$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa File: 100d407b-0506-34eb-b5f6-2bf73b584406.roa (raw, json) Hash identifier: lFSNbPcftVAO6Dlgvs4tO5wlAsqhpWUAfqVIYRT5H5I= Subject key identifier: 78:10:D2:FC:CF:E5:78:25:62:31:DD:3C:CE:7D:3E:CD:06:8B:FD:A2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F92097EEC82C8DE3FC08 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f9:20:97:ee:c8:2c:8d:e3:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=20994192-18fb-43d8-b818-83c8e1d370f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:b5:23:88:02:fc:2d:05:c6:be:6e:e4:76: a5:e6:49:23:4c:d7:2c:54:6a:2e:ff:dc:82:53:09: e9:ed:0e:33:c9:63:0d:a8:ef:91:66:7d:25:92:56: 16:21:a6:5a:91:aa:51:89:24:d1:eb:ef:c9:19:4e: dd:45:c4:1b:2a:11:fd:45:22:d4:23:c4:c1:fd:87: b7:fe:29:cb:09:87:3e:21:45:6a:0c:8b:98:29:4a: ae:eb:06:35:29:09:6e:93:de:29:7f:03:bf:4c:1a: 5b:95:27:62:ee:79:7a:6a:1d:6f:d6:f8:22:4b:2a: d5:a3:30:95:01:de:fe:7a:45:96:8c:28:02:81:4b: 0c:fc:da:d0:cf:b9:26:68:c1:67:7c:57:4a:74:9e: 82:fc:c6:e9:f4:bc:34:75:47:4e:49:88:c2:71:2b: 98:82:f4:23:51:aa:7b:cf:05:7f:cc:40:aa:86:f2: 39:30:52:44:de:b4:ad:a5:82:95:39:7c:77:58:cc: f7:11:ce:d8:ce:0e:c3:81:1e:f8:e7:fa:db:62:6c: 6d:ca:29:57:bb:69:97:b2:10:91:f9:5f:f3:a4:1b: 21:80:1c:6c:90:8b:15:ac:df:e6:70:6b:d7:c0:17: 2b:f0:eb:21:c3:3d:5e:f1:c3:45:62:62:69:7d:17: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:D2:FC:CF:E5:78:25:62:31:DD:3C:CE:7D:3E:CD:06:8B:FD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0a:2d:9e:78:50:ac:aa:c5:19:76:cb:b6:50:23:ec:4e:20: 6e:28:6b:6d:2a:67:eb:20:53:07:d7:5f:ba:7e:1c:af:8d:1b: d9:46:bb:08:82:59:56:64:fd:8b:c4:f6:3f:26:36:13:18:48: 45:0e:ed:56:4f:ae:f4:8e:87:b7:35:6c:84:b7:00:23:3a:0b: 48:2b:cd:dd:f9:c2:0a:9c:e4:00:3e:c9:88:53:7a:0b:c5:ea: bb:e6:77:5a:67:3e:76:76:54:06:1a:81:a7:f1:54:1a:6f:e3: 06:16:e3:e4:99:cc:19:3b:68:af:d6:3c:40:54:53:90:cf:e4: 3c:65:c5:00:8b:46:92:54:df:0d:26:b0:fc:43:5d:8b:e1:60: 0c:25:5c:45:07:97:8f:6c:df:b1:a8:06:f9:21:ae:4e:0c:c0: 7f:5b:3d:54:cb:45:57:21:a3:d1:85:c8:6f:dc:50:9d:68:c5: 69:7c:f7:34:8a:60:a2:4c:a1:c5:2b:91:46:b1:f7:a8:13:ca: d8:c4:5d:9b:19:09:2d:d5:42:cc:fe:d0:5f:bc:e5:45:e7:76: b3:86:ae:eb:2c:c1:d0:b3:7f:10:6c:a5:6f:55:02:b7:8c:2f: 57:cb:80:1b:8b:e9:dd:45:a2:7f:e1:81:83:35:2b:56:85:6c: 93:fb:eb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fkgl+7ILI3j/AgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MjA5OTQxOTItMThmYi00M2Q4LWI4MTgtODNjOGUxZDM3MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W21I4gC/C0Fxr5u5Hal5kkjTNcsVGou/9yC Uwnp7Q4zyWMNqO+RZn0lklYWIaZakapRiSTR6+/JGU7dRcQbKhH9RSLUI8TB/Ye3 /inLCYc+IUVqDIuYKUqu6wY1KQluk94pfwO/TBpblSdi7nl6ah1v1vgiSyrVozCV Ad7+ekWWjCgCgUsM/NrQz7kmaMFnfFdKdJ6C/Mbp9Lw0dUdOSYjCcSuYgvQjUap7 zwV/zECqhvI5MFJE3rStpYKVOXx3WMz3Ec7Yzg7DgR745/rbYmxtyilXu2mXshCR +V/zpBshgBxskIsVrN/mcGvXwBcr8Oshwz1e8cNFYmJpfRcpvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgQ0vzP5XglYjHdPM59Ps0Gi/2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTAwZDQwN2ItMDUwNi0z NGViLWI1ZjYtMmJmNzNiNTg0NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcKLZ54UKyqxRl2y7ZQI+xOIG4oa20qZ+sgUwfXX7p+HK+NG9lGuwiC WVZk/YvE9j8mNhMYSEUO7VZPrvSOh7c1bIS3ACM6C0grzd35wgqc5AA+yYhTegvF 6rvmd1pnPnZ2VAYagafxVBpv4wYW4+SZzBk7aK/WPEBUU5DP5DxlxQCLRpJU3w0m sPxDXYvhYAwlXEUHl49s37GoBvkhrk4MwH9bPVTLRVcho9GFyG/cUJ1oxWl89zSK YKJMocUrkUax96gTytjEXZsZCS3VQsz+0F+85UXndrOGrusswdCzfxBspW9VAreM L1fLgBuL6d1Fon/hgYM1K1aFbJP764o= -----END CERTIFICATE-----Generated at Sun Jun 15 17:16:34 2025 by rpki-client