$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/68ee8242-5fef-34f3-8460-1594b24c4864.roa File: 68ee8242-5fef-34f3-8460-1594b24c4864.roa (raw, json) Hash identifier: aDgdicd5dklkOEZGhSECURrzQ5kbW5uui2GvT+Wt1Rk= Subject key identifier: FB:34:57:71:68:3C:74:66:A1:7A:D7:A4:D6:09:E1:53:DD:0C:B3:E1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584A6DBB53991FDE2036E16AF800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/68ee8242-5fef-34f3-8460-1594b24c4864.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 41264 IP address blocks: 104.132.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:53:99:1f:de:20:36:e1:6a:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=5e604059-9f27-4c08-8645-b3bbd6507714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:25:ad:99:4b:a8:cc:0c:91:8d:1a:bf:33:e2: 55:d3:7a:71:eb:63:ec:c7:f8:32:51:0d:69:cd:6b: 43:9d:75:6e:83:38:3e:cb:98:7f:f6:72:46:9c:0b: 5b:e7:ed:fc:ea:dd:77:2a:67:de:6b:7e:56:51:7f: 04:14:92:43:8f:29:22:a3:3b:51:1e:12:5f:f9:9d: f2:29:11:5b:aa:c7:0f:ac:be:4a:b9:a3:ef:85:ac: 64:75:2d:c2:6f:d6:fa:f8:73:26:dc:cd:e6:af:f9: a8:92:85:9a:90:dd:8b:a4:e9:d6:ec:63:b7:73:43: 34:21:c1:03:44:c0:9b:89:1b:af:5f:fa:67:8f:cc: a7:67:45:14:54:05:ab:dc:c6:27:28:6f:05:78:7d: 39:8b:21:4c:ec:63:63:9e:82:f8:39:43:a3:e1:2c: 3b:54:3e:47:9c:b6:95:47:a5:57:49:66:6f:43:86: 5f:c7:e2:b8:73:a4:96:66:8a:01:1c:c9:99:70:a3: ef:93:16:7b:98:ef:f9:39:88:b7:be:6c:a1:49:d4: 60:fb:b5:05:d1:24:27:c4:94:8c:45:d4:5f:12:86: f7:9e:86:29:da:5c:39:5a:5f:30:35:6b:45:3f:d9: e1:3d:4a:f4:c1:df:bc:7c:d2:42:eb:0c:f4:b3:05: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:34:57:71:68:3C:74:66:A1:7A:D7:A4:D6:09:E1:53:DD:0C:B3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/68ee8242-5fef-34f3-8460-1594b24c4864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:40:8c:27:d5:dd:90:b6:85:a4:4d:41:47:c9:bf:e2:59:f1: bc:20:ab:e1:26:dd:45:cf:79:85:b8:33:58:e5:51:89:7a:31: 2f:97:ba:8f:9b:ca:f2:ca:69:9d:51:8b:52:35:e8:de:eb:a5: 4e:f9:46:50:e8:b7:f5:11:2d:e5:fe:53:92:0c:52:56:0d:b2: 7b:9f:29:36:95:78:b3:a9:30:a8:dd:82:8d:1e:cc:be:4c:bd: 77:58:53:85:a3:95:ef:1d:19:ce:4f:1a:db:80:e7:fa:b1:70: 9c:9c:41:3f:cc:bb:bd:d8:e2:43:30:d2:f0:d1:f3:da:58:05: 75:d9:a5:e9:cc:e2:60:60:ba:5c:56:8c:9e:2d:73:df:ed:57: a5:6f:c6:c4:9b:56:1d:22:63:5f:10:41:87:12:0f:bc:c0:a8: 1e:85:53:21:17:a3:52:56:26:f4:97:0d:9b:a7:04:76:c6:58: 38:3b:9a:11:3e:1a:55:8f:8d:45:3c:8d:3f:2c:b9:98:a4:5f: e6:25:c1:86:24:2b:5d:59:b2:44:5f:33:08:49:ff:db:00:09: 8e:ab:d9:5d:80:86:49:33:29:94:8f:0f:89:8e:7c:73:70:00: d5:b4:07:26:6e:99:c9:23:e6:7b:ca:a8:f7:67:72:72:96:d9: 82:88:29:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1OZH94gNuFq+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NWU2MDQwNTktOWYyNy00YzA4LTg2NDUtYjNiYmQ2NTA3NzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiWtmUuozAyRjRq/M+JV03px62Psx/gyUQ1p zWtDnXVugzg+y5h/9nJGnAtb5+386t13Kmfea35WUX8EFJJDjykioztRHhJf+Z3y KRFbqscPrL5KuaPvhaxkdS3Cb9b6+HMm3M3mr/mokoWakN2LpOnW7GO3c0M0IcED RMCbiRuvX/pnj8ynZ0UUVAWr3MYnKG8FeH05iyFM7GNjnoL4OUOj4Sw7VD5HnLaV R6VXSWZvQ4Zfx+K4c6SWZooBHMmZcKPvkxZ7mO/5OYi3vmyhSdRg+7UF0SQnxJSM RdRfEob3noYp2lw5Wl8wNWtFP9nhPUr0wd+8fNJC6wz0swW40QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs0V3FoPHRmoXrXpNYJ4VPdDLPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjhlZTgyNDItNWZlZi0z NGYzLTg0NjAtMTU5NGIyNGM0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1AjCfV3ZC2haRNQUfJv+JZ8bwgq+Em3UXPeYW4M1jlUYl6MS+Xuo+b yvLKaZ1Ri1I16N7rpU75RlDot/URLeX+U5IMUlYNsnufKTaVeLOpMKjdgo0ezL5M vXdYU4Wjle8dGc5PGtuA5/qxcJycQT/Mu73Y4kMw0vDR89pYBXXZpenM4mBgulxW jJ4tc9/tV6VvxsSbVh0iY18QQYcSD7zAqB6FUyEXo1JWJvSXDZunBHbGWDg7mhE+ GlWPjUU8jT8suZikX+YlwYYkK11ZskRfMwhJ/9sACY6r2V2AhkkzKZSPD4mOfHNw ANW0ByZumckj5nvKqPdncnKW2YKIKcM= -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:55 2025 by rpki-client