$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/035185bc-b03c-3d14-8788-cb7e52076f1c.roa File: 035185bc-b03c-3d14-8788-cb7e52076f1c.roa (raw, json) Hash identifier: kg78iU0xG87L2ZsZMIJZbFbYJdXP8yx0d/NzJL22f7w= Subject key identifier: 40:C5:D4:E2:84:C2:C1:62:94:E6:3F:F8:E6:24:DB:0B:EE:B2:DE:95 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B465FBA2D22343780080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/035185bc-b03c-3d14-8788-cb7e52076f1c.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 36384 IP address blocks: 104.132.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b4:65:fb:a2:d2:23:43:78:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=ddfc9985-11a3-4a49-8e09-05437709fa6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:4b:b9:60:33:51:32:8b:d7:e1:c5:c3:1e: 3d:c5:08:c5:0c:a8:4d:56:28:a5:b4:ea:ac:80:38: 55:26:d7:f0:9e:71:70:4c:78:24:77:d9:28:d0:5c: 1f:90:bd:92:7b:5a:6e:f1:f3:70:39:6e:d5:57:94: 1d:64:bb:03:1b:27:79:38:28:29:d0:21:62:f5:75: 9d:40:2d:89:2f:01:0e:08:27:22:64:8c:45:29:53: aa:46:c7:1e:3d:b2:d7:0b:d1:42:0b:c9:ff:3c:6d: 23:d9:00:cf:ef:e1:70:f2:59:b8:25:99:6b:7b:5b: c6:b1:90:5c:97:ea:01:4e:ea:8d:05:10:cf:a8:88: 70:04:a4:51:d8:42:c9:3e:9f:f8:89:73:dc:b5:7d: fc:f3:4d:e4:28:9c:52:57:74:b9:c2:f3:bd:7c:bf: 45:22:54:38:5d:ea:0b:2f:db:c9:74:d8:8d:18:44: 06:da:e1:21:95:f6:77:62:c7:08:26:ac:2a:70:6c: 79:2a:d7:75:f8:ab:86:27:de:61:df:10:2e:31:39: 89:f1:25:f5:64:da:40:8b:4d:f4:2f:25:e0:67:1d: b1:22:ae:59:94:18:df:6d:66:c1:56:b5:74:a7:f5: 72:b4:16:f2:67:64:a1:f3:48:58:bb:6f:02:79:55: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C5:D4:E2:84:C2:C1:62:94:E6:3F:F8:E6:24:DB:0B:EE:B2:DE:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/035185bc-b03c-3d14-8788-cb7e52076f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:87:19:4b:b8:f2:98:a1:65:ab:03:ea:84:4f:9c:3a:87:3e: 7c:c9:5b:83:c4:0c:03:dd:0f:8e:20:8f:21:11:5f:9a:e2:7f: 0a:35:39:c1:2f:24:4b:4c:65:fa:d7:51:c1:0a:dc:2f:fa:f2: cf:fb:c0:f1:1a:c6:e9:54:2b:5b:d5:46:95:37:69:42:f0:93: 01:ca:64:fa:4b:7e:b6:21:01:48:2a:f8:e8:ff:4d:4f:22:95: b9:60:4a:60:cb:a1:23:8f:83:c2:e7:32:1a:4c:94:57:16:e6: 97:60:79:59:72:39:d5:be:e4:c0:9d:4b:3c:c1:08:3a:1a:30: 61:3f:04:cf:e4:73:a9:fc:47:63:a6:9a:97:d1:ce:f6:29:ca: f0:7b:8f:6d:df:3e:13:94:dd:4c:d5:7c:e8:45:0d:cc:06:23: a8:69:e4:3e:fb:6c:ba:97:b7:fc:3d:8f:17:c8:ae:43:15:27: f3:2d:94:75:92:7d:5f:df:11:0b:15:dd:d4:45:b6:5f:1e:93: 80:e9:5f:3c:8e:8d:62:52:eb:31:d3:e0:87:f4:b1:9d:bf:15: da:05:cb:11:b5:33:f1:28:5f:64:92:13:07:03:ef:d3:f5:41: 99:80:03:14:fc:4d:c7:d4:0b:0b:22:5c:e0:10:0b:15:a5:47: cf:67:1a:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmOZLRl+6LSI0N4AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZGRmYzk5ODUtMTFhMy00YTQ5LThlMDktMDU0Mzc3MDlmYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthRLuWAzUTKL1+HFwx49xQjFDKhNViiltOqs gDhVJtfwnnFwTHgkd9ko0FwfkL2Se1pu8fNwOW7VV5QdZLsDGyd5OCgp0CFi9XWd QC2JLwEOCCciZIxFKVOqRscePbLXC9FCC8n/PG0j2QDP7+Fw8lm4JZlre1vGsZBc l+oBTuqNBRDPqIhwBKRR2ELJPp/4iXPctX38803kKJxSV3S5wvO9fL9FIlQ4XeoL L9vJdNiNGEQG2uEhlfZ3YscIJqwqcGx5Ktd1+KuGJ95h3xAuMTmJ8SX1ZNpAi030 LyXgZx2xIq5ZlBjfbWbBVrV0p/VytBbyZ2Sh80hYu28CeVXn3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEDF1OKEwsFilOY/+OYk2wvust6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDM1MTg1YmMtYjAzYy0z ZDE0LTg3ODgtY2I3ZTUyMDc2ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCaIQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPYcZS7jymKFlqwPqhE+cOoc+fMlbg8QMA90PjiCPIRFfmuJ/CjU5wS8k S0xl+tdRwQrcL/ryz/vA8RrG6VQrW9VGlTdpQvCTAcpk+kt+tiEBSCr46P9NTyKV uWBKYMuhI4+DwucyGkyUVxbml2B5WXI51b7kwJ1LPMEIOhowYT8Ez+RzqfxHY6aa l9HO9inK8HuPbd8+E5TdTNV86EUNzAYjqGnkPvtsupe3/D2PF8iuQxUn8y2UdZJ9 X98RCxXd1EW2Xx6TgOlfPI6NYlLrMdPgh/Sxnb8V2gXLEbUz8ShfZJITBwPv0/VB mYADFPxNx9QLCyJc4BALFaVHz2caBQ== -----END CERTIFICATE-----Generated at Mon Apr 28 00:52:44 2025 by rpki-client