$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa File: 0d37223d-5314-319b-9fe0-482a76573c2e.roa (raw, json) Hash identifier: E2QTQkJF7eMMHKXEFaKxLrhCYm3YdpkIY5oE6jG7l/E= Subject key identifier: 2B:13:D0:12:DB:A6:E5:BA:59:9B:2E:50:34:7F:BA:58:31:97:05:5C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F8A478322985C9060400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f8:a4:78:32:29:85:c9:06:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=d51fa1a6-5ceb-4276-9d36-5f36dd40c64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:36:70:68:67:f4:e4:b0:57:4b:d5:01:ca: c9:1a:22:61:51:7b:fa:64:25:34:66:b2:ae:ff:09: 8e:33:c0:ea:41:3b:a6:3f:64:e1:4a:9c:43:45:3c: 11:84:19:66:37:76:2a:c4:73:3e:d1:a7:db:d2:72: 24:81:ec:93:99:e7:c5:07:60:98:a2:bb:ae:e3:1f: 8d:d6:46:2c:31:57:85:63:53:06:35:22:53:1c:24: 25:6d:98:90:ba:6f:36:72:18:2a:df:3f:a2:0b:79: e3:9d:42:97:f2:e0:85:59:1a:43:f9:ca:0e:50:e9: 68:71:1c:80:bf:b8:20:f7:0b:a4:29:04:67:a2:58: 48:23:f8:61:c3:e5:9d:81:9e:22:ac:05:3e:7d:a9: 15:03:b8:65:15:8e:e1:3c:6a:c1:c8:10:65:ac:bb: 12:ea:8e:38:8c:b7:fb:b0:14:76:39:4d:cb:13:0d: 68:4c:f7:20:a1:e9:4e:44:87:1d:d2:0d:b3:dc:b2: 9f:22:39:bf:91:4c:2e:27:35:09:dd:15:4e:e2:d7: 89:d6:ad:54:57:08:5c:9d:98:87:6a:77:fb:aa:12: 8f:72:55:c4:3f:48:a1:79:fc:3b:15:a2:65:ed:b5: 47:9a:12:08:19:b8:dd:19:91:ae:56:db:4d:c3:7e: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:D0:12:DB:A6:E5:BA:59:9B:2E:50:34:7F:BA:58:31:97:05:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d37223d-5314-319b-9fe0-482a76573c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a9:bd:b8:e7:f9:a2:b2:ec:9d:25:d5:36:02:bc:8d:ba:f1: 3b:48:8a:44:75:48:29:73:5a:e2:7f:d6:d0:d8:de:b5:9d:83: fe:9c:bb:98:ae:92:b5:4f:34:1c:56:b7:cb:ef:2a:f1:ae:1c: f7:43:46:c0:be:20:8b:c9:6a:94:d7:2d:95:75:21:e5:4e:8f: 83:ea:04:ab:3a:d5:64:20:83:7a:c6:86:8e:c6:02:98:7a:50: 35:cc:3a:f0:4c:3b:a3:4f:e4:07:56:ca:f5:7c:65:38:73:b6: 53:19:5d:c4:c1:ef:c4:ea:80:d5:c6:7a:01:31:ee:6d:34:ee: 59:69:ad:d4:af:47:f1:6d:1a:f8:4b:41:64:7c:c2:cb:84:23: 55:a5:7b:4a:1a:b9:59:c1:0a:38:a6:7b:05:37:a8:45:de:ce: b7:4c:52:b6:fd:92:b7:19:ff:5d:34:b0:6c:de:51:5c:bc:82: ba:cc:40:dc:e1:3c:8f:d1:85:ea:23:86:af:15:dd:6c:8d:1e: 38:59:5f:ca:0d:1c:0c:38:cb:c3:6d:42:63:0f:2e:cd:02:6e: 45:1b:28:6c:c3:ff:a8:89:5a:4c:78:16:06:3b:75:3a:9e:9b: 49:95:09:bc:84:ea:d2:ff:41:64:10:bd:96:91:46:60:56:50: e2:f0:88:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fikeDIphckGBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZDUxZmExYTYtNWNlYi00Mjc2LTlkMzYtNWYzNmRkNDBjNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSA2cGhn9OSwV0vVAcrJGiJhUXv6ZCU0ZrKu /wmOM8DqQTumP2ThSpxDRTwRhBlmN3YqxHM+0afb0nIkgeyTmefFB2CYoruu4x+N 1kYsMVeFY1MGNSJTHCQlbZiQum82chgq3z+iC3njnUKX8uCFWRpD+coOUOlocRyA v7gg9wukKQRnolhII/hhw+WdgZ4irAU+fakVA7hlFY7hPGrByBBlrLsS6o44jLf7 sBR2OU3LEw1oTPcgoelORIcd0g2z3LKfIjm/kUwuJzUJ3RVO4teJ1q1UVwhcnZiH anf7qhKPclXEP0ihefw7FaJl7bVHmhIIGbjdGZGuVttNw35O4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsT0BLbpuW6WZsuUDR/ulgxlwVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGQzNzIyM2QtNTMxNC0z MTliLTlmZTAtNDgyYTc2NTczYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKepvbjn+aKy7J0l1TYCvI268TtIikR1SClzWuJ/1tDY3rWdg/6cu5iu krVPNBxWt8vvKvGuHPdDRsC+IIvJapTXLZV1IeVOj4PqBKs61WQgg3rGho7GAph6 UDXMOvBMO6NP5AdWyvV8ZThztlMZXcTB78TqgNXGegEx7m007llprdSvR/FtGvhL QWR8wsuEI1Wle0oauVnBCjimewU3qEXezrdMUrb9krcZ/100sGzeUVy8grrMQNzh PI/Rheojhq8V3WyNHjhZX8oNHAw4y8NtQmMPLs0CbkUbKGzD/6iJWkx4FgY7dTqe m0mVCbyE6tL/QWQQvZaRRmBWUOLwiJU= -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:37 2025 by rpki-client