$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa505ab1-0190-302d-87af-27ebe23fc30b.roa File: aa505ab1-0190-302d-87af-27ebe23fc30b.roa (raw, json) Hash identifier: VWCDr5Fgvz7VRrNYGJm3CT1i4gEl+h4vs0CFLrN6UmI= Subject key identifier: 30:E7:C2:F3:59:76:56:DC:F3:DD:F3:A9:47:3B:C3:FB:34:0D:8E:93 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A70861A089507F0DE60B3B400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa505ab1-0190-302d-87af-27ebe23fc30b.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 41264 IP address blocks: 104.132.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:86:1a:08:95:07:f0:de:60:b3:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=1dbacfd8-a658-4d63-9fbc-5eea56ca15b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:08:63:49:d1:dd:dc:0a:9b:37:9a:e2:4a: f9:69:ab:97:ec:32:07:8d:04:ff:54:a6:9f:9b:66: 08:d0:41:cc:bf:33:1d:81:8a:26:42:02:5b:81:1a: 83:a1:00:e7:09:03:c9:be:6a:75:8a:9f:9f:2f:23: 18:4d:b5:1e:cc:45:9a:72:59:6a:3c:f2:0e:96:ff: 75:05:d0:1f:5b:35:16:02:94:26:11:9a:61:0f:90: 65:db:5f:6b:10:d2:48:37:48:b9:8b:7d:cc:50:f6: ee:68:cd:b2:76:66:4d:e4:a9:4f:17:be:aa:b7:51: 62:47:f1:94:19:8e:71:6e:f8:f6:bd:a8:be:a8:9d: fe:79:6d:eb:5a:a3:f8:1f:c1:d2:38:4c:9d:a8:e5: e2:0f:cc:45:e3:67:c3:27:70:8c:ab:6e:3f:6f:b1: fc:b4:4b:88:58:01:ea:ff:98:14:04:45:68:7b:3b: e2:7b:b5:e2:00:60:cf:0f:1b:70:17:9e:f4:16:ff: cc:d9:31:a3:23:d2:0e:97:21:67:f9:da:d2:7d:f1: c4:f9:ed:1d:0a:60:61:ef:f8:b8:84:47:8b:c4:00: d6:ae:27:f3:6c:f1:53:33:de:4f:bd:75:e7:3d:42: ea:01:0d:1f:0d:16:3a:4d:56:e8:ed:6c:b4:3e:b6: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E7:C2:F3:59:76:56:DC:F3:DD:F3:A9:47:3B:C3:FB:34:0D:8E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa505ab1-0190-302d-87af-27ebe23fc30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:23:9a:16:26:ee:50:51:01:a3:5b:9d:2c:bd:6f:51:b7:ea: a2:e2:ac:19:ba:ea:5f:78:86:f1:26:ee:8f:8b:20:75:f0:aa: 49:3d:30:e0:78:83:1c:56:44:bd:46:63:ca:c7:52:e6:aa:21: 78:ab:11:18:89:0b:c1:d9:1e:2f:eb:2b:5a:e8:58:91:73:58: 10:97:ee:ac:29:82:40:62:eb:da:f0:f3:bf:4d:45:0f:37:e9: 5a:96:7c:82:47:a8:69:6d:ce:83:9a:04:98:b7:7d:21:e6:6c: 69:ae:d5:95:9a:b7:22:fc:c5:37:69:4a:c6:17:b1:3a:e2:00: 2f:85:a8:4d:e2:5c:b0:46:95:fd:02:90:2b:00:12:a7:33:cf: 38:46:d3:15:40:db:c8:56:22:ac:bc:ca:fe:59:4a:7f:fb:26: ca:4e:a4:9d:f5:e3:7c:ac:42:ee:b9:57:65:0e:8a:7e:59:f4: 67:f9:0f:a2:9e:f2:61:11:a8:bf:47:4a:ec:d4:97:59:c2:d3: 64:0d:c3:fa:02:67:5a:09:d5:f2:52:2b:ef:ee:9f:27:ca:7c: 43:37:88:c3:4b:bb:61:c6:52:d0:a8:e9:18:c3:05:dc:2e:6b: 70:69:53:25:56:bb:1b:4e:7f:4c:33:a6:7c:e1:48:71:43:2a: c8:56:24:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhoIlQfw3mCztAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk MWRiYWNmZDgtYTY1OC00ZDYzLTlmYmMtNWVlYTU2Y2ExNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgUIY0nR3dwKmzea4kr5aauX7DIHjQT/VKaf m2YI0EHMvzMdgYomQgJbgRqDoQDnCQPJvmp1ip+fLyMYTbUezEWacllqPPIOlv91 BdAfWzUWApQmEZphD5Bl219rENJIN0i5i33MUPbuaM2ydmZN5KlPF76qt1FiR/GU GY5xbvj2vai+qJ3+eW3rWqP4H8HSOEydqOXiD8xF42fDJ3CMq24/b7H8tEuIWAHq /5gUBEVoezvie7XiAGDPDxtwF570Fv/M2TGjI9IOlyFn+drSffHE+e0dCmBh7/i4 hEeLxADWrifzbPFTM95PvXXnPULqAQ0fDRY6TVbo7Wy0PrZmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDnwvNZdlbc893zqUc7w/s0DY6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWE1MDVhYjEtMDE5MC0z MDJkLTg3YWYtMjdlYmUyM2ZjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEjmhYm7lBRAaNbnSy9b1G36qLirBm66l94hvEm7o+LIHXwqkk9MOB4 gxxWRL1GY8rHUuaqIXirERiJC8HZHi/rK1roWJFzWBCX7qwpgkBi69rw879NRQ83 6VqWfIJHqGltzoOaBJi3fSHmbGmu1ZWatyL8xTdpSsYXsTriAC+FqE3iXLBGlf0C kCsAEqczzzhG0xVA28hWIqy8yv5ZSn/7JspOpJ3143ysQu65V2UOin5Z9Gf5D6Ke 8mERqL9HSuzUl1nC02QNw/oCZ1oJ1fJSK+/unyfKfEM3iMNLu2HGUtCo6RjDBdwu a3BpUyVWuxtOf0wzpnzhSHFDKshWJAo= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:11 2025 by rpki-client