$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa File: bcd23307-1769-3883-b749-7320ac4ef80d.roa (raw, json) Hash identifier: vL4e2kUBFRXyl7//cyOpcWqZsG6Z25LtJBeHqtHJaTY= Subject key identifier: B2:08:75:1F:48:E9:24:6C:87:92:37:BD:FF:3D:3E:A9:E6:AC:FC:F1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350A930781832E882F6BDC8 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:a9:30:78:18:32:e8:82:f6:bd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=c8cb0e7c-b435-4385-a94d-4942af254d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:8b:98:d2:2a:2e:52:f1:f9:7d:bd:be:65: ef:a9:bf:d2:83:0b:a2:96:b6:b6:89:07:b0:2c:cd: d6:38:a8:01:0f:a4:45:7a:13:41:a8:0e:57:07:73: b6:eb:33:31:f7:c9:52:7c:fc:1d:c6:db:6a:78:79: 46:2c:cb:db:1b:96:04:19:9e:73:bc:23:4b:fa:5b: f1:9b:3c:a9:ea:65:55:28:5c:71:e2:80:51:6b:57: 78:18:1f:3a:10:6a:b4:5f:b6:d3:fa:e5:07:b0:28: 9f:aa:a4:4e:de:67:f0:fa:73:90:53:c7:30:e8:e2: 2a:55:66:50:e6:29:4c:be:e0:67:b7:cc:b4:47:fc: c2:25:10:69:b3:87:7c:13:08:69:57:c8:62:8f:c4: b8:9f:39:ef:ff:34:ae:00:86:5d:55:28:52:42:a5: 96:ed:aa:50:08:af:70:27:ac:24:b3:d1:e0:20:94: 43:91:16:8c:b8:57:41:ec:a5:27:a7:27:c0:76:9c: a7:f7:9e:93:b3:60:98:42:23:2b:eb:e8:0e:ba:ba: 7c:dc:a4:7f:d9:7d:d8:50:cb:e5:1f:73:f8:14:a5: 38:97:f2:3c:6c:b7:31:8f:49:72:81:42:74:1a:85: 33:45:b7:0e:3d:1b:7b:b3:d6:3a:be:7a:29:fb:e7: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:08:75:1F:48:E9:24:6C:87:92:37:BD:FF:3D:3E:A9:E6:AC:FC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:86:d2:3c:57:1b:85:4f:4b:11:55:8f:9f:09:84:d4:e7:be: f5:e1:28:71:1b:97:34:a3:1e:18:a8:51:3f:2c:53:08:31:f1: a4:f0:fd:ec:be:4e:54:d3:fe:66:85:78:e2:dd:7c:2b:59:3d: 29:3b:3c:41:8a:86:2f:d2:b5:e4:5c:5d:9b:de:d3:39:20:58: 1b:e7:3d:14:87:c4:77:81:67:1d:5d:48:32:c2:08:5d:88:56: 2b:bb:b6:66:7a:e9:d0:5d:46:86:f9:f7:79:01:76:b4:a8:89: ec:45:15:d1:ca:26:ff:9a:ea:66:67:f2:2b:40:c5:93:52:23: 0d:0d:17:eb:d6:84:fd:76:40:14:38:1d:0a:77:5c:c9:5a:39: 9e:c1:24:ed:08:9f:7f:2b:ad:bf:16:ac:1e:02:fa:e0:7a:74: 4f:70:5d:da:32:5c:ab:7f:21:02:94:36:6f:65:d7:43:c9:c0: 74:f0:72:60:77:6d:0d:c8:e5:ce:99:14:73:63:7c:a6:a6:5e: 2c:e6:e3:63:a3:a4:9d:9c:f5:86:89:4a:7b:b8:8c:2e:ef:29: ec:1e:8b:80:57:a2:b8:05:34:f8:57:65:9d:81:6b:a9:e1:c0: a8:a2:de:ac:63:50:fa:81:69:74:41:a8:88:73:1a:f0:84:91: 4f:09:b8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKkweBgy6IL2vcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk YzhjYjBlN2MtYjQzNS00Mzg1LWE5NGQtNDk0MmFmMjU0ZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgeLmNIqLlLx+X29vmXvqb/Sgwuilra2iQew LM3WOKgBD6RFehNBqA5XB3O26zMx98lSfPwdxttqeHlGLMvbG5YEGZ5zvCNL+lvx mzyp6mVVKFxx4oBRa1d4GB86EGq0X7bT+uUHsCifqqRO3mfw+nOQU8cw6OIqVWZQ 5ilMvuBnt8y0R/zCJRBps4d8EwhpV8hij8S4nznv/zSuAIZdVShSQqWW7apQCK9w J6wks9HgIJRDkRaMuFdB7KUnpyfAdpyn956Ts2CYQiMr6+gOurp83KR/2X3YUMvl H3P4FKU4l/I8bLcxj0lygUJ0GoUzRbcOPRt7s9Y6vnop++eRCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIIdR9I6SRsh5I3vf89PqnmrPzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmNkMjMzMDctMTc2OS0z ODgzLWI3NDktNzMyMGFjNGVmODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+G0jxXG4VPSxFVj58JhNTnvvXhKHEblzSjHhioUT8sUwgx8aTw/ey+ TlTT/maFeOLdfCtZPSk7PEGKhi/SteRcXZve0zkgWBvnPRSHxHeBZx1dSDLCCF2I Viu7tmZ66dBdRob593kBdrSoiexFFdHKJv+a6mZn8itAxZNSIw0NF+vWhP12QBQ4 HQp3XMlaOZ7BJO0In38rrb8WrB4C+uB6dE9wXdoyXKt/IQKUNm9l10PJwHTwcmB3 bQ3I5c6ZFHNjfKamXizm42OjpJ2c9YaJSnu4jC7vKewei4BXorgFNPhXZZ2Ba6nh wKii3qxjUPqBaXRBqIhzGvCEkU8JuEY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:39 2025 by rpki-client