$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa File: d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa (raw, json) Hash identifier: 4NsEixLOI+wYJR/0sd+ExvcOCXlWsUB4lEH12HDtViY= Subject key identifier: 56:45:CF:7D:FD:4C:41:C9:DE:03:45:DF:E6:79:68:80:71:2F:36:39 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7E7B90FBD428203D9CBD0C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 104.134.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:90:fb:d4:28:20:3d:9c:bd:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=bd7a1a2e-dfd7-4c9b-8706-6f78652718c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:63:02:60:45:19:d5:56:c6:6e:5d:40:51: 07:74:f8:67:1f:02:cd:57:76:c2:6d:05:aa:c3:61: 80:d4:9c:e3:63:6f:66:e6:37:51:47:32:a3:a1:d4: e4:89:fe:78:f6:61:c6:c1:f6:7b:47:ac:6d:d0:43: b8:0d:5f:37:c0:73:10:64:61:bb:57:16:c4:28:e1: 23:48:c1:ad:4f:66:e9:a9:27:08:62:7c:1d:78:fd: b2:3b:10:01:7b:66:4f:b0:2a:d9:66:6d:c7:b2:7a: ec:64:9c:3e:61:50:cd:8b:63:3e:37:ca:95:96:68: 19:03:d3:44:7a:16:ac:d9:c0:45:19:4f:9b:2d:03: a5:88:f6:ff:04:fb:c4:2e:d6:f3:d7:29:0e:ed:c9: d4:90:8f:29:10:7f:61:a9:15:4e:0b:3f:c4:27:ca: 54:30:d2:77:f0:74:df:cb:14:1a:64:5b:86:0c:94: cd:1c:f8:2f:12:9b:33:47:80:56:77:71:e5:80:45: 68:fc:26:01:ae:fc:d1:23:1d:b1:cc:0e:99:e1:90: 0b:99:b5:6e:96:0d:e8:cd:01:38:c3:0d:03:b3:aa: ed:28:9b:7d:9e:9c:fe:a8:6f:74:72:85:35:8f:6d: 93:e5:c4:99:f3:49:49:66:6d:11:79:a7:c1:86:b6: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:CF:7D:FD:4C:41:C9:DE:03:45:DF:E6:79:68:80:71:2F:36:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d3cb217b-99cb-34b9-922f-2e6396b68dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fc:83:85:96:a4:4d:49:35:3a:8f:6a:76:2b:8d:57:84:21: 83:da:61:60:a5:5d:36:13:c8:07:86:91:06:07:55:32:49:7c: 98:52:15:64:48:32:06:8b:12:d2:3b:be:24:71:a4:cb:67:ea: 41:1b:9c:3d:e5:f5:33:9a:9d:f2:6a:94:2a:0d:da:fd:14:16: 9d:b0:66:d9:15:f8:bc:b4:e2:ab:93:35:73:c8:66:e4:ce:cb: 72:da:68:18:0e:17:08:5f:c6:4b:7c:da:06:d9:19:f9:6f:e6: b3:14:2c:88:7e:db:c9:b4:9a:7d:6a:d5:22:75:2c:16:5e:27: 33:11:df:26:0a:d4:91:99:bf:d1:e5:6f:9f:7f:82:73:39:f3: 0f:0b:f9:b2:c8:19:fb:21:f3:01:03:28:7e:d7:44:72:11:1b: 60:f4:c7:46:29:45:9c:67:c6:9e:af:76:fd:36:c4:60:29:f4: 0f:b7:94:9a:b9:c4:68:ec:48:1d:ab:1c:4a:49:69:ae:13:38: ed:88:47:74:ac:f5:3a:6f:76:83:ac:a4:3d:62:f5:b2:37:3e: ca:36:75:0d:39:75:18:77:de:75:5c:0a:48:1d:7d:29:5d:1a: d7:9e:1f:1c:06:6b:b7:2c:1d:5a:84:97:e4:37:24:68:76:f6: 7e:60:d7:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5D71CggPZy9DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmQ3YTFhMmUtZGZkNy00YzliLTg3MDYtNmY3ODY1MjcxOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEBjAmBFGdVWxm5dQFEHdPhnHwLNV3bCbQWq w2GA1JzjY29m5jdRRzKjodTkif549mHGwfZ7R6xt0EO4DV83wHMQZGG7VxbEKOEj SMGtT2bpqScIYnwdeP2yOxABe2ZPsCrZZm3HsnrsZJw+YVDNi2M+N8qVlmgZA9NE ehas2cBFGU+bLQOliPb/BPvELtbz1ykO7cnUkI8pEH9hqRVOCz/EJ8pUMNJ38HTf yxQaZFuGDJTNHPgvEpszR4BWd3HlgEVo/CYBrvzRIx2xzA6Z4ZALmbVulg3ozQE4 ww0Ds6rtKJt9npz+qG90coU1j22T5cSZ80lJZm0ReafBhrYsAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZFz339TEHJ3gNF3+Z5aIBxLzY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDNjYjIxN2ItOTljYi0z NGI5LTkyMmYtMmU2Mzk2YjY4ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT8g4WWpE1JNTqPanYrjVeEIYPaYWClXTYTyAeGkQYHVTJJfJhSFWRI MgaLEtI7viRxpMtn6kEbnD3l9TOanfJqlCoN2v0UFp2wZtkV+Ly04quTNXPIZuTO y3LaaBgOFwhfxkt82gbZGflv5rMULIh+28m0mn1q1SJ1LBZeJzMR3yYK1JGZv9Hl b59/gnM58w8L+bLIGfsh8wEDKH7XRHIRG2D0x0YpRZxnxp6vdv02xGAp9A+3lJq5 xGjsSB2rHEpJaa4TOO2IR3Ss9TpvdoOspD1i9bI3Pso2dQ05dRh33nVcCkgdfSld GteeHxwGa7csHVqEl+Q3JGh29n5g11Y= -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:38 2025 by rpki-client