$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa File: 1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa (raw, json) Hash identifier: JBYzJz/bbTbqzAtkVj1f0qK11EishD5W/HUkq5YmP1s= Subject key identifier: 98:95:D4:2E:FD:7F:2F:39:0D:C9:33:92:A8:E0:DE:65:C3:E2:47:2F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F7C26F54616BE1D0A480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f7:c2:6f:54:61:6b:e1:d0:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=792c6f31-6eb2-4258-8f9e-ed02e20ed4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:f4:c4:47:46:61:d8:2e:c8:3a:d1:99:56: a4:77:d5:0d:00:62:2b:c4:34:4c:7a:30:4f:88:8c: 8b:5a:71:ce:ac:f9:88:33:3b:b4:f7:31:18:8c:1c: 27:80:8d:16:d7:5c:09:a3:b1:d8:e1:40:ef:6f:af: de:68:ad:3a:f1:b5:76:85:85:d5:70:00:26:76:08: 69:31:74:3c:93:2c:d7:d2:04:7f:da:4d:f1:89:80: c5:1a:0f:8c:a4:aa:e0:19:a1:7f:43:9d:02:75:11: b0:01:d1:01:21:11:5d:10:30:53:94:de:48:c3:88: 30:69:1b:2c:52:df:c5:9e:b3:77:8b:4a:76:4c:c9: 8b:54:c9:33:ce:40:19:5a:cb:30:83:c9:f3:b0:1b: 0a:81:52:a5:6c:f3:52:25:7d:5c:4c:6d:b3:59:7a: 4e:84:43:8a:28:ad:0d:4c:0c:08:8e:95:d1:cc:94: 71:a5:b4:b6:5f:72:14:f2:6a:6f:81:e6:f1:dd:f7: 72:e1:96:90:60:8a:de:f6:fd:9f:9f:e8:f6:96:7b: 16:55:5e:ce:bc:a3:40:62:c2:26:8f:08:64:24:85: 9f:85:a8:cd:54:40:56:7a:34:5d:59:fe:d5:5b:53: aa:79:47:7e:18:56:54:b2:db:66:e6:a8:e6:7f:37: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:95:D4:2E:FD:7F:2F:39:0D:C9:33:92:A8:E0:DE:65:C3:E2:47:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:29:a4:4c:7b:fe:d7:fe:49:45:b2:43:9c:70:b8:a1:cf:1f: 5b:14:dd:ac:b4:4a:0c:55:77:03:cd:35:9b:83:c2:fa:c7:a8: ed:fa:e9:da:dd:a1:95:4a:78:8a:98:ac:dc:d4:90:f7:1d:f8: af:34:56:d8:1c:72:d9:5c:59:52:f3:4f:6a:b5:2a:21:95:1e: 99:d1:bb:e3:c6:bb:44:61:63:40:41:f8:eb:0d:1d:c6:01:f5: 0a:30:87:fa:b5:75:9c:7a:fd:2e:91:99:f8:13:b5:c2:90:ed: 45:a3:fb:84:79:ba:58:2b:b4:eb:64:95:59:4b:21:d5:b8:3e: 35:6a:d5:ed:71:8e:c9:6f:f2:4c:8d:43:66:a4:31:ab:f1:c4: b8:93:c0:98:19:31:b3:6e:f8:6f:2d:c8:20:94:7f:1f:e6:d0: 65:cf:aa:cf:7b:6a:1b:ba:55:01:5f:ce:f5:62:61:69:c5:05: 56:a4:6c:27:0f:c3:f1:3b:eb:70:27:c9:33:db:ce:6e:15:47: 66:88:77:42:5a:fa:1f:8c:dc:6c:e6:f1:5e:28:d9:fc:7c:5b: c0:29:88:fe:f8:94:b1:d1:fb:66:de:e1:22:9a:84:d3:c8:36: 13:5b:0c:9e:42:57:8b:cb:ca:9c:65:d3:f7:18:7e:8c:46:f7: 89:37:1f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+ffCb1Rha+HQpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NzkyYzZmMzEtNmViMi00MjU4LThmOWUtZWQwMmUyMGVkNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj070xEdGYdguyDrRmVakd9UNAGIrxDRMejBP iIyLWnHOrPmIMzu09zEYjBwngI0W11wJo7HY4UDvb6/eaK068bV2hYXVcAAmdghp MXQ8kyzX0gR/2k3xiYDFGg+MpKrgGaF/Q50CdRGwAdEBIRFdEDBTlN5Iw4gwaRss Ut/FnrN3i0p2TMmLVMkzzkAZWsswg8nzsBsKgVKlbPNSJX1cTG2zWXpOhEOKKK0N TAwIjpXRzJRxpbS2X3IU8mpvgebx3fdy4ZaQYIre9v2fn+j2lnsWVV7OvKNAYsIm jwhkJIWfhajNVEBWejRdWf7VW1OqeUd+GFZUsttm5qjmfzch/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiV1C79fy85Dckzkqjg3mXD4kcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTUwOGY3OGQtNmVlMC0z YmJmLWI3ZGItNmY1ZTRmNDFkOTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkppEx7/tf+SUWyQ5xwuKHPH1sU3ay0SgxVdwPNNZuDwvrHqO366drd oZVKeIqYrNzUkPcd+K80VtgcctlcWVLzT2q1KiGVHpnRu+PGu0RhY0BB+OsNHcYB 9Qowh/q1dZx6/S6RmfgTtcKQ7UWj+4R5ulgrtOtklVlLIdW4PjVq1e1xjslv8kyN Q2akMavxxLiTwJgZMbNu+G8tyCCUfx/m0GXPqs97ahu6VQFfzvViYWnFBVakbCcP w/E763AnyTPbzm4VR2aId0Ja+h+M3Gzm8V4o2fx8W8ApiP74lLHR+2be4SKahNPI NhNbDJ5CV4vLypxl0/cYfoxG94k3H8Q= -----END CERTIFICATE-----Generated at Sun Apr 27 22:23:21 2025 by rpki-client