$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf958e5-27ff-332e-aa19-692c325025ea.roa File: ecf958e5-27ff-332e-aa19-692c325025ea.roa (raw, json) Hash identifier: 6r94LLV93fnwRajIU80mdU871wr+Ei6nxc+47iNLfpo= Subject key identifier: 30:3A:08:FD:F7:0C:A4:80:F9:B7:E1:C0:41:17:91:E7:69:42:4B:4F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350C6D3B7CC3957D8A3A338 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf958e5-27ff-332e-aa19-692c325025ea.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:c6:d3:b7:cc:39:57:d8:a3:a3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=99103b29-f226-454a-bee4-20dda8614d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0a:e5:8a:c3:a1:81:ef:42:fc:2e:86:d2:a5: de:92:48:31:22:9f:a0:12:44:51:e5:52:f9:ec:4c: b2:68:3f:74:78:03:7c:94:6b:ae:bd:4c:b6:c1:f8: 47:fa:7e:44:4f:36:c6:a0:89:7d:5a:4c:67:e3:44: e0:78:68:4e:0f:a0:52:6a:a4:93:bd:8c:48:5b:7f: dd:7d:82:9b:f4:68:30:03:8b:4d:db:e1:44:06:33: ad:be:90:9c:a3:50:da:e1:75:e1:91:8b:e5:48:b5: fb:72:dd:31:6c:7b:73:9f:2e:09:0f:d5:47:87:3c: e0:42:10:8d:ba:c0:4a:dc:e1:2d:25:a7:2b:e2:ae: 54:3c:10:79:5b:f4:e9:a5:6f:dd:6c:3a:23:3d:a0: 6a:11:f9:b6:31:1c:fd:82:17:be:c6:79:53:b3:af: 52:68:3e:62:bb:05:ea:d2:27:e1:68:b8:34:37:cb: 58:2a:13:ab:fe:0a:90:f8:91:d4:fe:27:01:e4:ef: b2:e0:f5:9b:5a:eb:67:42:4a:0e:30:0a:23:84:01: ef:58:4a:27:48:fe:b3:74:ad:bc:db:bb:78:72:1f: bf:9c:fb:37:cd:16:74:a8:ce:8f:b6:b6:6b:ee:f0: d2:3a:60:2c:81:4f:64:e7:02:43:1f:68:95:83:23: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:08:FD:F7:0C:A4:80:F9:B7:E1:C0:41:17:91:E7:69:42:4B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf958e5-27ff-332e-aa19-692c325025ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:56:20:d3:4c:9f:d2:e4:cd:b4:ec:19:41:22:db:43:71:26: 6b:f9:fa:4a:9e:6b:e9:f2:20:e2:85:4b:10:d2:ab:6c:14:7b: 37:0b:e0:86:de:43:df:0a:35:72:af:e8:d1:18:c8:6f:f3:15: fa:11:d8:f8:23:dc:f9:56:7c:12:9c:d3:c9:af:57:8f:e1:f3: 0d:d7:5b:a1:68:f2:7a:f7:4e:c1:5a:2d:4e:3c:b7:1c:e5:89: 01:2e:57:3e:2e:70:8e:7b:ac:fa:7f:ac:5c:fb:52:d9:97:eb: 96:9c:56:b3:c4:82:68:d3:04:05:1e:b0:68:c0:0e:7f:8a:bc: 0b:30:6d:78:83:5d:04:f1:36:3e:86:3c:b6:79:20:12:ce:8d: d1:54:97:7e:d8:70:df:43:9c:28:00:22:6b:ca:07:97:d9:e2: 93:26:ca:f9:7c:5f:4b:f0:d4:f0:08:02:a1:d1:1c:52:96:71: e2:81:f9:ac:47:c9:4f:70:39:68:d0:e0:6b:e7:a6:ba:bf:de: 38:8d:3c:16:e4:5b:6a:1e:07:c4:6a:a1:c1:42:06:34:e7:dd: 8b:8d:1f:2e:95:a0:89:b8:44:e1:c0:ad:12:87:b8:7c:ea:19: 09:c4:ab:ee:49:e6:76:35:3c:81:30:2f:7b:13:40:83:63:66: 52:12:61:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMbTt8w5V9ijozgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk OTkxMDNiMjktZjIyNi00NTRhLWJlZTQtMjBkZGE4NjE0ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiArlisOhge9C/C6G0qXekkgxIp+gEkRR5VL5 7EyyaD90eAN8lGuuvUy2wfhH+n5ETzbGoIl9Wkxn40TgeGhOD6BSaqSTvYxIW3/d fYKb9GgwA4tN2+FEBjOtvpCco1Da4XXhkYvlSLX7ct0xbHtzny4JD9VHhzzgQhCN usBK3OEtJacr4q5UPBB5W/TppW/dbDojPaBqEfm2MRz9ghe+xnlTs69SaD5iuwXq 0ifhaLg0N8tYKhOr/gqQ+JHU/icB5O+y4PWbWutnQkoOMAojhAHvWEonSP6zdK28 27t4ch+/nPs3zRZ0qM6PtrZr7vDSOmAsgU9k5wJDH2iVgyNwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA6CP33DKSA+bfhwEEXkedpQktPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNmOTU4ZTUtMjdmZi0z MzJlLWFhMTktNjkyYzMyNTAyNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRWINNMn9LkzbTsGUEi20NxJmv5+kqea+nyIOKFSxDSq2wUezcL4Ibe Q98KNXKv6NEYyG/zFfoR2Pgj3PlWfBKc08mvV4/h8w3XW6Fo8nr3TsFaLU48txzl iQEuVz4ucI57rPp/rFz7UtmX65acVrPEgmjTBAUesGjADn+KvAswbXiDXQTxNj6G PLZ5IBLOjdFUl37YcN9DnCgAImvKB5fZ4pMmyvl8X0vw1PAIAqHRHFKWceKB+axH yU9wOWjQ4Gvnprq/3jiNPBbkW2oeB8RqocFCBjTn3YuNHy6VoIm4ROHArRKHuHzq GQnEq+5J5nY1PIEwL3sTQINjZlISYTE= -----END CERTIFICATE-----Generated at Thu Jul 10 02:27:14 2025 by rpki-client