$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/be68d10a-b5fc-3686-973e-5f76003f3cff.roa File: be68d10a-b5fc-3686-973e-5f76003f3cff.roa (raw, json) Hash identifier: 4WXW1hV/yZlxSICTieJWlH52Uv0oRaZgEGFZYqOL9Ag= Subject key identifier: A5:C8:E7:96:AD:73:F6:50:B0:79:93:B5:4E:B6:31:09:93:7F:93:DC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B74C45869C3AFBA7DDC00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/be68d10a-b5fc-3686-973e-5f76003f3cff.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:74:c4:58:69:c3:af:ba:7d:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=5a8fa8aa-2901-490b-b976-f5258dda804d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:d1:fa:a5:48:71:30:c5:2d:c7:51:5b:78: c3:1e:96:3f:00:f7:5b:20:00:d0:cc:8a:cc:7d:3b: 00:eb:68:06:a4:da:d0:f6:10:45:b7:2d:73:c8:e7: a1:3b:ca:ae:b9:51:71:43:7b:da:b4:df:ea:8c:a1: bd:17:5b:76:a4:3c:53:60:31:1f:f3:e4:cc:04:d4: 3a:d2:b8:7b:6c:4b:da:e4:7a:f0:4d:ed:a6:81:e5: 98:1a:94:b9:5a:d1:0f:3c:57:f8:20:6e:7c:21:9d: ff:70:d1:08:77:9b:53:f3:b2:35:e1:a4:b9:a6:7e: d5:e4:eb:d6:29:ce:10:ba:7e:48:e5:27:b7:37:46: 0b:c3:bc:da:df:e0:29:9b:da:57:e9:c3:90:d2:e3: 17:e0:a3:5a:84:93:33:5d:10:fb:86:d8:7a:02:a1: 77:84:b2:2c:1b:48:e0:8a:89:75:89:8f:b8:07:a6: f5:58:a5:3c:aa:3d:e5:fd:3a:1d:5f:fa:52:8f:72: 86:b9:62:3a:61:ed:07:b2:cb:ff:3a:b6:5f:20:e7: a5:e5:6e:92:a5:80:38:e6:f1:16:3f:55:e8:01:b2: c5:ac:1a:dc:12:35:37:f6:28:53:02:93:97:79:52: 2a:8c:ef:ec:d5:64:b2:e5:19:77:ef:55:c6:5d:66: 83:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:E7:96:AD:73:F6:50:B0:79:93:B5:4E:B6:31:09:93:7F:93:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/be68d10a-b5fc-3686-973e-5f76003f3cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:50:b1:40:77:9c:14:f1:cc:51:57:ba:d2:3b:17:71:a2:b5: 0d:5d:8a:a3:be:2c:2a:01:23:2a:79:d9:13:76:df:ed:53:cb: c4:e7:c3:03:4a:5a:6f:b0:02:fd:02:28:1f:07:a8:bb:1f:d5: 0d:4e:c5:d4:d9:f5:a2:17:59:36:84:f7:11:3a:21:a7:67:b6: 4b:db:60:31:52:75:70:bf:6e:cb:bb:d0:5b:af:98:b2:21:88: 3d:22:c6:0a:14:85:ab:e9:09:6b:97:7c:49:b1:cc:c6:20:4a: 0e:63:54:39:a6:c7:86:f1:2e:60:2f:a1:de:84:76:2e:b7:07: f3:be:b4:65:ea:83:f3:c8:99:14:bc:bd:a5:86:df:65:56:f5: 32:ce:c4:e1:d0:52:dd:de:6d:d3:42:2f:a9:20:66:57:60:08: fd:be:2c:2f:ab:cd:65:e3:27:40:41:69:80:a4:b3:45:fe:ce: d1:c9:da:54:20:c4:3a:da:a0:f7:99:f5:20:c1:ea:c1:3f:1c: 05:17:ab:00:5b:8b:53:c2:cb:12:d9:43:7d:a5:12:f9:11:73: 84:24:15:1d:70:9c:20:f9:e3:d6:90:94:0b:2d:58:d8:fc:35: 0b:ee:81:21:b2:d0:3f:62:04:c0:9d:62:c2:df:b2:44:55:a5: 16:72:dc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3TEWGnDr7p93AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NWE4ZmE4YWEtMjkwMS00OTBiLWI5NzYtZjUyNThkZGE4MDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM7R+qVIcTDFLcdRW3jDHpY/APdbIADQzIrM fTsA62gGpNrQ9hBFty1zyOehO8quuVFxQ3vatN/qjKG9F1t2pDxTYDEf8+TMBNQ6 0rh7bEva5HrwTe2mgeWYGpS5WtEPPFf4IG58IZ3/cNEId5tT87I14aS5pn7V5OvW Kc4Qun5I5Se3N0YLw7za3+Apm9pX6cOQ0uMX4KNahJMzXRD7hth6AqF3hLIsG0jg iol1iY+4B6b1WKU8qj3l/TodX/pSj3KGuWI6Ye0Hssv/OrZfIOel5W6SpYA45vEW P1XoAbLFrBrcEjU39ihTApOXeVIqjO/s1WSy5Rl371XGXWaDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXI55atc/ZQsHmTtU62MQmTf5PcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmU2OGQxMGEtYjVmYy0z Njg2LTk3M2UtNWY3NjAwM2YzY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFQsUB3nBTxzFFXutI7F3GitQ1diqO+LCoBIyp52RN23+1Ty8TnwwNK Wm+wAv0CKB8HqLsf1Q1OxdTZ9aIXWTaE9xE6IadntkvbYDFSdXC/bsu70FuvmLIh iD0ixgoUhavpCWuXfEmxzMYgSg5jVDmmx4bxLmAvod6Edi63B/O+tGXqg/PImRS8 vaWG32VW9TLOxOHQUt3ebdNCL6kgZldgCP2+LC+rzWXjJ0BBaYCks0X+ztHJ2lQg xDraoPeZ9SDB6sE/HAUXqwBbi1PCyxLZQ32lEvkRc4QkFR1wnCD549aQlAstWNj8 NQvugSGy0D9iBMCdYsLfskRVpRZy3LY= -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:08 2025 by rpki-client