$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa File: cecb8fd1-3349-3a59-8802-c852e28ef747.roa (raw, json) Hash identifier: 6Wm0EfzRnbiVDxFin3mnyOY8/ktycGmXB2kBENtX4uM= Subject key identifier: C4:BB:62:10:D4:89:3D:94:8F:88:E5:5D:A7:9B:DB:6F:81:05:D5:EC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B76F8AC7CD133319B7D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:76:f8:ac:7c:d1:33:31:9b:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=e2d58be1-7464-43e2-83aa-4ac6881084fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:0f:36:bf:f0:bf:83:61:3b:79:8b:32:62: e0:41:b2:ad:1a:20:3c:5a:c6:7f:32:bb:b2:23:d4: 68:81:9c:fc:09:35:cd:91:c3:3b:6f:73:6e:fe:b0: 01:b7:c9:6f:d2:fc:20:46:7e:be:44:c2:0e:28:4a: 66:ba:77:26:17:5e:10:0e:38:89:dd:4c:90:20:d0: af:c8:08:58:ee:61:55:f1:c9:17:65:db:b1:38:8b: 6c:76:93:79:2b:ea:5b:d6:a8:8c:38:f3:70:c7:47: 46:5c:31:2a:44:03:8d:e4:1a:b9:8d:4c:ed:5c:c0: ed:b7:d0:33:86:7d:35:42:10:28:cc:bc:78:0f:b0: 00:ba:98:29:e1:c1:3d:38:a5:9a:68:5e:04:2e:ee: f8:30:e7:16:98:f6:cb:a0:99:df:f6:34:70:b3:4b: 11:aa:76:1c:bd:a5:ac:21:8e:3c:57:55:fe:23:89: 0a:59:54:f2:9e:e1:6f:85:36:c7:d5:d8:54:25:ee: 03:fb:cf:fa:ca:03:df:5d:b4:1c:dc:ff:2b:64:67: 6a:fe:29:5b:2a:c9:dd:b0:64:cc:7a:e8:a7:37:36: e3:86:63:be:46:c0:c5:66:6e:a5:63:c7:64:60:df: 9b:2e:ba:23:8e:d7:8e:ec:5f:c7:67:c7:4a:4f:c3: e3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BB:62:10:D4:89:3D:94:8F:88:E5:5D:A7:9B:DB:6F:81:05:D5:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:43:45:6e:40:d1:7f:a7:fe:b7:52:01:5f:f1:59:92:0b:09: 62:02:7b:72:35:b1:a8:b6:7b:41:ee:82:e8:2c:81:94:18:7d: 2c:37:d0:8b:f5:50:03:ba:87:76:09:30:32:5b:87:6e:3d:33: 2b:12:26:fe:11:6a:90:53:8f:cd:88:54:a8:7d:85:80:2d:ca: 6d:31:87:e8:58:28:ff:59:1c:80:e4:ed:42:9b:34:93:a4:0e: ae:3f:0a:18:cb:bb:3a:4c:ec:49:f6:56:77:6b:dd:7f:3f:1e: 30:28:9c:71:fb:f8:c8:64:f1:3d:32:ed:34:0c:8a:17:ef:61: ca:3a:c8:49:e6:15:36:a1:c1:3f:fd:d6:b7:3b:07:48:17:79: 16:10:b7:28:31:31:e4:5c:0c:54:36:f3:ac:06:36:7e:02:0b: 9b:fa:30:cf:a8:69:f1:27:4b:66:66:e5:27:2b:d8:47:ea:3b: 56:c4:a7:42:a1:22:0d:b3:d9:de:e5:6a:63:7b:66:7a:bc:cd: 2b:7d:da:a7:a1:82:d9:0c:01:7b:01:84:58:5f:84:2f:e8:5f: e9:a2:d4:6a:d8:ab:31:ed:36:4f:50:a2:8e:24:ee:cd:41:6a: 5e:1b:44:ed:18:ca:1d:3e:a7:fa:5a:42:8f:40:1a:bb:72:10: f2:e2:4f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3b4rHzRMzGbfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTJkNThiZTEtNzQ2NC00M2UyLTgzYWEtNGFjNjg4MTA4NGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxQPNr/wv4NhO3mLMmLgQbKtGiA8WsZ/Mruy I9RogZz8CTXNkcM7b3Nu/rABt8lv0vwgRn6+RMIOKEpmuncmF14QDjiJ3UyQINCv yAhY7mFV8ckXZduxOItsdpN5K+pb1qiMOPNwx0dGXDEqRAON5Bq5jUztXMDtt9Az hn01QhAozLx4D7AAupgp4cE9OKWaaF4ELu74MOcWmPbLoJnf9jRws0sRqnYcvaWs IY48V1X+I4kKWVTynuFvhTbH1dhUJe4D+8/6ygPfXbQc3P8rZGdq/ilbKsndsGTM euinNzbjhmO+RsDFZm6lY8dkYN+bLrojjteO7F/HZ8dKT8Pj3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS7YhDUiT2Uj4jlXaeb22+BBdXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2VjYjhmZDEtMzM0OS0z YTU5LTg4MDItYzg1MmUyOGVmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANDRW5A0X+n/rdSAV/xWZILCWICe3I1sai2e0HugugsgZQYfSw30Iv1 UAO6h3YJMDJbh249MysSJv4RapBTj82IVKh9hYAtym0xh+hYKP9ZHIDk7UKbNJOk Dq4/ChjLuzpM7En2Vndr3X8/HjAonHH7+Mhk8T0y7TQMihfvYco6yEnmFTahwT/9 1rc7B0gXeRYQtygxMeRcDFQ286wGNn4CC5v6MM+oafEnS2Zm5Scr2EfqO1bEp0Kh Ig2z2d7lamN7Znq8zSt92qehgtkMAXsBhFhfhC/oX+mi1GrYqzHtNk9Qoo4k7s1B al4bRO0Yyh0+p/paQo9AGrtyEPLiTwg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:37 2025 by rpki-client