$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ffbf2da-f8e9-38af-b2d5-b86237932089.roa File: 3ffbf2da-f8e9-38af-b2d5-b86237932089.roa (raw, json) Hash identifier: zJRrlbSe5cO9gmJYwThVijbNDtgq+u3EonGVWrqoujs= Subject key identifier: 70:23:C1:48:68:FE:1C:5E:82:04:8C:D6:90:CB:C6:9F:28:4A:A5:C0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A778D9755DD0C6F38C40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ffbf2da-f8e9-38af-b2d5-b86237932089.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 395973 IP address blocks: 104.134.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a7:78:d9:75:5d:d0:c6:f3:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=de212310-2f25-48a8-9c59-91ceaba3649f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:44:7e:be:51:31:a4:70:86:9e:47:dc:e5: 82:92:c6:bf:11:3e:71:9f:60:6d:2b:35:a8:42:30: 4b:dc:cd:10:81:c9:e9:8c:e0:9d:18:ac:86:75:85: d4:36:57:a5:66:f9:bc:4a:63:2d:24:d4:a0:08:68: d2:fe:26:0f:f4:82:92:27:0f:c2:54:ab:fb:95:91: 23:cf:f9:20:13:4b:c7:94:7e:82:a2:28:70:02:c3: 5f:d3:b8:75:14:2a:91:31:51:14:0c:b9:90:3a:2e: 73:dc:cb:a1:76:1d:e8:59:c6:a8:67:f8:9f:58:33: 03:65:b3:be:0a:22:18:64:de:25:43:f4:f7:83:3a: 81:21:15:3a:c9:50:9c:df:36:d7:7c:bd:38:44:35: 26:46:c4:62:0c:93:8f:42:c5:72:42:67:4b:0e:89: a9:7d:ce:b6:a4:b2:58:2e:ce:d4:43:c1:bd:57:b8: ac:d5:78:bc:e9:0c:0e:20:7c:c8:b0:7e:c2:29:05: b0:e1:6c:df:60:20:18:15:39:a5:a3:5e:3c:72:29: f2:23:04:6e:62:ee:b7:ed:5c:c1:20:64:6e:1f:45: ba:1b:39:fa:11:e5:0b:1a:bf:21:fd:59:0e:65:96: 28:62:c1:f0:5c:99:6d:85:e5:be:86:5f:cc:56:bf: 7a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:C1:48:68:FE:1C:5E:82:04:8C:D6:90:CB:C6:9F:28:4A:A5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ffbf2da-f8e9-38af-b2d5-b86237932089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:19:a1:6a:ee:75:93:aa:23:f1:aa:23:5c:fc:2a:08:e9:0a: 3e:41:8d:72:df:aa:66:4b:a8:8b:de:e7:9a:e0:51:82:05:87: 9f:54:48:c7:e7:e7:43:6d:99:e0:61:8f:0b:d0:cf:35:0b:ab: 4f:66:f6:40:0a:29:81:5d:67:7e:50:11:dc:9b:52:1b:27:bf: e0:81:c5:9d:8c:d3:f7:26:57:16:db:c0:6f:a3:08:68:1f:f1: af:89:4e:24:d1:32:5f:8a:a4:05:c3:9c:d8:89:7b:9a:ad:ff: 10:39:0c:3b:90:50:d6:04:34:ea:b6:6c:0e:91:df:e5:f9:4c: be:6b:89:19:0b:c2:f0:6a:e5:a8:71:7b:68:06:09:90:26:40: ff:78:04:7a:8a:4a:ab:9a:67:55:9f:6e:45:78:9d:27:7b:c5: 81:7b:55:fb:d2:77:c9:04:02:95:9b:4b:4e:8c:bf:08:f4:42: d1:0c:70:c3:e0:70:5d:6d:c0:94:9c:02:50:92:bb:a1:23:02: 60:db:3c:56:a5:f5:1b:d8:53:a6:5f:1c:40:66:2a:84:0c:5c: 0b:96:f4:d2:8a:eb:7d:b3:9d:97:f0:c2:cc:53:52:35:38:f6: 34:53:84:7b:c3:6b:de:1d:95:64:0a:43:fa:90:fa:fa:87:31: f7:92:8b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKd42XVd0MbzjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZGUyMTIzMTAtMmYyNS00OGE4LTljNTktOTFjZWFiYTM2NDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4tEfr5RMaRwhp5H3OWCksa/ET5xn2BtKzWo QjBL3M0QgcnpjOCdGKyGdYXUNlelZvm8SmMtJNSgCGjS/iYP9IKSJw/CVKv7lZEj z/kgE0vHlH6CoihwAsNf07h1FCqRMVEUDLmQOi5z3Muhdh3oWcaoZ/ifWDMDZbO+ CiIYZN4lQ/T3gzqBIRU6yVCc3zbXfL04RDUmRsRiDJOPQsVyQmdLDompfc62pLJY Ls7UQ8G9V7is1Xi86QwOIHzIsH7CKQWw4WzfYCAYFTmlo148cinyIwRuYu637VzB IGRuH0W6Gzn6EeULGr8h/VkOZZYoYsHwXJltheW+hl/MVr96dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAjwUho/hxeggSM1pDLxp8oSqXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2ZmYmYyZGEtZjhlOS0z OGFmLWIyZDUtYjg2MjM3OTMyMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcZoWrudZOqI/GqI1z8KgjpCj5BjXLfqmZLqIve55rgUYIFh59USMfn 50NtmeBhjwvQzzULq09m9kAKKYFdZ35QEdybUhsnv+CBxZ2M0/cmVxbbwG+jCGgf 8a+JTiTRMl+KpAXDnNiJe5qt/xA5DDuQUNYENOq2bA6R3+X5TL5riRkLwvBq5ahx e2gGCZAmQP94BHqKSquaZ1WfbkV4nSd7xYF7VfvSd8kEApWbS06Mvwj0QtEMcMPg cF1twJScAlCSu6EjAmDbPFal9RvYU6ZfHEBmKoQMXAuW9NKK632znZfwwsxTUjU4 9jRThHvDa94dlWQKQ/qQ+vqHMfeSiy0= -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:50 2025 by rpki-client