$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa File: 13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa (raw, json) Hash identifier: NdN+FPBP49V2IB5d3St9VgNE+ynwuqU5IuRnVfLnJeE= Subject key identifier: 68:0A:6C:50:CA:D0:F3:77:E9:11:56:4B:9E:38:64:A2:77:9A:91:B7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0B64C69713A9C4FCB440 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0b:64:c6:97:13:a9:c4:fc:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=8f8a56ae-d75c-40f9-bdde-b204f042c87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:14:8d:0e:d2:9a:49:c1:26:66:4d:14:4c:c2: dc:5c:f4:48:f6:72:4e:48:03:01:e3:51:6b:6d:57: fd:a0:88:13:e7:0e:6b:69:73:a4:11:c8:14:41:1c: 8d:5d:bb:e8:9b:01:a0:5e:fd:18:ce:97:bf:d4:c2: 22:8d:2e:aa:a3:80:b3:9a:5d:ae:a9:68:12:55:b1: d1:3f:8e:4b:47:fe:a1:9f:ae:b0:73:f3:85:51:5f: 0f:14:e3:e7:b0:05:01:5c:71:0b:bf:3a:de:70:b4: 8d:90:c4:59:b0:04:2f:62:69:15:32:d9:c5:34:3a: 0c:6e:30:69:ae:77:02:ec:6d:f7:04:eb:65:bf:43: 58:d5:08:02:66:40:58:35:ec:85:07:de:79:01:b0: c5:5d:9a:a7:e3:53:06:e1:db:45:4f:14:0f:c6:c2: b2:b8:0f:a6:65:27:3b:42:38:8d:dd:ec:d2:59:d9: 19:19:81:20:18:2f:6c:a7:73:1b:0d:cb:6b:08:04: 71:b7:5f:d4:f0:19:e0:37:3f:05:8f:42:2c:31:d5: 40:d1:39:0b:c2:fd:47:84:e4:31:a9:86:0c:27:24: 98:5f:56:11:cb:1f:c8:89:ec:3d:25:8b:35:70:15: 04:6e:31:a7:19:1f:ef:9a:0a:43:65:9f:22:bb:88: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:6C:50:CA:D0:F3:77:E9:11:56:4B:9E:38:64:A2:77:9A:91:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:07:ea:5c:1f:98:a8:e8:89:4f:f2:b9:45:24:48:ac:bc:0e: 4b:33:ab:80:79:11:39:6a:23:f3:9d:8a:e9:18:e8:a5:72:44: 0c:86:2a:4e:95:71:8b:45:6f:f9:62:06:68:db:ca:d5:07:82: ed:ba:ae:e5:89:48:cb:69:70:c6:92:af:d0:a7:fc:bc:1a:62: db:00:87:74:9f:9d:1d:fc:0a:4c:77:3a:81:03:76:d9:b2:79: ec:e1:d5:71:ab:b8:3d:88:43:c9:08:6d:c7:30:bc:68:92:16: 5c:b4:df:e6:b9:ae:56:16:15:f7:6a:1d:94:55:15:7a:53:f1: db:c3:75:34:0b:25:ee:33:b9:dd:90:6a:64:0e:69:55:b3:12: fd:b0:71:2a:87:3a:2a:e0:df:6f:49:37:87:35:fe:ff:49:49: ab:a3:fb:11:09:51:6e:f9:16:70:89:80:b6:95:46:6d:90:d3: 50:36:20:5d:ef:e7:ad:01:94:fd:6e:6a:16:bb:f5:c1:77:ac: 89:61:64:79:1d:de:5a:71:d1:05:4a:f1:12:71:df:ff:b1:1a: be:22:e2:95:5c:7f:a0:cd:b8:bc:81:29:0b:c5:70:c1:57:f1: 76:67:9d:48:b3:63:12:34:21:d4:60:7c:00:35:c9:3d:ba:30: 49:11:80:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gtkxpcTqcT8tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk OGY4YTU2YWUtZDc1Yy00MGY5LWJkZGUtYjIwNGYwNDJjODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBSNDtKaScEmZk0UTMLcXPRI9nJOSAMB41Fr bVf9oIgT5w5raXOkEcgUQRyNXbvomwGgXv0Yzpe/1MIijS6qo4Czml2uqWgSVbHR P45LR/6hn66wc/OFUV8PFOPnsAUBXHELvzrecLSNkMRZsAQvYmkVMtnFNDoMbjBp rncC7G33BOtlv0NY1QgCZkBYNeyFB955AbDFXZqn41MG4dtFTxQPxsKyuA+mZSc7 QjiN3ezSWdkZGYEgGC9sp3MbDctrCARxt1/U8BngNz8Fj0IsMdVA0TkLwv1HhOQx qYYMJySYX1YRyx/Iiew9JYs1cBUEbjGnGR/vmgpDZZ8iu4iuyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgKbFDK0PN36RFWS544ZKJ3mpG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTNlZDBkNzUtN2Q4NS0z ZjdjLWFmZTAtMTIxYWQ2ZDkzZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAH6lwfmKjoiU/yuUUkSKy8Dkszq4B5ETlqI/OdiukY6KVyRAyGKk6V cYtFb/liBmjbytUHgu26ruWJSMtpcMaSr9Cn/LwaYtsAh3SfnR38Ckx3OoEDdtmy eezh1XGruD2IQ8kIbccwvGiSFly03+a5rlYWFfdqHZRVFXpT8dvDdTQLJe4zud2Q amQOaVWzEv2wcSqHOirg329JN4c1/v9JSauj+xEJUW75FnCJgLaVRm2Q01A2IF3v 560BlP1uaha79cF3rIlhZHkd3lpx0QVK8RJx3/+xGr4i4pVcf6DNuLyBKQvFcMFX 8XZnnUizYxI0IdRgfAA1yT26MEkRgNA= -----END CERTIFICATE-----Generated at Mon Apr 28 09:27:06 2025 by rpki-client