$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa File: bbc23896-de06-3c39-806b-499d05c366e6.roa (raw, json) Hash identifier: BS7qe3qdt+MpoxQS4IqcX5LxvrH5b7rG+Oxvppuo3ow= Subject key identifier: 61:A6:E2:C0:7A:56:98:D6:1A:90:A8:27:27:7A:BD:52:0B:83:A8:6F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D06080D479117975DF20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d0:60:80:d4:79:11:79:75:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=44a5195b-f6ee-48a6-9ca4-6c715b904d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:de:1b:a2:d4:ec:1a:46:8b:69:d1:89:1b: 2d:1f:2b:90:71:9c:ee:cb:d6:42:15:0e:69:7b:95: a1:94:6d:c1:44:e3:30:6e:4b:b0:90:de:bf:f1:6f: 5b:e9:23:41:91:55:e5:d7:83:9d:75:5c:eb:4d:63: a3:aa:59:6c:ef:6f:57:de:ea:3d:48:6f:69:cb:91: ea:db:ad:aa:6e:75:39:33:dc:f9:70:22:7e:d1:4f: 41:95:8c:31:c8:d3:f8:e0:23:71:a8:63:a0:a5:14: 2e:d1:48:7f:87:9c:20:db:93:aa:5b:d0:51:d4:e9: c4:ae:95:4a:c1:8c:16:ef:4c:5e:ae:4f:47:bf:dd: ac:25:8b:4a:c0:47:b2:31:66:9a:11:a6:13:2f:3d: a4:98:ca:73:59:c7:b8:72:85:b5:ab:e0:46:e8:ab: df:dc:8f:b5:0c:c0:c0:d2:d6:48:7b:5d:e2:1a:9f: 03:4e:ef:0c:b8:da:40:0f:b5:59:79:14:bb:b9:5d: c6:db:2c:e7:57:4b:ea:6c:79:a7:bb:e8:2d:3b:c4: ea:b1:09:92:c9:3e:41:fd:c2:6b:11:a8:6b:fe:b8: 26:c8:54:a9:bb:51:6d:ed:74:1e:70:0c:a2:e0:54: 6b:a3:49:b9:ed:1c:e2:83:0d:10:15:53:64:f1:67: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A6:E2:C0:7A:56:98:D6:1A:90:A8:27:27:7A:BD:52:0B:83:A8:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:53:92:03:8f:5d:36:e7:3b:4b:61:2c:96:69:1a:27:0e:3f: 48:c5:06:0c:eb:ee:35:f1:08:78:ba:59:31:b0:c6:c4:6e:9b: 03:de:eb:49:4b:9d:f7:82:31:54:ad:72:f7:5f:77:18:a0:96: af:e0:0a:d4:ba:67:e3:84:01:a2:af:ac:91:79:ef:9b:f1:dc: ad:25:7a:a4:a2:58:4b:f9:27:88:3c:68:c1:1e:24:e1:3d:a3: 55:d5:a9:71:38:76:75:e4:b4:22:7f:d4:8e:ac:d2:03:9a:4f: bb:dc:d7:4f:58:9e:a4:09:a3:a1:69:be:6b:23:69:8b:27:46: be:7c:ad:7a:b3:8c:1c:ed:88:0f:91:48:da:da:29:a8:99:a3: d9:f7:b6:23:9b:52:59:28:ef:a0:b4:0b:e5:ad:c4:ff:59:6a: 53:2b:cb:b7:96:78:57:77:a9:54:65:55:c8:03:97:0c:24:b1: ec:98:f3:d6:c2:2c:a0:47:64:a7:8f:90:04:e5:eb:52:95:53: f1:45:ca:ec:b5:b4:01:f6:30:09:2d:7e:d2:91:bc:4d:5e:b5: 0d:54:81:e7:f8:de:3b:39:3b:f8:ae:30:cf:3d:9a:54:0d:5d: 16:45:10:ef:13:03:c4:16:43:4d:76:4a:51:32:87:bd:60:4a: fc:28:eb:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNBggNR5EXl13yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDRhNTE5NWItZjZlZS00OGE2LTljYTQtNmM3MTViOTA0ZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD3eG6LU7BpGi2nRiRstHyuQcZzuy9ZCFQ5p e5WhlG3BROMwbkuwkN6/8W9b6SNBkVXl14OddVzrTWOjqlls729X3uo9SG9py5Hq 262qbnU5M9z5cCJ+0U9BlYwxyNP44CNxqGOgpRQu0Uh/h5wg25OqW9BR1OnErpVK wYwW70xerk9Hv92sJYtKwEeyMWaaEaYTLz2kmMpzWce4coW1q+BG6Kvf3I+1DMDA 0tZIe13iGp8DTu8MuNpAD7VZeRS7uV3G2yznV0vqbHmnu+gtO8TqsQmSyT5B/cJr Eahr/rgmyFSpu1Ft7XQecAyi4FRro0m57Rzigw0QFVNk8WePowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGm4sB6VpjWGpCoJyd6vVILg6hvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmJjMjM4OTYtZGUwNi0z YzM5LTgwNmItNDk5ZDA1YzM2NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhTkgOPXTbnO0thLJZpGicOP0jFBgzr7jXxCHi6WTGwxsRumwPe60lL nfeCMVStcvdfdxiglq/gCtS6Z+OEAaKvrJF575vx3K0leqSiWEv5J4g8aMEeJOE9 o1XVqXE4dnXktCJ/1I6s0gOaT7vc109YnqQJo6FpvmsjaYsnRr58rXqzjBztiA+R SNraKaiZo9n3tiObUlko76C0C+WtxP9ZalMry7eWeFd3qVRlVcgDlwwkseyY89bC LKBHZKePkATl61KVU/FFyuy1tAH2MAktftKRvE1etQ1Ugef43js5O/iuMM89mlQN XRZFEO8TA8QWQ012SlEyh71gSvwo6/k= -----END CERTIFICATE-----Generated at Sun May 4 19:14:39 2025 by rpki-client