$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1240a403-2140-3964-a77f-3e6e7dbd02ee.roa File: 1240a403-2140-3964-a77f-3e6e7dbd02ee.roa (raw, json) Hash identifier: aNphv+DJqdLzuF8uJGYtJPYwaeVFDkkK1sNP7xQNkq8= Subject key identifier: 98:D2:8A:5D:F6:73:D9:D1:E4:73:C0:47:20:BE:7B:CB:E1:28:05:91 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F438C49F449E417947780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1240a403-2140-3964-a77f-3e6e7dbd02ee.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:43:8c:49:f4:49:e4:17:94:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=e8a865a4-75e7-4ae7-865a-11e2ee968e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:ac:63:0c:5b:e7:26:a7:3d:b2:30:d2:2b: 5a:57:66:b2:61:c2:99:50:2a:c1:9f:f2:08:30:f0: 6d:ea:13:8b:4e:10:d2:f9:b0:51:25:bc:fc:8a:eb: 35:7f:b3:be:13:78:5f:e6:c1:4e:be:a7:51:c2:7f: c9:84:10:32:f5:40:bd:ad:5e:18:05:8b:ee:64:64: 23:fd:50:c4:3a:aa:d3:ae:5a:7b:6f:4f:f5:99:99: 76:bb:0e:ef:59:71:06:fd:1f:e3:79:02:d0:28:73: 78:aa:d6:c1:47:80:3a:3c:ca:81:8d:ce:6a:a5:59: 4b:32:ae:5a:8c:dc:53:a7:06:11:fc:c9:d5:ec:61: fd:fe:fb:de:87:db:42:2e:2f:7b:6a:fc:99:36:4f: 4e:f1:a6:de:c7:5d:d0:b7:00:3e:3f:24:f0:45:20: f0:88:09:3e:d9:98:49:78:8e:1e:0b:ef:d1:67:9d: 5e:db:ef:d6:55:e8:91:0f:31:68:df:bd:ae:9e:82: 67:77:ae:01:48:f5:56:66:bb:c1:97:5c:2c:ce:33: fe:39:8b:ca:ef:74:70:f9:4d:f4:69:02:87:e6:2f: 95:6f:1f:04:58:89:a6:18:48:ba:4a:b6:0b:c2:0a: 8d:72:c3:b9:16:66:3b:0a:61:49:9b:77:ff:95:e7: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D2:8A:5D:F6:73:D9:D1:E4:73:C0:47:20:BE:7B:CB:E1:28:05:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1240a403-2140-3964-a77f-3e6e7dbd02ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6f:0b:c6:4f:08:c5:67:fe:34:c0:0c:75:4b:8f:28:52:7b: d1:69:f9:e4:07:bf:83:0e:6f:8f:f8:7c:b2:47:ec:8a:79:ed: 18:45:b3:d3:88:95:a0:df:b6:a2:88:09:e7:00:ec:8e:71:57: 67:56:00:e8:5e:2d:c7:f9:a9:90:9d:8a:25:42:83:54:a2:fa: b2:4a:52:85:6d:cc:1a:49:8b:45:f1:8d:af:0e:c0:87:6d:a8: c7:d6:da:14:bd:ef:98:7b:37:55:e8:0e:45:92:2f:3a:1c:68: 00:a1:86:0d:59:f4:53:95:86:15:90:98:54:d7:14:27:54:89: f6:d5:84:3f:78:93:88:12:16:5a:68:bb:39:6c:46:34:41:41: d2:52:81:28:59:00:ac:7e:b4:aa:11:70:b0:3a:b9:2a:ce:b1: 27:99:5e:af:2c:0e:ee:41:a3:57:24:1d:ae:28:94:08:59:8a: 45:5c:06:45:10:a7:f5:c0:a1:91:fd:92:17:44:f1:0e:6c:d7: 4f:f3:13:af:fe:26:6a:da:4c:9d:00:36:f6:03:6b:73:9d:3c: 62:29:a6:a8:0c:7c:36:a2:22:37:8a:04:81:a2:50:81:71:15: b3:0a:12:9a:15:77:5c:69:60:fb:88:83:a6:65:21:0b:e0:8c: 54:2a:66:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0OMSfRJ5BeUd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZThhODY1YTQtNzVlNy00YWU3LTg2NWEtMTFlMmVlOTY4ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOisYwxb5yanPbIw0itaV2ayYcKZUCrBn/II MPBt6hOLThDS+bBRJbz8ius1f7O+E3hf5sFOvqdRwn/JhBAy9UC9rV4YBYvuZGQj /VDEOqrTrlp7b0/1mZl2uw7vWXEG/R/jeQLQKHN4qtbBR4A6PMqBjc5qpVlLMq5a jNxTpwYR/MnV7GH9/vveh9tCLi97avyZNk9O8abex13QtwA+PyTwRSDwiAk+2ZhJ eI4eC+/RZ51e2+/WVeiRDzFo372unoJnd64BSPVWZrvBl1wszjP+OYvK73Rw+U30 aQKH5i+Vbx8EWImmGEi6SrYLwgqNcsO5FmY7CmFJm3f/lecnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjSil32c9nR5HPARyC+e8vhKAWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTI0MGE0MDMtMjE0MC0z OTY0LWE3N2YtM2U2ZTdkYmQwMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdvC8ZPCMVn/jTADHVLjyhSe9Fp+eQHv4MOb4/4fLJH7Ip57RhFs9OI laDftqKICecA7I5xV2dWAOheLcf5qZCdiiVCg1Si+rJKUoVtzBpJi0Xxja8OwIdt qMfW2hS975h7N1XoDkWSLzocaAChhg1Z9FOVhhWQmFTXFCdUifbVhD94k4gSFlpo uzlsRjRBQdJSgShZAKx+tKoRcLA6uSrOsSeZXq8sDu5Bo1ckHa4olAhZikVcBkUQ p/XAoZH9khdE8Q5s10/zE6/+JmraTJ0ANvYDa3OdPGIppqgMfDaiIjeKBIGiUIFx FbMKEpoVd1xpYPuIg6ZlIQvgjFQqZrM= -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:50 2025 by rpki-client