$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa File: 4462c342-789f-32c1-87ce-a167a409d21b.roa (raw, json) Hash identifier: JZqGn+D5bDHSOVAW9uLP4Ln9L4uSVROyTmICcBFsWKI= Subject key identifier: 63:A9:1A:71:4E:70:61:C4:53:A9:FC:C2:69:E5:94:DC:FF:FB:E8:50 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A6DBB6F09A12A6A7BEF093F18 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 41264 IP address blocks: 104.132.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:6f:09:a1:2a:6a:7b:ef:09:3f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=0d8f49f1-830f-4cbd-99d3-8424dafc31e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:4f:39:29:22:f1:5c:3a:da:0f:e8:03:d2: d8:b6:20:ba:bb:8f:e6:17:20:2a:7a:66:54:52:e6: 51:0b:61:7a:22:8f:bf:13:ae:4f:c1:13:7c:dc:fd: 1f:da:ba:f1:8f:0e:ce:8c:69:96:f3:f3:78:18:c0: fc:42:85:ce:31:1d:a2:fb:bb:66:26:7a:7e:75:cc: e7:e1:26:25:99:ca:c4:53:95:99:71:22:26:19:c9: 86:24:b2:1f:57:06:53:79:cb:93:ba:95:c5:82:3a: 62:ad:c7:15:5f:e6:19:8c:1a:38:d8:77:c2:59:d2: 44:d1:11:ac:f7:74:c3:5d:c9:69:79:b5:75:bb:57: e5:17:9b:fa:ce:b8:7b:d7:93:1f:53:cf:2d:b2:35: 8d:25:ec:57:47:db:42:2c:84:d8:29:25:57:0d:d3: 1f:99:cb:8e:74:86:35:a5:e7:f0:27:65:f7:54:ae: 31:e3:25:11:69:f2:7b:71:f5:35:14:e4:be:ff:9b: bb:b7:87:37:65:36:84:ac:8e:fa:00:f2:f1:de:64: 13:36:b7:9e:b3:b2:36:9f:f4:42:7a:a0:d0:5a:89: 0c:37:4d:95:13:f0:f4:85:fd:b0:40:41:03:d1:eb: 4c:6d:b4:55:e1:00:ce:57:10:ad:0a:41:46:f5:6d: ad:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A9:1A:71:4E:70:61:C4:53:A9:FC:C2:69:E5:94:DC:FF:FB:E8:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4462c342-789f-32c1-87ce-a167a409d21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:50:0d:ba:61:43:61:9c:d9:aa:10:90:37:0f:0f:30:20:8e: 58:0e:00:0e:8f:05:4e:0f:91:ac:8f:7f:1e:02:8d:1a:66:1d: 2c:d7:64:a3:8b:9d:16:42:84:57:20:a6:5a:95:b0:0c:9d:75: 52:dd:53:23:c3:69:16:7b:9e:75:80:0f:ba:6b:81:c5:cf:f2: 35:a5:be:da:ba:e4:7a:10:7e:a2:bc:18:22:45:d8:a5:f3:c1: b4:9a:f1:fb:9c:65:f4:f4:fc:b6:e8:80:87:ab:e7:db:24:72: ae:4c:01:38:9f:cd:1b:ea:ad:19:f3:1f:47:ea:20:e7:ab:f9: 4f:5a:25:bd:d7:c9:9c:2a:70:84:8f:88:13:07:f5:0a:54:c1: 00:97:1b:2e:dd:6e:8d:21:b1:ac:06:72:6b:23:e8:93:e2:07: ab:2c:89:95:60:f6:9d:16:0c:46:11:40:ba:66:f9:69:ec:de: 4a:3a:91:da:4b:2b:bb:32:29:74:f2:c5:21:41:dd:b3:f0:bd: b4:91:51:4e:08:15:05:e5:9e:a7:53:0d:41:b2:cd:35:8b:be: 52:25:9f:f6:52:4a:3a:58:5f:08:bf:51:7d:6a:dc:d8:97:99: 41:f6:66:36:8e:ee:38:f2:3e:19:cb:00:42:7c:7f:30:67:ce: 05:b5:38:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu28JoSpqe+8JPxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MGQ4ZjQ5ZjEtODMwZi00Y2JkLTk5ZDMtODQyNGRhZmMzMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloRPOSki8Vw62g/oA9LYtiC6u4/mFyAqemZU UuZRC2F6Io+/E65PwRN83P0f2rrxjw7OjGmW8/N4GMD8QoXOMR2i+7tmJnp+dczn 4SYlmcrEU5WZcSImGcmGJLIfVwZTecuTupXFgjpirccVX+YZjBo42HfCWdJE0RGs 93TDXclpebV1u1flF5v6zrh715MfU88tsjWNJexXR9tCLITYKSVXDdMfmcuOdIY1 pefwJ2X3VK4x4yURafJ7cfU1FOS+/5u7t4c3ZTaErI76APLx3mQTNrees7I2n/RC eqDQWokMN02VE/D0hf2wQEED0etMbbRV4QDOVxCtCkFG9W2tTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOpGnFOcGHEU6n8wmnllNz/++hQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDQ2MmMzNDItNzg5Zi0z MmMxLTg3Y2UtYTE2N2E0MDlkMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChQDbphQ2Gc2aoQkDcPDzAgjlgOAA6PBU4PkayPfx4CjRpmHSzXZKOL nRZChFcgplqVsAyddVLdUyPDaRZ7nnWAD7prgcXP8jWlvtq65HoQfqK8GCJF2KXz wbSa8fucZfT0/LbogIer59skcq5MATifzRvqrRnzH0fqIOer+U9aJb3XyZwqcISP iBMH9QpUwQCXGy7dbo0hsawGcmsj6JPiB6ssiZVg9p0WDEYRQLpm+Wns3ko6kdpL K7syKXTyxSFB3bPwvbSRUU4IFQXlnqdTDUGyzTWLvlIln/ZSSjpYXwi/UX1q3NiX mUH2ZjaO7jjyPhnLAEJ8fzBnzgW1OLg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:44:39 2025 by rpki-client