$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa File: 0420b0b8-286f-3424-a553-e98e12f985bc.roa (raw, json) Hash identifier: l5sEPQSF8S6Zc7BLvw6ekH+RI9kiheS6D5k34KaDolc= Subject key identifier: 67:F2:CB:2E:84:4F:FB:BF:4E:AA:6C:7D:3E:AD:85:FA:1A:57:46:50 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B90A73E0BFB8CA4F6F480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:90:a7:3e:0b:fb:8c:a4:f6:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=33700f5c-a16d-44c0-b835-a60764e69af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:94:39:de:62:50:35:35:2e:7d:5e:2d:84: 40:2d:b4:4b:9d:24:32:5a:4e:94:45:cb:d3:31:3f: 8a:6b:d7:55:32:6b:a8:db:ba:20:9a:d1:20:6e:cb: d9:3c:c2:61:ce:ff:47:1f:ae:1e:42:06:ca:ca:c7: 12:7d:8d:8b:8a:28:53:f7:11:9b:97:9b:9a:ab:54: 49:de:74:32:b6:e1:c5:20:20:0e:11:f2:49:a0:87: 19:d7:a6:35:40:fc:94:0f:2a:16:94:1d:05:9c:76: 13:3f:0d:63:6d:52:1d:ee:53:04:f1:0b:ed:63:56: b0:7f:d4:f0:0b:cb:51:38:e1:95:ac:7d:6f:69:5c: 26:3f:2e:82:e4:c6:6f:98:21:67:c2:a2:f3:31:3e: ed:8e:5d:a3:78:18:5e:bd:2c:80:db:32:a8:17:38: ce:21:f9:9b:43:bd:0a:20:0d:f3:75:cb:ce:6b:ef: 69:57:9e:e5:fa:75:7e:11:1c:f2:ab:90:c3:c5:87: 8d:75:f3:74:e6:f9:24:b5:0c:d6:af:18:45:d0:cd: 31:0f:2d:b3:bf:63:11:22:ea:a9:1e:71:fb:fb:2d: 94:16:8d:99:da:34:4b:70:3e:cb:72:6e:10:cd:72: c0:e2:3c:d0:6b:4d:14:f9:7b:c9:98:13:6c:d5:2b: c5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F2:CB:2E:84:4F:FB:BF:4E:AA:6C:7D:3E:AD:85:FA:1A:57:46:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:19:8c:f4:c1:45:f7:39:fd:6a:30:51:0b:05:45:12:ae:3e: 20:77:99:9f:59:c0:a1:b7:e4:7a:ca:18:a9:68:d7:36:d2:79: c6:8e:00:1c:c4:0a:1d:fa:2b:4f:a5:ee:28:3c:39:9a:b2:38: 44:c1:2d:04:9a:1a:9a:5c:c2:de:5e:2f:35:db:82:7b:54:f6: 0c:dd:1e:b0:80:0f:ce:e8:a4:69:0e:25:be:c9:1e:32:2c:d3: 5e:63:e0:74:77:7f:18:09:c5:76:88:e6:fe:5d:a5:6e:b2:4f: 3f:a2:4d:3f:ff:82:4e:65:6b:92:40:ad:41:fd:01:42:f1:b8: 7d:c0:c0:1e:d0:63:61:cf:af:d0:2d:4e:cc:cf:e2:15:b7:cf: d0:d7:a2:cf:9f:a5:eb:8e:87:8b:bb:fb:56:6e:c8:16:69:99: 21:c8:69:b6:02:b2:8b:50:c0:30:e3:fd:01:d3:a2:61:82:a1: f6:30:82:3d:4a:4a:90:c8:86:52:4d:a9:0f:5e:48:93:c9:ab: 3a:36:cd:a3:02:9d:ff:e9:66:8b:67:84:6c:59:4c:65:b1:da: ba:bc:b5:f4:ef:09:91:0e:13:a7:73:36:e4:8b:36:8f:59:34: b3:65:5c:5e:48:dd:85:69:c1:ec:ab:4e:6c:7f:96:c5:c2:b3: bd:a6:c3:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5CnPgv7jKT29IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzM3MDBmNWMtYTE2ZC00NGMwLWI4MzUtYTYwNzY0ZTY5YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcSUOd5iUDU1Ln1eLYRALbRLnSQyWk6URcvT MT+Ka9dVMmuo27ogmtEgbsvZPMJhzv9HH64eQgbKyscSfY2LiihT9xGbl5uaq1RJ 3nQytuHFICAOEfJJoIcZ16Y1QPyUDyoWlB0FnHYTPw1jbVId7lME8QvtY1awf9Tw C8tROOGVrH1vaVwmPy6C5MZvmCFnwqLzMT7tjl2jeBhevSyA2zKoFzjOIfmbQ70K IA3zdcvOa+9pV57l+nV+ERzyq5DDxYeNdfN05vkktQzWrxhF0M0xDy2zv2MRIuqp HnH7+y2UFo2Z2jRLcD7Lcm4QzXLA4jzQa00U+XvJmBNs1SvFJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfyyy6ET/u/TqpsfT6thfoaV0ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDQyMGIwYjgtMjg2Zi0z NDI0LWE1NTMtZTk4ZTEyZjk4NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0ZjPTBRfc5/WowUQsFRRKuPiB3mZ9ZwKG35HrKGKlo1zbSecaOABzE Ch36K0+l7ig8OZqyOETBLQSaGppcwt5eLzXbgntU9gzdHrCAD87opGkOJb7JHjIs 015j4HR3fxgJxXaI5v5dpW6yTz+iTT//gk5la5JArUH9AULxuH3AwB7QY2HPr9At TszP4hW3z9DXos+fpeuOh4u7+1ZuyBZpmSHIabYCsotQwDDj/QHTomGCofYwgj1K SpDIhlJNqQ9eSJPJqzo2zaMCnf/pZotnhGxZTGWx2rq8tfTvCZEOE6dzNuSLNo9Z NLNlXF5I3YVpweyrTmx/lsXCs72mwyU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:11 2025 by rpki-client