZNoY= Subject key identifier: 98:A9:03:C6:7D:AD:7D:7C:9B:9A:86:CA:F2:D4:F8:66:3E:BF:0F:16 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A6DBB536B8D6C1F56C41A2240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 41264 IP address blocks: 104.132.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:53:6b:8d:6c:1f:56:c4:1a:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=b8aa28c0-351f-4713-9a38-4b078b7b4b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:2a:7d:ef:94:78:5c:27:a8:f9:74:fd:bc: 11:f4:1a:05:a9:39:e7:f2:39:42:c4:df:4f:6f:bd: ec:ba:8e:4d:dc:ad:97:8b:49:f3:90:29:4c:8a:f7: 42:d5:97:4a:20:7a:f4:bb:aa:94:85:1b:04:23:b4: b8:ef:76:b8:dd:86:0c:f5:a5:c1:ff:46:e3:e1:c2: 40:b6:c1:02:9b:2f:ab:50:69:ca:7e:51:1c:98:13: c0:c4:e2:71:1b:9a:86:7c:75:43:fc:00:f4:9d:aa: 6b:60:33:01:ca:fd:f3:38:4f:27:01:3c:51:3f:89: e5:75:81:64:89:d4:31:b2:8e:37:b3:c4:97:69:0f: 68:74:f4:1d:ae:e7:5c:7b:02:73:28:22:10:8c:ff: 2d:b4:e8:2d:3f:81:23:68:e6:34:3e:ea:cb:41:e8: f8:03:a4:b0:ac:05:e3:0a:bd:88:38:1c:36:ed:c4: f3:84:1d:14:a1:98:b6:a2:5e:ff:0f:98:43:00:ac: cc:ad:e4:4f:a1:db:4e:6a:ab:9d:39:89:2e:fb:04: 73:6b:4c:99:ad:07:dc:61:a7:78:e8:97:af:6b:c7: 03:71:a9:26:3b:3d:06:72:35:91:ec:6b:8e:f1:5a: 7d:5a:87:91:91:2e:b0:55:b5:c7:c8:e2:aa:ed:ad: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A9:03:C6:7D:AD:7D:7C:9B:9A:86:CA:F2:D4:F8:66:3E:BF:0F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d04197e6-4cc7-36ac-ab1a-c00b1295d619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b3:7b:34:a7:e5:10:08:b9:5c:ec:96:a9:5b:89:2d:6c:66: af:22:d0:48:e1:e4:4f:dd:c6:5b:83:28:94:37:3b:53:49:94: 0c:a1:a6:08:a5:fb:c4:47:3f:39:cb:c4:d8:6e:63:dc:18:3d: a3:85:f1:96:a2:12:37:2a:55:e2:33:03:75:d5:89:8d:3e:3b: 90:76:04:96:f4:18:4c:5c:30:c3:5e:be:70:0d:e3:a0:33:de: 7b:50:bf:66:5a:ac:35:c1:cf:b8:15:5f:69:15:35:cb:72:f5: a2:83:ee:a7:62:bc:76:fb:5c:54:87:75:0a:16:67:92:93:00: 6d:21:12:05:ed:8f:3f:ed:9f:e8:74:57:b6:0d:b6:bd:db:76: ae:f0:9e:00:6c:25:2c:31:af:ee:5a:c7:b9:47:3c:98:0a:97: 9f:47:68:f4:1a:13:ed:5a:48:ab:69:cc:4e:ec:63:d4:72:52: e4:81:17:e5:40:0e:87:76:f0:67:16:d4:66:8a:1e:94:a0:66: 83:06:e0:c8:c3:ba:9d:97:a6:c3:f9:98:27:1b:45:1f:13:08: 90:ce:5a:3a:93:94:97:dc:92:0b:97:f5:6c:b7:eb:92:52:cc: cb:f3:f1:38:df:a7:fc:6b:a3:67:59:86:6a:a2:02:c6:7e:5b: f9:78:ac:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1NrjWwfVsQaIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk YjhhYTI4YzAtMzUxZi00NzEzLTlhMzgtNGIwNzhiN2I0YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMkqfe+UeFwnqPl0/bwR9BoFqTnn8jlCxN9P b73suo5N3K2Xi0nzkClMivdC1ZdKIHr0u6qUhRsEI7S473a43YYM9aXB/0bj4cJA tsECmy+rUGnKflEcmBPAxOJxG5qGfHVD/AD0naprYDMByv3zOE8nATxRP4nldYFk idQxso43s8SXaQ9odPQdrudcewJzKCIQjP8ttOgtP4EjaOY0PurLQej4A6SwrAXj Cr2IOBw27cTzhB0UoZi2ol7/D5hDAKzMreRPodtOaqudOYku+wRza0yZrQfcYad4 6Jeva8cDcakmOz0GcjWR7GuO8Vp9WoeRkS6wVbXHyOKq7a39JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJipA8Z9rX18m5qGyvLU+GY+vw8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDA0MTk3ZTYtNGNjNy0z NmFjLWFiMWEtYzAwYjEyOTVkNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqzezSn5RAIuVzslqlbiS1sZq8i0Ejh5E/dxluDKJQ3O1NJlAyhpgil +8RHPznLxNhuY9wYPaOF8ZaiEjcqVeIzA3XViY0+O5B2BJb0GExcMMNevnAN46Az 3ntQv2ZarDXBz7gVX2kVNcty9aKD7qdivHb7XFSHdQoWZ5KTAG0hEgXtjz/tn+h0 V7YNtr3bdq7wngBsJSwxr+5ax7lHPJgKl59HaPQaE+1aSKtpzE7sY9RyUuSBF+VA Dod28GcW1GaKHpSgZoMG4MjDup2XpsP5mCcbRR8TCJDOWjqTlJfckguX9Wy365JS zMvz8Tjfp/xro2dZhmqiAsZ+W/l4rAQ= -----END CERTIFICATE-----Generated at Thu Jul 10 02:09:12 2025 by rpki-client