$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/67c5c1c3-1377-3f67-864e-2f761ef3ddae.roa File: 67c5c1c3-1377-3f67-864e-2f761ef3ddae.roa (raw, json) Hash identifier: GSPfGESsXFhWCknwiQEdDE47rtTA7vYpVeNoZ1k5Fwo= Subject key identifier: 13:EF:44:EC:DC:3E:98:0F:25:6B:7E:49:08:18:36:53:13:D2:91:0E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584AD0D6561A6C4AA320F5A23E50 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/67c5c1c3-1377-3f67-864e-2f761ef3ddae.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 29091 IP address blocks: 104.133.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:56:1a:6c:4a:a3:20:f5:a2:3e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=d1a7b79c-ef6e-4b26-91c2-ccb8eb6457c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:5b:bd:e1:2f:4d:09:8f:b6:21:1a:dc:0b: a4:b6:eb:eb:44:a9:1a:17:8f:da:96:dc:5c:db:2d: 2c:c1:69:92:89:94:25:33:f4:d1:bf:23:7e:44:19: 1c:e9:a4:c9:a3:2c:ff:d6:f3:97:ca:99:40:1f:20: 3d:5a:2d:7f:14:6d:13:d9:63:1c:43:69:49:dc:9e: f2:13:d4:b4:c5:f0:55:e0:d9:7e:34:b0:b8:e4:e7: d3:1a:3c:fa:14:a0:d4:93:bc:81:a3:f1:54:c5:26: 97:fc:3e:72:fb:e1:c7:da:81:f6:1f:47:28:cd:cb: e8:f9:4c:af:1d:5f:60:7a:ef:e3:4d:13:ed:ac:c1: 7b:60:e4:2a:48:73:8f:c1:e7:ab:7e:1d:5b:ec:8d: f0:4e:dd:75:6f:5b:50:27:ea:22:74:17:9a:e5:09: 20:a4:40:23:ef:c0:f9:97:5a:7d:a5:63:0d:90:56: 76:19:8d:dc:bd:77:2e:53:19:cd:35:14:10:9f:57: 37:af:f7:b9:2d:06:d8:9b:81:3c:80:2c:29:e8:d2: 7c:20:85:23:b6:d9:83:57:e4:e8:1b:1e:3e:ba:cf: 81:7b:0e:31:ca:93:e3:ec:ad:51:64:a5:84:e3:14: f6:e3:7b:ff:d4:9a:56:89:84:16:37:d9:a7:02:0e: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:44:EC:DC:3E:98:0F:25:6B:7E:49:08:18:36:53:13:D2:91:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/67c5c1c3-1377-3f67-864e-2f761ef3ddae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e1:14:6d:87:47:f9:b6:98:b2:b1:be:13:34:1d:53:ee:6c: 80:86:f4:60:ec:b1:ec:26:83:da:f0:e8:b3:3f:60:80:36:fe: 92:e6:ea:1b:99:29:85:34:e2:eb:5e:98:1e:4c:07:d6:4d:39: 89:46:cf:33:78:92:6f:46:f5:72:3e:b5:f1:33:a8:50:21:32: 65:d2:d9:34:10:ab:c7:18:e4:ad:18:5e:db:57:c0:90:4e:9c: e2:3d:0a:bc:a9:5f:d3:f8:9e:66:ce:f7:3a:f6:7c:64:5b:44: 06:35:f9:08:e8:70:4d:3d:84:c7:89:b9:3e:13:23:d6:9f:53: 93:11:6d:8b:49:96:ad:75:7c:0e:42:f3:c5:b0:6e:f7:8c:31: e4:3b:3b:08:5e:49:2d:f6:0c:3c:a7:af:59:80:e0:58:f4:75: 89:b5:18:12:dc:bd:f2:3a:25:cf:69:b4:69:36:22:f1:ce:47: 7c:3e:1b:02:51:f3:10:a9:d3:f5:52:5e:c3:13:06:0f:ec:33: 0e:e5:c0:57:28:0c:43:5a:e6:30:4d:0b:e0:53:81:a3:81:c0: bc:84:d1:e6:ec:01:9d:7e:27:17:3c:63:73:71:2f:48:2e:d9: ec:cd:e2:57:9a:ab:f2:37:64:79:be:40:96:b1:2a:b2:ab:b5: fa:19:3c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1lYabEqjIPWiPlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZDFhN2I3OWMtZWY2ZS00YjI2LTkxYzItY2NiOGViNjQ1N2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgVbveEvTQmPtiEa3AuktuvrRKkaF4/altxc 2y0swWmSiZQlM/TRvyN+RBkc6aTJoyz/1vOXyplAHyA9Wi1/FG0T2WMcQ2lJ3J7y E9S0xfBV4Nl+NLC45OfTGjz6FKDUk7yBo/FUxSaX/D5y++HH2oH2H0cozcvo+Uyv HV9geu/jTRPtrMF7YOQqSHOPweerfh1b7I3wTt11b1tQJ+oidBea5QkgpEAj78D5 l1p9pWMNkFZ2GY3cvXcuUxnNNRQQn1c3r/e5LQbYm4E8gCwp6NJ8IIUjttmDV+To Gx4+us+Bew4xypPj7K1RZKWE4xT243v/1JpWiYQWN9mnAg4W2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPvROzcPpgPJWt+SQgYNlMT0pEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjdjNWMxYzMtMTM3Ny0z ZjY3LTg2NGUtMmY3NjFlZjNkZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3hFG2HR/m2mLKxvhM0HVPubICG9GDssewmg9rw6LM/YIA2/pLm6huZ KYU04utemB5MB9ZNOYlGzzN4km9G9XI+tfEzqFAhMmXS2TQQq8cY5K0YXttXwJBO nOI9CrypX9P4nmbO9zr2fGRbRAY1+QjocE09hMeJuT4TI9afU5MRbYtJlq11fA5C 88WwbveMMeQ7OwheSS32DDynr1mA4Fj0dYm1GBLcvfI6Jc9ptGk2IvHOR3w+GwJR 8xCp0/VSXsMTBg/sMw7lwFcoDENa5jBNC+BTgaOBwLyE0ebsAZ1+Jxc8Y3NxL0gu 2ezN4leaq/I3ZHm+QJaxKrKrtfoZPPE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:59:21 2025 by rpki-client