$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa File: 12afb9f1-e653-3840-aa8c-a6b6c6358412.roa (raw, json) Hash identifier: ObpdUQ32LJVIhdx0dEHsAPk7eIS+bK/qnrJt7UxBySY= Subject key identifier: 30:6F:34:CA:63:A2:D2:A5:45:01:A6:0E:FC:7C:AC:67:70:59:E1:67 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B959BCD8F81222DCAAF00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:95:9b:cd:8f:81:22:2d:ca:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=25e99237-6af2-475d-aff4-3f3a9fde90db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:59:51:6a:7c:13:21:76:19:d7:8d:9b:4a: 2c:4c:d0:02:70:44:43:db:fc:22:03:db:1c:ee:0f: 6f:26:1e:c9:bb:33:1d:e0:04:14:01:09:89:96:c3: 35:79:8a:bc:94:16:a7:97:92:41:ef:b6:a8:2d:88: 92:21:4e:bc:5c:dd:1d:b4:c6:49:4b:45:9d:38:10: 67:b5:56:3a:de:0f:e1:16:e6:70:a2:48:b4:cd:d5: c0:21:ee:ff:2c:17:39:8d:2c:9b:d3:52:5a:14:4e: cf:e5:03:f3:d0:40:d3:81:15:be:e4:e5:72:67:75: f4:96:e3:5d:f2:8e:84:51:61:3e:d3:d9:cf:48:c4: f2:46:a1:89:ab:71:46:29:a7:40:06:ea:e9:39:46: 2b:f7:ff:28:30:cf:71:b1:cd:a7:ca:d7:84:3e:d1: f2:b0:89:89:23:96:0d:32:40:a1:40:67:23:bb:11: a7:32:98:1f:10:eb:45:4c:4c:3c:5f:a7:06:ee:3a: da:cd:66:6f:18:39:64:33:5e:b9:1e:57:13:05:f9: ee:fe:82:2a:1b:39:76:22:3b:69:b0:78:b8:24:36: d1:4a:71:89:8d:5e:50:7c:16:d1:67:b6:7f:5e:92: 52:6f:62:e8:16:3f:c1:61:de:32:d2:b6:a7:66:79: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6F:34:CA:63:A2:D2:A5:45:01:A6:0E:FC:7C:AC:67:70:59:E1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bb:4e:7d:c1:37:48:50:3a:45:b9:b9:4a:51:af:5e:ab:8f: bc:d0:ef:4e:19:33:22:6f:22:6d:2a:4e:ee:f8:50:57:a7:7c: ee:6a:26:43:09:70:cd:6f:00:ad:4d:4f:6b:ca:24:23:9e:7f: 9e:3c:72:1c:f5:2c:6e:2b:36:00:f4:a1:28:8d:c0:a4:3a:c3: cb:14:a9:f7:2b:7c:a2:d6:7c:79:ab:9d:b4:3b:f4:e9:43:55: c4:31:88:c2:59:bf:b2:84:74:33:76:04:d4:a5:f3:7e:2b:a9: d5:cf:b9:40:1c:b0:0b:c8:0c:82:39:ab:73:05:a6:1d:5b:71: 1d:d7:75:64:30:16:05:21:5c:f7:54:0f:3f:74:4e:76:eb:57: 49:1a:15:14:52:ca:6a:10:f2:30:78:7f:eb:b7:06:70:ff:4a: 5a:c2:40:9b:bd:31:e0:c8:b8:84:79:1c:11:19:65:55:1a:aa: da:c6:bf:28:01:8d:74:c6:cc:30:f7:e6:35:6a:59:72:51:58: c6:d8:24:da:9f:49:6a:3f:41:4f:16:b9:61:ff:02:78:73:6a: 3c:53:2f:c0:f4:29:ee:d3:77:fe:7a:ff:66:9f:6d:66:27:0e: 36:65:d2:99:6d:4d:c3:a6:71:1d:1f:05:9d:b5:75:f2:18:3e: d2:94:f1:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5WbzY+BIi3KrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjVlOTkyMzctNmFmMi00NzVkLWFmZjQtM2YzYTlmZGU5MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRFZUWp8EyF2GdeNm0osTNACcERD2/wiA9sc 7g9vJh7JuzMd4AQUAQmJlsM1eYq8lBanl5JB77aoLYiSIU68XN0dtMZJS0WdOBBn tVY63g/hFuZwoki0zdXAIe7/LBc5jSyb01JaFE7P5QPz0EDTgRW+5OVyZ3X0luNd 8o6EUWE+09nPSMTyRqGJq3FGKadABurpOUYr9/8oMM9xsc2nyteEPtHysImJI5YN MkChQGcjuxGnMpgfEOtFTEw8X6cG7jrazWZvGDlkM165HlcTBfnu/oIqGzl2Ijtp sHi4JDbRSnGJjV5QfBbRZ7Z/XpJSb2LoFj/BYd4y0ranZnknnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBvNMpjotKlRQGmDvx8rGdwWeFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTJhZmI5ZjEtZTY1My0z ODQwLWFhOGMtYTZiNmM2MzU4NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG7Tn3BN0hQOkW5uUpRr16rj7zQ704ZMyJvIm0qTu74UFenfO5qJkMJ cM1vAK1NT2vKJCOef548chz1LG4rNgD0oSiNwKQ6w8sUqfcrfKLWfHmrnbQ79OlD VcQxiMJZv7KEdDN2BNSl834rqdXPuUAcsAvIDII5q3MFph1bcR3XdWQwFgUhXPdU Dz90TnbrV0kaFRRSymoQ8jB4f+u3BnD/SlrCQJu9MeDIuIR5HBEZZVUaqtrGvygB jXTGzDD35jVqWXJRWMbYJNqfSWo/QU8WuWH/AnhzajxTL8D0Ke7Td/56/2afbWYn DjZl0pltTcOmcR0fBZ21dfIYPtKU8ZI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:51 2025 by rpki-client