$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa File: 0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa (raw, json) Hash identifier: iYIN033FoIVA4vTrj7IJ0YObbWlUZyLeqy0pU5iCsvQ= Subject key identifier: A2:00:F5:6A:59:70:4D:7B:D7:60:FF:96:E6:29:05:B3:19:00:E6:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AB4EB80A56CA30C78917C4D80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 54004 IP address blocks: 104.37.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:80:a5:6c:a3:0c:78:91:7c:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=7972d98e-cf8c-4a73-b5ed-6e10b25a374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:d0:3a:8b:35:f7:2c:7f:c9:19:18:ed:14: d0:16:1e:3e:87:0a:28:3d:98:7b:6e:b8:22:20:f5: 90:17:53:40:8c:a9:46:0e:5c:45:9e:38:ca:1b:fb: 40:48:4c:4a:e5:67:04:0a:b5:a8:4b:74:de:17:cf: b1:5c:1a:bc:58:9e:b2:d8:7a:dc:aa:a9:ef:e8:a6: 2e:97:02:c0:bf:e0:c2:76:c3:d9:77:53:de:f8:13: 6f:37:fa:e3:06:b0:0d:c5:9d:5e:25:f1:e2:4e:6f: 2b:20:dc:8f:4e:a6:4c:4f:a3:db:a3:32:16:b7:30: 4a:be:a1:41:c9:8b:df:25:a2:7a:08:7c:67:b7:dd: 82:3e:32:bd:2b:ed:b8:cf:19:76:fc:6e:e1:fe:a9: 6a:be:fe:08:b0:c5:3c:02:35:ae:dd:7e:ed:de:32: 72:90:8c:be:34:4f:3e:36:06:34:d2:4f:e0:3e:bb: 4f:9d:11:dd:2f:b2:eb:2c:1e:fd:fc:cf:43:c0:ac: 72:63:b7:bf:6d:47:e8:26:b2:4a:71:ef:84:f9:2a: be:c9:cb:3e:18:e5:86:b2:2d:d6:8a:c8:5f:e5:9c: 9e:83:ce:26:a4:13:d9:fb:89:cb:ca:11:b7:70:80: 07:bc:db:c9:fe:a2:b4:be:80:c4:b1:f8:10:ce:83: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:F5:6A:59:70:4D:7B:D7:60:FF:96:E6:29:05:B3:19:00:E6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0ddae3db-d178-37d2-bf7e-b5ce1764fe07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a3:e1:8b:93:35:17:98:de:b3:3d:21:b9:b1:18:82:1e:59: 85:a7:ad:5d:ec:79:24:99:2a:51:a2:c8:24:bc:ce:f9:21:7a: de:e0:5a:79:f0:f0:88:3f:dc:50:63:1f:a7:59:25:c3:9c:19: f8:9c:50:96:fe:18:e4:7b:1b:f0:e4:d2:33:fc:f2:13:7e:5c: aa:ce:1f:33:a0:b6:78:5d:54:c0:c0:65:e6:05:aa:3f:cc:74: 3e:73:09:10:f2:fb:48:dd:f3:58:d9:f2:0a:fa:82:9a:fa:be: fa:fe:bd:0e:2d:5c:d6:71:aa:94:21:87:61:2c:48:53:5d:be: ae:99:2a:7c:5d:9e:09:d1:df:fd:56:ca:9d:33:4c:06:c4:5e: 11:2e:6d:38:e3:ca:5a:a3:0a:9f:f1:9b:ee:e9:8e:48:d7:80: 35:d4:39:ec:42:f7:02:4f:50:bc:e0:e3:31:b9:95:15:c1:4d: c1:59:5b:56:e0:fa:aa:a5:e5:5d:b3:e9:4f:3f:12:e1:7c:8c: a9:f9:08:95:bd:ed:d4:6d:9e:a4:66:69:9a:70:5a:7b:0c:0e: d2:96:0c:bd:f3:80:b0:9a:50:7f:a9:55:d2:70:9c:ba:bd:9b: 82:19:5a:3f:5b:93:62:51:6b:b3:b3:e1:19:65:a1:76:08:36: 0d:15:bf:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064ClbKMMeJF8TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Nzk3MmQ5OGUtY2Y4Yy00YTczLWI1ZWQtNmUxMGIyNWEzNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTnQOos19yx/yRkY7RTQFh4+hwooPZh7brgi IPWQF1NAjKlGDlxFnjjKG/tASExK5WcECrWoS3TeF8+xXBq8WJ6y2Hrcqqnv6KYu lwLAv+DCdsPZd1Pe+BNvN/rjBrANxZ1eJfHiTm8rINyPTqZMT6PbozIWtzBKvqFB yYvfJaJ6CHxnt92CPjK9K+24zxl2/G7h/qlqvv4IsMU8AjWu3X7t3jJykIy+NE8+ NgY00k/gPrtPnRHdL7LrLB79/M9DwKxyY7e/bUfoJrJKce+E+Sq+ycs+GOWGsi3W ishf5Zyeg84mpBPZ+4nLyhG3cIAHvNvJ/qK0voDEsfgQzoOHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIA9WpZcE1712D/luYpBbMZAOYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGRkYWUzZGItZDE3OC0z N2QyLWJmN2UtYjVjZTE3NjRmZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaj4YuTNReY3rM9IbmxGIIeWYWnrV3seSSZKlGiyCS8zvkhet7gWnnw 8Ig/3FBjH6dZJcOcGficUJb+GOR7G/Dk0jP88hN+XKrOHzOgtnhdVMDAZeYFqj/M dD5zCRDy+0jd81jZ8gr6gpr6vvr+vQ4tXNZxqpQhh2EsSFNdvq6ZKnxdngnR3/1W yp0zTAbEXhEubTjjylqjCp/xm+7pjkjXgDXUOexC9wJPULzg4zG5lRXBTcFZW1bg +qql5V2z6U8/EuF8jKn5CJW97dRtnqRmaZpwWnsMDtKWDL3zgLCaUH+pVdJwnLq9 m4IZWj9bk2JRa7Oz4RlloXYINg0Vv2o= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:18 2025 by rpki-client