$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa File: 201dc264-73e9-3451-a68e-1cafec19dd3f.roa (raw, json) Hash identifier: lBCURKJF2ruLS4hnTmF+6kp5/g64dp7gLG6JRe0beWc= Subject key identifier: EF:19:9A:95:A4:DE:F8:04:3F:CD:22:58:03:5D:8F:8F:58:75:58:C3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350B54D507F953DB20155C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:b5:4d:50:7f:95:3d:b2:01:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=d0b0a63f-c1f5-4008-a54e-f34dfbedfb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:50:b7:04:10:f4:51:f3:44:94:63:b3:21: f6:6f:94:88:63:41:04:96:52:f1:0a:5f:36:a0:5e: ae:c2:99:e3:71:8c:33:bc:ae:65:6a:af:fa:db:a6: 4a:bb:ff:ee:b0:c7:36:9b:1a:11:3b:b8:d6:9e:0e: 22:44:c7:16:1e:d2:1c:6a:f6:ee:ab:53:d1:de:aa: de:61:eb:ba:fc:73:64:27:1e:e8:15:96:29:13:91: 61:8d:7f:89:1d:92:bd:04:b0:8f:e1:fd:62:3b:fd: a9:3b:0d:59:43:d8:c5:ba:5b:c9:7d:86:1b:44:e0: 65:82:07:88:ba:32:53:78:27:7e:36:44:32:6b:be: 42:95:e8:c5:3a:81:24:db:cf:a7:28:1a:5e:a7:57: 34:a0:1e:58:b4:8c:a2:96:f2:89:b5:c1:35:77:2d: e0:7d:9f:d7:c7:5a:64:2b:97:04:d9:36:b3:b8:11: 84:f7:db:b9:bd:d5:26:2a:53:0e:50:93:de:0d:ce: 1e:53:52:03:2b:68:62:68:ca:71:b5:ff:52:45:c9: 25:f0:c8:b4:56:06:bb:4a:5c:54:01:b4:4a:d2:22: 70:1b:21:09:15:88:4a:a6:e5:95:b6:c2:f8:0c:ec: 38:71:fc:4c:c6:1a:a5:98:24:cf:b3:87:d3:f9:b4: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:19:9A:95:A4:DE:F8:04:3F:CD:22:58:03:5D:8F:8F:58:75:58:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:44:85:e8:74:09:8a:f3:e7:f2:08:df:15:c1:8e:b9:73:27: a8:85:cc:8e:3d:be:95:79:f9:5e:37:23:63:08:80:f5:e6:1a: 7d:f3:f3:37:70:c8:e5:4f:65:e4:76:2e:2b:44:e5:aa:72:fa: e9:6b:49:2f:60:d2:bb:bf:fc:d9:3a:63:05:13:9b:67:69:40: 2f:1f:42:10:a1:4a:e4:17:7b:0e:80:c7:33:91:c2:e0:1e:9c: cd:59:15:1a:67:eb:a8:9d:c5:96:c6:17:f7:cd:16:4e:76:3e: 10:37:f6:7d:c5:bb:de:56:f8:8d:93:72:f4:06:3f:12:31:bc: b7:de:7f:5b:65:af:59:ea:b0:58:83:59:c2:fc:39:04:43:19: e6:c1:98:ab:75:76:c3:5b:58:79:77:6a:b7:e5:a5:af:80:1a: 51:22:3b:4b:52:ed:68:b6:74:f0:b1:a3:55:a7:fc:90:cb:79: 4a:f4:5f:04:26:07:68:b8:28:9a:8c:43:43:70:7b:24:e2:09: 15:1b:49:e7:4c:3b:79:83:ea:1b:fe:83:ce:b9:96:87:ab:c8: 05:89:61:30:28:1d:54:13:3a:04:dd:7e:c1:8e:65:e9:29:cd: 27:11:88:dc:fd:7d:cc:32:0b:02:35:9a:c7:6b:b3:af:aa:18: 1f:a1:7a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULVNUH+VPbIBVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZDBiMGE2M2YtYzFmNS00MDA4LWE1NGUtZjM0ZGZiZWRmYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWxQtwQQ9FHzRJRjsyH2b5SIY0EEllLxCl82 oF6uwpnjcYwzvK5laq/626ZKu//usMc2mxoRO7jWng4iRMcWHtIcavbuq1PR3qre Yeu6/HNkJx7oFZYpE5FhjX+JHZK9BLCP4f1iO/2pOw1ZQ9jFulvJfYYbROBlggeI ujJTeCd+NkQya75ClejFOoEk28+nKBpep1c0oB5YtIyilvKJtcE1dy3gfZ/Xx1pk K5cE2TazuBGE99u5vdUmKlMOUJPeDc4eU1IDK2hiaMpxtf9SRckl8Mi0Vga7SlxU AbRK0iJwGyEJFYhKpuWVtsL4DOw4cfxMxhqlmCTPs4fT+bS7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8ZmpWk3vgEP80iWANdj49YdVjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjAxZGMyNjQtNzNlOS0z NDUxLWE2OGUtMWNhZmVjMTlkZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpEheh0CYrz5/II3xXBjrlzJ6iFzI49vpV5+V43I2MIgPXmGn3z8zdw yOVPZeR2LitE5apy+ulrSS9g0ru//Nk6YwUTm2dpQC8fQhChSuQXew6AxzORwuAe nM1ZFRpn66idxZbGF/fNFk52PhA39n3Fu95W+I2TcvQGPxIxvLfef1tlr1nqsFiD WcL8OQRDGebBmKt1dsNbWHl3arflpa+AGlEiO0tS7Wi2dPCxo1Wn/JDLeUr0XwQm B2i4KJqMQ0NweyTiCRUbSedMO3mD6hv+g865loeryAWJYTAoHVQTOgTdfsGOZekp zScRiNz9fcwyCwI1msdrs6+qGB+hevU= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:11 2025 by rpki-client