$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa File: 13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa (raw, json) Hash identifier: 1eiENUgpHwrk7LOQzt2klmGvztm8pvEOmlbJ0mfZsvM= Subject key identifier: 23:2B:F1:B8:03:C6:44:48:3E:A3:0F:04:4F:4E:1C:67:0E:77:06:FB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0A200F653C166599E7C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0a:20:0f:65:3c:16:65:99:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=a13bf06b-a246-47e4-b5a2-5892f22e69a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:84:a3:d4:75:b8:e3:8a:c9:2b:5f:7d:23: 5b:97:ce:8a:35:47:2e:b7:25:84:09:2c:b3:9a:91: 49:d5:17:0d:17:35:8d:15:63:63:fe:9e:54:27:51: c9:26:f5:b5:7f:2b:45:22:70:6b:fd:05:dc:7c:11: bf:fb:39:67:17:59:8a:bc:82:2b:7b:14:cf:77:4a: b6:df:12:c0:b1:d0:24:be:cf:22:05:df:69:8e:ac: 66:bb:2c:1f:df:54:8e:ca:17:d5:d4:45:01:12:9a: 8d:b1:8a:1f:93:df:34:31:1b:25:78:00:1a:f9:cf: c6:ad:b2:89:3f:26:fe:f8:a3:ff:39:fc:15:c7:e3: b2:0c:d3:2d:01:7e:9b:cb:58:3d:5d:4c:30:ea:3b: ef:75:e0:dc:4d:38:66:17:3b:cc:65:5f:e3:ac:04: fd:b0:63:b1:d3:6b:69:d5:96:37:40:bd:a1:df:11: 56:f5:0d:02:34:54:21:9f:cc:71:59:aa:de:af:34: ef:33:19:38:73:31:2b:06:9c:ee:db:1d:76:e9:98: c9:95:d1:b9:18:f0:03:ac:54:fc:df:fd:dd:60:2e: 0b:2e:55:76:20:e9:30:a0:74:f6:79:3f:c3:fd:f1: 13:eb:88:96:12:0c:e0:2c:7f:da:a5:fe:49:69:e3: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:F1:B8:03:C6:44:48:3E:A3:0F:04:4F:4E:1C:67:0E:77:06:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e4:ee:e2:6c:c3:83:71:18:26:88:f6:9d:fb:c2:df:98:f5: ce:27:fe:de:10:08:e9:b1:58:93:d6:d8:14:3b:39:04:54:07: 32:4b:85:e2:0a:c7:70:a2:d4:e4:31:71:2d:bb:c5:5e:2f:7a: a6:23:95:27:62:e5:02:76:7a:56:e0:2e:76:9a:74:69:af:e8: 07:db:c0:22:9d:64:93:27:ed:03:3a:c9:11:d2:bd:ef:9d:d7: cb:3f:38:75:39:2d:d3:2b:2c:b7:96:a4:c7:9d:a7:fd:eb:de: 44:fa:82:d4:12:06:e2:8a:19:e9:9e:63:af:fd:78:83:ed:86: c4:1d:da:c9:00:01:44:f1:d3:10:b8:45:95:3e:57:0f:31:9d: d1:7d:ed:01:ca:f9:93:28:64:31:dd:74:12:f1:15:a1:7a:5a: e6:d1:80:3e:e0:d9:6f:87:7e:e1:d4:6e:2f:b5:7a:b1:c7:de: 85:5d:e0:41:cb:83:ed:42:5a:5a:f3:85:c5:a4:cb:65:4a:6e: 50:67:d6:51:bb:56:5a:3e:0e:9e:77:1d:4b:3a:6e:cd:52:f2: 53:4c:06:71:54:b1:be:b2:74:50:ae:23:a2:c0:3f:77:fc:46: 87:6b:e5:ea:57:28:b2:e2:bb:a4:13:97:f5:75:b0:c6:f5:66: 03:51:51:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gogD2U8FmWZ58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YTEzYmYwNmItYTI0Ni00N2U0LWI1YTItNTg5MmYyMmU2OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUSEo9R1uOOKyStffSNbl86KNUcutyWECSyz mpFJ1RcNFzWNFWNj/p5UJ1HJJvW1fytFInBr/QXcfBG/+zlnF1mKvIIrexTPd0q2 3xLAsdAkvs8iBd9pjqxmuywf31SOyhfV1EUBEpqNsYofk980MRsleAAa+c/GrbKJ Pyb++KP/OfwVx+OyDNMtAX6by1g9XUww6jvvdeDcTThmFzvMZV/jrAT9sGOx02tp 1ZY3QL2h3xFW9Q0CNFQhn8xxWarerzTvMxk4czErBpzu2x126ZjJldG5GPADrFT8 3/3dYC4LLlV2IOkwoHT2eT/D/fET64iWEgzgLH/apf5JaeMy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMr8bgDxkRIPqMPBE9OHGcOdwb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTM0Mjk3MzktNWRlMS0z NjM4LWE3ZTQtY2U0ZGNiMTdmMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTk7uJsw4NxGCaI9p37wt+Y9c4n/t4QCOmxWJPW2BQ7OQRUBzJLheIK x3Ci1OQxcS27xV4veqYjlSdi5QJ2elbgLnaadGmv6AfbwCKdZJMn7QM6yRHSve+d 18s/OHU5LdMrLLeWpMedp/3r3kT6gtQSBuKKGemeY6/9eIPthsQd2skAAUTx0xC4 RZU+Vw8xndF97QHK+ZMoZDHddBLxFaF6WubRgD7g2W+HfuHUbi+1erHH3oVd4EHL g+1CWlrzhcWky2VKblBn1lG7Vlo+Dp53HUs6bs1S8lNMBnFUsb6ydFCuI6LAP3f8 Rodr5epXKLLiu6QTl/V1sMb1ZgNRURo= -----END CERTIFICATE-----Generated at Sun Apr 27 21:29:28 2025 by rpki-client