$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa File: 12afb9f1-e653-3840-aa8c-a6b6c6358412.roa (raw, json) Hash identifier: kb1maNVgnQiPVuVs800tHWvcem3jlaJSDOrz7voU0WQ= Subject key identifier: D0:C2:2C:3C:C6:7D:8B:C5:15:2D:C3:F0:E4:7D:BB:BD:CA:75:E1:99 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D42F33B1926C2ED2A2E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d4:2f:33:b1:92:6c:2e:d2:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=86294b6f-9957-41c2-8b53-29850136ea6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:78:bd:a7:fa:41:86:14:7c:00:12:6a:0a: 39:06:da:9f:18:d2:7a:67:60:96:51:e4:5e:e8:9c: 5f:87:79:42:1c:3e:5b:4e:13:d1:26:af:43:8b:56: 19:c7:0b:87:d2:fb:56:9e:d5:39:e2:11:f8:72:07: 39:e9:01:65:76:62:c6:45:8f:df:b9:b9:1a:99:9c: 30:11:3c:ed:7d:d6:3f:31:42:be:96:16:e9:fc:3e: b1:5f:36:91:00:01:2a:bd:30:d1:03:5d:40:72:9c: 09:74:2e:c7:01:1a:f1:60:54:d5:5d:4c:fb:91:b9: c9:de:d8:d6:9f:e2:5c:9f:8d:23:52:0d:45:48:8b: 17:1d:5f:22:81:0a:ed:03:97:4b:ec:5f:a8:5f:15: 1b:98:45:15:3c:ae:90:61:ba:ff:87:63:39:1b:8c: 7d:1c:d9:0e:33:17:ad:bb:06:f7:1b:d0:bb:52:aa: c9:1b:a3:76:9a:9f:cf:05:f6:ac:8f:94:f2:9a:1a: 67:f7:2a:d9:64:34:07:74:13:9a:7a:8e:75:81:6a: 40:ba:3c:cf:ea:e4:49:6c:a0:5e:5b:be:ea:96:85: 4a:b9:f8:bd:b5:72:1e:2e:8d:59:c8:8d:5f:f1:1d: bc:31:33:49:b3:1f:79:c4:29:24:93:6d:91:7f:e3: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:2C:3C:C6:7D:8B:C5:15:2D:C3:F0:E4:7D:BB:BD:CA:75:E1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/12afb9f1-e653-3840-aa8c-a6b6c6358412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c1:08:f5:12:96:89:23:49:2b:da:33:5e:f7:91:95:cf:12: a3:a9:7e:ab:10:aa:76:46:a4:ab:33:2d:b9:71:f9:02:04:96: 22:6e:b7:21:01:55:d7:30:bd:e0:7f:11:05:f2:16:67:14:ea: 19:64:66:0f:ad:0d:b1:fb:42:21:06:8e:c3:fc:bc:28:3c:71: bb:74:28:b0:f8:b7:83:ba:0b:3d:4a:7d:b8:bf:5c:30:f0:99: b8:97:eb:48:26:dc:5f:cf:af:7f:20:f9:72:cd:ec:95:f1:5b: 66:45:e3:32:dd:9a:ea:7b:ae:c9:77:5b:15:72:54:b5:87:fe: 0c:65:9f:2b:94:fb:f3:6d:69:b6:af:26:60:34:b6:d1:09:18: 31:57:e1:5b:1d:3e:29:e2:e4:55:9f:0a:ab:f2:72:6b:fe:be: 8c:73:d4:d2:f0:00:b7:86:f7:35:05:3e:d2:b6:f0:67:72:0b: 80:c7:15:1c:ab:d8:ae:5b:01:33:eb:ad:ae:08:ae:14:cd:b6: c1:07:77:82:88:b5:24:45:1a:d8:53:e6:51:fd:06:da:32:48: 9f:0f:b7:dd:16:85:ba:33:bb:2f:16:ab:81:68:90:ac:24:5e: fa:b8:9e:dc:68:c1:f2:50:dd:af:b6:eb:bf:53:0d:d0:1c:b2: a2:69:e2:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNQvM7GSbC7SouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODYyOTRiNmYtOTk1Ny00MWMyLThiNTMtMjk4NTAxMzZlYTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSp4vaf6QYYUfAASago5BtqfGNJ6Z2CWUeRe 6Jxfh3lCHD5bThPRJq9Di1YZxwuH0vtWntU54hH4cgc56QFldmLGRY/fubkamZww ETztfdY/MUK+lhbp/D6xXzaRAAEqvTDRA11AcpwJdC7HARrxYFTVXUz7kbnJ3tjW n+Jcn40jUg1FSIsXHV8igQrtA5dL7F+oXxUbmEUVPK6QYbr/h2M5G4x9HNkOMxet uwb3G9C7UqrJG6N2mp/PBfasj5Tymhpn9yrZZDQHdBOaeo51gWpAujzP6uRJbKBe W77qloVKufi9tXIeLo1ZyI1f8R28MTNJsx95xCkkk22Rf+MYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDCLDzGfYvFFS3D8OR9u73KdeGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTJhZmI5ZjEtZTY1My0z ODQwLWFhOGMtYTZiNmM2MzU4NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTBCPUSlokjSSvaM173kZXPEqOpfqsQqnZGpKszLblx+QIEliJutyEB VdcwveB/EQXyFmcU6hlkZg+tDbH7QiEGjsP8vCg8cbt0KLD4t4O6Cz1Kfbi/XDDw mbiX60gm3F/Pr38g+XLN7JXxW2ZF4zLdmup7rsl3WxVyVLWH/gxlnyuU+/Ntabav JmA0ttEJGDFX4VsdPini5FWfCqvycmv+voxz1NLwALeG9zUFPtK28GdyC4DHFRyr 2K5bATPrra4IrhTNtsEHd4KItSRFGthT5lH9BtoySJ8Pt90Whbozuy8Wq4FokKwk Xvq4ntxowfJQ3a+2679TDdAcsqJp4ik= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:11 2025 by rpki-client