$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04b35298-153a-3d5f-9fa5-c9ea99d46318.roa File: 04b35298-153a-3d5f-9fa5-c9ea99d46318.roa (raw, json) Hash identifier: FUbY/PXeRETIk+spOyINY76R99NjmiQvQ3KiTRimfz8= Subject key identifier: E7:99:AD:5F:59:AF:C0:52:1C:43:1E:79:D2:9A:F9:E5:97:AF:51:75 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA040DDEA6B0AC9B3E2300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04b35298-153a-3d5f-9fa5-c9ea99d46318.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:04:0d:de:a6:b0:ac:9b:3e:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=235d5a3b-816a-45c4-af13-7a49e1c270be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:b3:40:35:f8:56:2c:e1:e6:d0:bc:df:2f: ea:f7:12:bb:6f:3f:64:5a:11:75:74:ff:08:65:9f: 58:a1:e0:20:f4:7e:bd:72:c3:9e:36:fb:fd:bd:89: 87:ff:cd:22:96:96:77:ca:64:13:9c:05:c9:5d:9b: 08:45:bf:f9:63:f3:fb:ac:d2:62:20:61:56:9a:9e: fd:19:09:23:ed:d1:e1:03:92:15:64:dc:73:2e:58: 25:7a:bb:80:0c:13:90:c2:56:40:06:46:e3:09:0c: e9:12:e8:6c:bd:b9:3e:db:5c:ff:25:af:b6:70:40: b9:7d:e5:1b:8f:a4:4b:93:2d:4a:50:7b:f5:51:c4: 10:18:06:0d:87:71:e0:88:eb:a8:f2:b0:9d:b2:66: 8d:6c:47:76:46:8d:d1:33:d4:4e:af:a1:13:fd:06: 69:e1:cd:54:c2:73:58:42:0a:f4:fd:e6:9b:38:68: c0:ea:c5:54:cf:ca:c5:9d:30:06:15:b6:7a:dc:c9: d8:a6:c8:3b:1b:a4:3e:c2:a5:ee:d4:47:cd:ba:da: 21:22:da:82:04:6d:68:99:d8:10:28:93:29:ba:76: 72:d2:01:e5:1b:a5:e4:f1:6b:bf:3f:87:86:0d:5a: 39:e0:83:a9:67:f0:59:c1:82:68:3d:d5:2b:1d:57: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:AD:5F:59:AF:C0:52:1C:43:1E:79:D2:9A:F9:E5:97:AF:51:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04b35298-153a-3d5f-9fa5-c9ea99d46318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:62:dc:c1:32:af:91:73:30:c6:fb:d8:5a:72:21:b2:7d:48: d7:7c:82:d0:41:39:f4:ce:5a:12:41:b9:ff:4e:7d:7d:11:82: 0a:f1:0d:9f:16:6a:a5:ec:33:c5:3f:52:bb:9d:27:d9:9f:ae: 72:7d:e5:86:98:af:e2:14:eb:68:71:26:41:04:65:42:c8:94: d1:30:37:66:c2:cb:c4:9e:aa:02:33:a1:49:cd:7a:51:66:5f: 6d:80:6c:6d:ff:43:00:d8:1d:8d:6f:af:3d:c5:b7:ab:f3:11: 1e:ba:fd:e8:fc:87:66:36:b7:a5:e0:83:81:d3:c9:6c:2b:25: 64:c0:08:4a:56:17:dc:a4:7d:24:38:46:21:7b:ee:ea:4d:28: 77:cf:04:27:b9:e6:83:96:02:4f:15:35:bd:8c:a0:08:9d:fd: d0:98:c5:69:f7:c1:c9:f0:41:14:13:cc:eb:55:4d:28:35:4d: df:3c:1c:b2:41:90:f2:66:21:19:0f:42:23:74:1b:86:6d:82: 34:4a:c6:05:d8:13:6f:34:f0:6d:72:e7:77:47:eb:6b:f9:f3: 7f:38:a9:ce:ea:7e:71:4c:f2:a4:c5:79:e9:3e:6f:3b:23:df: da:6b:4d:51:ce:d8:b3:36:57:22:83:00:e1:2f:06:65:e6:4a: 47:6e:e3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gQN3qawrJs+IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MjM1ZDVhM2ItODE2YS00NWM0LWFmMTMtN2E0OWUxYzI3MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1yzQDX4Vizh5tC83y/q9xK7bz9kWhF1dP8I ZZ9YoeAg9H69csOeNvv9vYmH/80ilpZ3ymQTnAXJXZsIRb/5Y/P7rNJiIGFWmp79 GQkj7dHhA5IVZNxzLlgleruADBOQwlZABkbjCQzpEuhsvbk+21z/Ja+2cEC5feUb j6RLky1KUHv1UcQQGAYNh3HgiOuo8rCdsmaNbEd2Ro3RM9ROr6ET/QZp4c1UwnNY Qgr0/eabOGjA6sVUz8rFnTAGFbZ63MnYpsg7G6Q+wqXu1EfNutohItqCBG1omdgQ KJMpunZy0gHlG6Xk8Wu/P4eGDVo54IOpZ/BZwYJoPdUrHVdI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeZrV9Zr8BSHEMeedKa+eWXr1F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRiMzUyOTgtMTUzYS0z ZDVmLTlmYTUtYzllYTk5ZDQ2MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRi3MEyr5FzMMb72FpyIbJ9SNd8gtBBOfTOWhJBuf9OfX0RggrxDZ8W aqXsM8U/UrudJ9mfrnJ95YaYr+IU62hxJkEEZULIlNEwN2bCy8SeqgIzoUnNelFm X22AbG3/QwDYHY1vrz3Ft6vzER66/ej8h2Y2t6Xgg4HTyWwrJWTACEpWF9ykfSQ4 RiF77upNKHfPBCe55oOWAk8VNb2MoAid/dCYxWn3wcnwQRQTzOtVTSg1Td88HLJB kPJmIRkPQiN0G4ZtgjRKxgXYE2808G1y53dH62v58384qc7qfnFM8qTFeek+bzsj 39prTVHO2LM2VyKDAOEvBmXmSkdu40A= -----END CERTIFICATE-----Generated at Sun Apr 27 14:51:35 2025 by rpki-client