$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa File: 22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa (raw, json) Hash identifier: WcAw5ogsF8MrZxuDTFFEHWWP4MePog7CIP6UfwO9QQw= Subject key identifier: A0:A5:EA:3B:E7:99:C0:A6:56:3D:46:14:BD:3A:F1:04:06:EE:05:20 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EA09A05294F707A73C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ea:09:a0:52:94:f7:07:a7:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=3a066fa8-afb3-4a3b-869e-b36aec9a3969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:5b:5e:06:00:49:61:ac:ec:8a:58:3c:03: 69:48:99:90:ab:81:80:30:06:a6:9b:8c:4b:67:c0: e1:c2:3a:7b:f1:4a:3b:88:7d:11:e3:99:50:ab:b4: ae:fe:8d:31:33:32:8b:c6:fa:70:7d:3f:b7:f2:6a: 3d:bb:ad:54:c1:94:84:05:8e:10:fb:97:ff:66:ab: a5:9b:c7:bd:7b:44:31:f1:3e:a4:65:cf:13:87:36: 85:8b:3d:ea:4a:b2:11:7b:c7:d7:64:24:0f:1c:ac: 10:18:ab:6a:97:e0:8e:6b:91:9b:83:89:1b:5f:08: 4a:42:81:83:5e:df:16:3f:bd:ab:88:b7:c4:44:06: 47:cc:91:0a:db:3f:39:55:65:2a:f4:36:0f:f5:6d: 41:58:4d:6c:72:0e:49:2d:80:ba:18:8c:8a:5f:b0: a1:1b:eb:a3:85:84:4f:38:53:09:d0:b8:75:72:02: a2:0b:ca:db:08:00:c5:c8:ae:bc:8d:bd:86:76:cc: d0:0d:4b:85:a3:ec:26:b6:49:1e:74:99:2c:fd:78: b7:26:7a:a1:0c:38:4e:9b:29:a9:2d:11:b8:b1:7d: 7d:09:4b:e7:4e:86:c7:14:a5:0c:1e:53:f7:86:b8: 6f:14:07:db:8e:bd:70:fe:c7:45:8f:09:52:89:93: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:EA:3B:E7:99:C0:A6:56:3D:46:14:BD:3A:F1:04:06:EE:05:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22f7aca0-8f90-387c-92cb-1c51a9d9ea6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ad:c4:31:2d:cd:93:72:c0:c9:4a:16:31:20:c4:6c:6c:5a: 6b:50:03:6d:42:8b:be:6a:bd:5b:d5:65:1e:56:4f:4c:8d:ec: bb:e4:c6:d3:4c:b4:1f:28:7d:b6:af:4d:04:a5:44:ec:62:d1: 37:68:2d:d5:d1:0c:2a:b7:e4:f1:93:0b:c3:16:35:a2:5b:d4: 40:29:c6:e0:d4:52:8e:dc:ca:21:c8:2f:61:c4:a5:77:59:12: ba:dc:76:17:1f:10:84:25:3d:79:68:07:6c:17:6a:59:04:70: c5:bc:72:c5:fa:b8:4c:da:48:8e:9c:2f:fd:f0:b3:61:22:f6: c9:7d:e4:3b:17:ef:b4:7f:a3:fc:15:5c:f8:fe:de:d9:2d:e8: 8f:1f:3c:bf:ff:bb:ab:ac:61:fc:82:e6:84:e0:bc:15:6d:e3: 74:fb:c2:d8:e1:a9:de:6c:10:2e:3c:58:c8:5e:76:78:95:94: 58:49:47:ba:24:42:ce:99:d8:e8:39:08:b0:8c:d8:e7:e3:1f: 1a:f3:35:0e:51:0a:78:c8:f9:e6:b8:de:01:1f:a3:61:0e:4d: e5:7c:fe:a8:dc:1a:ec:f5:06:69:00:c6:6a:24:40:5e:06:04: 37:22:54:0e:7a:68:26:ed:ee:da:ce:8d:2b:d5:85:1c:8d:80: 80:e9:4a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eoJoFKU9wenPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk M2EwNjZmYTgtYWZiMy00YTNiLTg2OWUtYjM2YWVjOWEzOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFhbXgYASWGs7IpYPANpSJmQq4GAMAamm4xL Z8Dhwjp78Uo7iH0R45lQq7Su/o0xMzKLxvpwfT+38mo9u61UwZSEBY4Q+5f/Zqul m8e9e0Qx8T6kZc8ThzaFiz3qSrIRe8fXZCQPHKwQGKtql+COa5Gbg4kbXwhKQoGD Xt8WP72riLfERAZHzJEK2z85VWUq9DYP9W1BWE1scg5JLYC6GIyKX7ChG+ujhYRP OFMJ0Lh1cgKiC8rbCADFyK68jb2GdszQDUuFo+wmtkkedJks/Xi3JnqhDDhOmymp LRG4sX19CUvnTobHFKUMHlP3hrhvFAfbjr1w/sdFjwlSiZNdOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCl6jvnmcCmVj1GFL068QQG7gUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjJmN2FjYTAtOGY5MC0z ODdjLTkyY2ItMWM1MWE5ZDllYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHytxDEtzZNywMlKFjEgxGxsWmtQA21Ci75qvVvVZR5WT0yN7LvkxtNM tB8ofbavTQSlROxi0TdoLdXRDCq35PGTC8MWNaJb1EApxuDUUo7cyiHIL2HEpXdZ ErrcdhcfEIQlPXloB2wXalkEcMW8csX6uEzaSI6cL/3ws2Ei9sl95DsX77R/o/wV XPj+3tkt6I8fPL//u6usYfyC5oTgvBVt43T7wtjhqd5sEC48WMhedniVlFhJR7ok Qs6Z2Og5CLCM2OfjHxrzNQ5RCnjI+ea43gEfo2EOTeV8/qjcGuz1BmkAxmokQF4G BDciVA56aCbt7trOjSvVhRyNgIDpSgs= -----END CERTIFICATE-----Generated at Tue Apr 29 20:25:39 2025 by rpki-client