$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa File: 1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa (raw, json) Hash identifier: xHM4GBgYeXzXVpG7QUrMhxu+6aqsc3nKwNOp2A+8RP0= Subject key identifier: 1C:82:64:7D:1D:F7:AF:2D:35:DF:91:AF:81:77:D4:4D:03:47:ED:AF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F46C10015C4693D6F0C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.133.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:46:c1:00:15:c4:69:3d:6f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=95499459-7029-4e92-9d27-eab362eb98fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:2d:e3:a1:95:09:51:11:20:25:4e:96:10: 82:87:64:01:e2:f7:d0:97:ca:a4:26:b7:69:95:eb: df:fd:bc:27:42:3d:27:7d:65:87:20:72:f0:0f:51: 73:58:63:a5:e8:ff:df:89:bf:cf:8c:ea:eb:e6:90: 6d:5a:df:5e:f6:58:bf:f6:d4:2e:d0:a5:c9:8c:4d: 16:e7:cb:f1:dc:10:d3:21:be:42:99:44:96:6b:8f: df:62:53:e7:c6:e6:cc:56:2b:3e:bb:6a:aa:31:f0: 16:8a:a7:c4:06:d8:ac:7c:5c:f2:01:19:98:b2:b5: f6:59:ab:f4:80:e1:7b:f0:ad:95:13:14:e0:99:35: 17:0d:3f:28:d8:fa:25:ec:bb:f3:c4:5f:de:32:f3: 9c:b5:9b:27:8d:90:e6:e1:d5:fe:f1:dd:c7:1e:70: cc:d7:9d:f3:ef:fc:6e:16:fa:4f:41:57:60:85:1c: 55:7b:e0:29:71:3f:0d:69:ad:eb:22:48:8c:f0:e0: 46:00:5c:5d:88:28:9e:18:2a:f8:2f:24:d7:ab:8a: 28:f3:be:d6:f2:23:b4:0f:a4:f9:d9:9e:6f:ec:2e: 54:da:ee:40:6a:07:fd:09:8d:75:28:fa:2e:72:f7: 99:cb:39:92:0d:17:57:85:5c:3a:3f:73:60:9d:be: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:64:7D:1D:F7:AF:2D:35:DF:91:AF:81:77:D4:4D:03:47:ED:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a54e9e6-ca31-331d-a452-eb5ecd727c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:91:90:4a:ec:0b:8f:62:a7:01:fd:c7:93:c6:eb:34:22:2d: c6:0b:4a:0a:46:44:19:8e:3f:a4:ce:a3:c3:36:7a:5e:73:eb: ea:70:c0:88:4e:f0:38:cd:1e:fe:80:9b:e7:fc:17:b0:67:6c: 76:cb:91:55:82:2a:ea:05:95:0c:b2:3b:7a:92:18:14:0e:fe: 9c:bd:7c:38:47:3a:e5:da:d0:43:27:ab:a9:66:9c:7a:05:ac: 10:5a:bb:98:e7:a7:3d:95:72:44:31:6a:14:87:82:43:98:af: e3:16:c9:ce:db:ae:cb:22:5c:7a:d7:2e:93:69:7b:22:83:ab: 38:52:d1:c7:51:4a:78:80:ae:a9:eb:58:16:cc:30:66:ba:19: a6:78:a0:44:5c:4e:55:8e:61:ac:f4:bf:9b:dd:8a:28:85:47: 4c:39:b9:11:a8:8e:c9:1d:43:31:5b:03:88:26:18:6d:6d:fd: 1e:cd:14:68:59:44:0d:d6:53:ee:af:ed:d7:56:eb:99:51:ab: 6b:d4:aa:05:3f:cd:9f:60:d0:bd:8e:66:d7:79:78:89:8c:a6: a8:75:76:d7:86:d3:69:63:88:22:47:9e:e3:bc:e7:71:47:97: 16:10:5d:20:1b:2b:df:b5:47:1e:48:85:88:4d:6e:df:6d:d0: 2c:96:01:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0bBABXEaT1vDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk OTU0OTk0NTktNzAyOS00ZTkyLTlkMjctZWFiMzYyZWI5OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDkt46GVCVERICVOlhCCh2QB4vfQl8qkJrdp levf/bwnQj0nfWWHIHLwD1FzWGOl6P/fib/PjOrr5pBtWt9e9li/9tQu0KXJjE0W 58vx3BDTIb5CmUSWa4/fYlPnxubMVis+u2qqMfAWiqfEBtisfFzyARmYsrX2Wav0 gOF78K2VExTgmTUXDT8o2Pol7LvzxF/eMvOctZsnjZDm4dX+8d3HHnDM153z7/xu FvpPQVdghRxVe+ApcT8Naa3rIkiM8OBGAFxdiCieGCr4LyTXq4oo877W8iO0D6T5 2Z5v7C5U2u5Aagf9CY11KPoucveZyzmSDRdXhVw6P3Ngnb7FYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByCZH0d968tNd+Rr4F31E0DR+2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWE1NGU5ZTYtY2EzMS0z MzFkLWE0NTItZWI1ZWNkNzI3YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIULMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWRkErsC49ipwH9x5PG6zQiLcYLSgpGRBmOP6TOo8M2el5z6+pwwIhO 8DjNHv6Am+f8F7BnbHbLkVWCKuoFlQyyO3qSGBQO/py9fDhHOuXa0EMnq6lmnHoF rBBau5jnpz2VckQxahSHgkOYr+MWyc7brssiXHrXLpNpeyKDqzhS0cdRSniArqnr WBbMMGa6GaZ4oERcTlWOYaz0v5vdiiiFR0w5uRGojskdQzFbA4gmGG1t/R7NFGhZ RA3WU+6v7ddW65lRq2vUqgU/zZ9g0L2OZtd5eImMpqh1dteG02ljiCJHnuO853FH lxYQXSAbK9+1Rx5IhYhNbt9t0CyWAdI= -----END CERTIFICATE-----Generated at Sun Apr 27 23:57:19 2025 by rpki-client