$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1faa37a2-0917-335e-bff3-14b3115f9f6a.roa File: 1faa37a2-0917-335e-bff3-14b3115f9f6a.roa (raw, json) Hash identifier: ABO9jVrWI1PZddJHprVbjuWo9mNj8NyXAQyYvqpeW9U= Subject key identifier: 71:E2:75:89:F6:D6:4F:DF:E1:40:49:BE:3C:A7:34:AB:EA:1C:99:F3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0447D8F87ADB1D834C20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1faa37a2-0917-335e-bff3-14b3115f9f6a.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:04:47:d8:f8:7a:db:1d:83:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=ce59242c-9db4-4db0-9a43-97b20aab3380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:31:87:eb:05:02:c5:04:15:ff:c1:f0:33: ce:1a:c2:1b:65:8a:f9:9a:20:79:44:6e:43:ad:26: 86:11:58:da:8b:13:c6:b7:f2:ed:ad:96:c2:ef:57: 3c:98:9a:0f:ce:b3:2c:b0:b1:11:70:36:f0:60:91: 01:a3:df:36:d6:65:04:f7:f2:c6:e4:f9:1c:49:bb: d7:7f:bb:92:b0:ce:a1:f7:f3:92:71:01:69:07:82: 79:3f:a3:9c:9d:22:f1:50:f0:44:83:b7:0f:89:4a: 4a:48:3a:82:56:50:fa:2b:7e:83:f3:1f:cf:3b:0f: 91:de:c7:e8:98:fe:4b:65:b9:80:d8:6d:2a:9a:d0: 20:3b:6d:58:e0:40:c3:be:29:5f:65:ae:de:5f:00: 09:3b:a6:ec:0b:b5:90:65:db:2c:bb:39:24:7e:bf: 91:d6:64:1e:27:af:20:81:d8:f0:1c:36:e6:2a:75: 8c:f5:46:6e:a8:34:d7:54:84:78:34:df:c8:89:70: 09:40:be:2c:ea:ce:c7:43:de:dc:12:ed:f7:74:23: 51:11:e0:7d:7d:03:8b:9c:45:5e:7d:4c:7a:ec:99: f2:a8:df:58:62:ae:35:ce:22:a9:29:ce:5a:51:46: 49:c6:d7:0d:3b:3b:72:65:a8:08:da:5e:7c:62:ab: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E2:75:89:F6:D6:4F:DF:E1:40:49:BE:3C:A7:34:AB:EA:1C:99:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1faa37a2-0917-335e-bff3-14b3115f9f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:40:c4:bd:15:f8:d7:81:98:8d:ad:40:bd:41:25:dc:9f:2e: 60:ef:57:22:bb:0f:fd:df:97:69:01:00:f0:81:c9:c1:1b:d5: 5a:59:bd:38:5b:f5:63:c4:fc:fa:c0:15:76:63:54:8f:a4:05: 44:82:92:ff:42:db:22:d3:8c:fb:f0:11:15:2d:91:32:4f:fe: 3b:c3:8f:5b:49:2a:7f:ed:ec:7a:e6:a6:c7:a3:8a:96:c3:19: 1e:8f:57:64:33:27:81:37:e7:9f:f1:87:cd:43:a1:5e:1b:b6: 85:54:7e:32:5f:92:a8:62:52:af:c7:23:00:37:da:be:3b:f7: af:24:7f:c7:f3:ae:9f:f5:ec:88:59:bf:45:49:c0:82:69:a4: ad:04:83:20:68:34:33:7f:32:5e:3c:6d:19:93:fc:87:8f:3a: 44:2b:0c:b8:ee:e3:ed:85:4e:15:5a:bf:52:e4:ba:29:d2:f0: 41:8f:87:ff:73:00:11:6b:3d:ba:bd:5e:93:72:be:76:7b:3f: 92:04:6c:7d:84:7a:a1:8a:d0:16:1c:fd:3d:79:55:6a:aa:de: ac:27:cb:4f:7f:9c:a3:1c:54:d6:39:43:f7:2a:99:13:92:e7: a5:59:c7:18:8b:de:97:5a:2d:9e:31:85:c4:e8:be:16:c6:cd: 6a:53:cc:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gRH2Ph62x2DTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk Y2U1OTI0MmMtOWRiNC00ZGIwLTlhNDMtOTdiMjBhYWIzMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmkxh+sFAsUEFf/B8DPOGsIbZYr5miB5RG5D rSaGEVjaixPGt/LtrZbC71c8mJoPzrMssLERcDbwYJEBo9821mUE9/LG5PkcSbvX f7uSsM6h9/OScQFpB4J5P6OcnSLxUPBEg7cPiUpKSDqCVlD6K36D8x/POw+R3sfo mP5LZbmA2G0qmtAgO21Y4EDDvilfZa7eXwAJO6bsC7WQZdssuzkkfr+R1mQeJ68g gdjwHDbmKnWM9UZuqDTXVIR4NN/IiXAJQL4s6s7HQ97cEu33dCNREeB9fQOLnEVe fUx67JnyqN9YYq41ziKpKc5aUUZJxtcNOztyZagI2l58YquTSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHidYn21k/f4UBJvjynNKvqHJnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWZhYTM3YTItMDkxNy0z MzVlLWJmZjMtMTRiMzExNWY5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5AxL0V+NeBmI2tQL1BJdyfLmDvVyK7D/3fl2kBAPCBycEb1VpZvThb 9WPE/PrAFXZjVI+kBUSCkv9C2yLTjPvwERUtkTJP/jvDj1tJKn/t7HrmpsejipbD GR6PV2QzJ4E355/xh81DoV4btoVUfjJfkqhiUq/HIwA32r47968kf8fzrp/17IhZ v0VJwIJppK0EgyBoNDN/Ml48bRmT/IePOkQrDLju4+2FThVav1LkuinS8EGPh/9z ABFrPbq9XpNyvnZ7P5IEbH2EeqGK0BYc/T15VWqq3qwny09/nKMcVNY5Q/cqmROS 56VZxxiL3pdaLZ4xhcTovhbGzWpTzEE= -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:14 2025 by rpki-client