$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa File: d6d3afbf-f6e2-312e-b299-feebdb230800.roa (raw, json) Hash identifier: sWcc70FyhmmU1SqNx9xIOnN7BtpzfxYOICxy9b20omQ= Subject key identifier: 63:44:58:68:75:3E:D1:CA:79:25:E6:66:F6:CA:E8:2D:1D:D2:38:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A7350AAFFFDAF55F32DC11E40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa Signing time: Tue 08 Jul 2025 13:01:04 +0000 ROA not before: Tue 08 Jul 2025 13:01:04 +0000 ROA not after: Mon 06 Oct 2025 13:01:04 +0000 asID: 41264 IP address blocks: 104.133.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:aa:ff:fd:af:55:f3:2d:c1:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 8 13:01:04 2025 GMT Not After : Oct 6 13:01:04 2025 GMT Subject: CN=f717d79e-46fe-47c4-a94d-cd8d6cb09aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:36:8d:e7:c6:87:47:c5:0a:87:c2:0e:30: 60:3b:97:15:14:37:17:4b:54:1a:5e:87:af:b8:0a: e5:51:db:8c:5d:5c:42:8f:cf:e8:5c:7a:cb:03:88: 73:97:7b:2b:66:fe:6f:cd:a7:2c:60:4b:af:9e:d4: cc:15:4b:b3:f4:9a:f4:ce:0b:5b:2d:f5:66:27:45: 3c:2a:67:fb:00:a7:96:f4:24:72:e8:a4:91:e7:0f: 49:eb:92:cc:e1:3d:23:f5:0a:9f:0d:94:8c:49:d0: 82:aa:bb:a3:8a:98:a6:cd:c5:29:87:d1:2d:2d:d4: b5:0d:76:c7:d0:83:cc:6c:1f:4b:dd:6a:b4:03:08: a5:79:39:86:a2:c2:0a:f2:fc:20:3e:97:d6:29:1c: 7e:29:36:ff:7d:a2:35:e5:74:54:7a:d2:e8:f7:0c: f4:8e:41:e7:b0:b4:f3:1d:d9:6c:65:d9:8e:4d:50: ca:c5:e8:58:19:04:d1:b1:60:21:99:c7:40:5b:4a: cf:17:72:ff:9c:26:27:e2:ab:6b:ac:f7:81:cf:57: 05:7d:17:5c:33:22:b7:43:51:51:cb:e6:a1:78:1d: e2:89:13:e3:06:63:4c:1d:3f:42:08:2f:cb:d6:0c: e5:a8:5d:f1:10:29:75:47:8a:50:c0:1b:0c:64:82: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:44:58:68:75:3E:D1:CA:79:25:E6:66:F6:CA:E8:2D:1D:D2:38:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d7:2f:00:a7:c6:ce:f0:e0:34:4a:07:41:a3:cb:8a:bc:9d: 10:27:98:81:bd:1b:c0:e4:b8:d7:d6:6a:2b:93:ec:f9:ea:34: 7a:05:e2:9d:c4:e5:7f:a3:1a:ed:d2:87:03:9f:16:56:c2:54: b5:8c:9e:64:fa:1f:08:37:dd:92:01:78:1e:f7:f9:73:69:4d: 0c:ba:e2:02:0a:16:73:23:83:52:3d:bd:5e:7a:35:45:4f:3f: cc:26:1c:a4:dd:ee:c0:4c:21:bc:0a:8f:c5:35:ef:7d:ed:3a: e4:35:24:3f:3a:45:e8:32:a0:cc:7d:e1:0b:ad:0c:52:8d:9e: 82:08:3f:28:30:3b:b3:48:9d:ed:b5:dd:07:1b:f0:91:fe:28: a4:63:1c:f4:f6:7e:14:9a:d7:49:89:1d:7d:52:75:43:41:40: 88:32:94:74:b8:0c:f5:d7:20:69:ef:ab:77:2d:d5:6f:a2:18: 50:dd:67:a3:7f:dc:a8:f7:85:5a:d8:9f:b6:7d:fa:91:00:c7: 80:22:4b:c8:a2:c4:34:82:0a:12:2b:ea:0d:86:f3:b7:dc:2b: e5:09:62:f3:78:cf:6b:6a:cd:31:ce:68:47:a1:3a:1a:45:c9: 89:ca:44:b9:55:84:a7:61:de:68:1a:1a:58:f6:13:a9:55:24: 00:9b:24:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKr//a9V8y3BHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk ZjcxN2Q3OWUtNDZmZS00N2M0LWE5NGQtY2Q4ZDZjYjA5YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtU2jefGh0fFCofCDjBgO5cVFDcXS1QaXoev uArlUduMXVxCj8/oXHrLA4hzl3srZv5vzacsYEuvntTMFUuz9Jr0zgtbLfVmJ0U8 Kmf7AKeW9CRy6KSR5w9J65LM4T0j9QqfDZSMSdCCqrujipimzcUph9EtLdS1DXbH 0IPMbB9L3Wq0AwileTmGosIK8vwgPpfWKRx+KTb/faI15XRUetLo9wz0jkHnsLTz HdlsZdmOTVDKxehYGQTRsWAhmcdAW0rPF3L/nCYn4qtrrPeBz1cFfRdcMyK3Q1FR y+aheB3iiRPjBmNMHT9CCC/L1gzlqF3xECl1R4pQwBsMZIIlewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNEWGh1PtHKeSXmZvbK6C0d0jh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDZkM2FmYmYtZjZlMi0z MTJlLWIyOTktZmVlYmRiMjMwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTXLwCnxs7w4DRKB0Gjy4q8nRAnmIG9G8DkuNfWaiuT7PnqNHoF4p3E 5X+jGu3ShwOfFlbCVLWMnmT6Hwg33ZIBeB73+XNpTQy64gIKFnMjg1I9vV56NUVP P8wmHKTd7sBMIbwKj8U1733tOuQ1JD86RegyoMx94QutDFKNnoIIPygwO7NIne21 3Qcb8JH+KKRjHPT2fhSa10mJHX1SdUNBQIgylHS4DPXXIGnvq3ct1W+iGFDdZ6N/ 3Kj3hVrYn7Z9+pEAx4AiS8iixDSCChIr6g2G87fcK+UJYvN4z2tqzTHOaEehOhpF yYnKRLlVhKdh3mgaGlj2E6lVJACbJHM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:18:23 2025 by rpki-client