$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/235b1200-9c06-3e37-b881-a58a06c4c329.roa File: 235b1200-9c06-3e37-b881-a58a06c4c329.roa (raw, json) Hash identifier: 4CYe2Dv6v/AGkxIT5kA++oJjzr9th8MeQ468n07QO80= Subject key identifier: DC:13:44:D2:5E:9A:8D:62:48:78:3B:58:65:35:AB:13:97:47:3D:C0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D9A326C63193A6D87480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/235b1200-9c06-3e37-b881-a58a06c4c329.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d9:a3:26:c6:31:93:a6:d8:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4e20724a-df93-4c53-a792-1df89f761b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:bb:54:3f:d4:4d:90:36:73:4a:a5:b2:34: e6:3e:7b:18:6d:bf:95:07:df:5c:85:ee:39:42:6c: 43:db:07:4d:ec:a0:4d:66:07:fa:69:4d:0c:1e:14: df:5d:60:7a:28:81:1f:34:08:99:0e:8c:ac:f4:c7: f8:85:af:3c:3e:7d:8a:69:31:74:a4:19:03:ce:ec: 9d:88:d4:11:96:c0:ab:57:b3:f4:97:67:58:cc:47: c7:c1:d9:a4:69:88:1b:62:be:ed:c4:c9:71:ba:a7: d1:9e:ba:35:20:5c:50:74:82:75:89:5b:63:87:b9: 8e:25:8e:84:30:78:a5:8b:c1:6b:33:73:36:db:d7: 92:14:2e:f2:f9:94:0a:52:18:d9:0a:d2:42:a8:f7: 2c:20:db:f0:56:04:5e:64:a7:e3:79:a1:17:2d:ac: 4c:be:f8:b7:2a:82:46:47:0f:9e:7a:43:35:fe:2a: ad:05:63:fb:e6:83:76:78:af:95:c0:87:c1:f8:22: c0:ce:07:f7:38:ac:93:f3:14:c2:c6:ab:3f:92:6f: 85:d3:61:4e:a1:ec:ba:60:77:cd:5e:44:89:36:63: 1f:6d:ad:b8:47:ba:bc:24:99:0a:e6:6d:4d:74:9f: 68:58:01:52:53:29:a0:aa:3a:b5:b3:f7:d7:9f:1c: 20:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:44:D2:5E:9A:8D:62:48:78:3B:58:65:35:AB:13:97:47:3D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/235b1200-9c06-3e37-b881-a58a06c4c329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:19:59:f3:fc:7a:a2:29:93:a8:ba:76:70:93:55:a8:4f:9f: f3:d5:6e:20:9b:07:09:54:c4:0e:14:e7:6d:da:5f:c2:6d:a1: bc:96:0a:a8:95:16:5b:7b:13:52:d1:11:d2:2d:b9:0b:b4:6e: 00:1a:c8:3a:a1:4c:de:50:1a:34:b9:ee:a6:f5:3d:ce:d1:a7: 59:a0:21:7c:45:4b:9e:40:71:9d:b8:ac:da:ed:8c:08:36:05: 74:0e:88:b5:b5:33:8c:b4:80:4a:15:33:3d:27:47:1c:a6:b3: 5c:21:4f:40:92:d3:39:24:f9:2b:1e:e8:cc:8d:cb:21:cc:a9: 41:43:8a:cc:08:1f:37:c1:e4:3d:a3:7a:0e:22:6c:09:7f:bf: 02:ea:b8:e3:4f:bf:c0:a0:df:3a:8b:48:51:3b:70:70:16:33: 44:7c:de:1d:e0:08:f9:77:c2:2d:da:01:2f:bc:0b:f6:b2:5a: 09:3d:9d:20:b5:40:a7:e6:80:05:b4:65:b2:47:6e:60:73:42: e6:60:cd:28:c8:8f:a2:c6:a5:2b:d4:13:5b:0f:e5:ea:f5:de: 06:5c:2f:ed:3b:75:80:c5:4f:d3:a5:10:cd:20:6d:02:13:d0: 05:ea:03:23:1a:5e:29:9b:bc:20:20:aa:b9:fe:e4:f9:2f:8f: e6:63:05:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNmjJsYxk6bYdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NGUyMDcyNGEtZGY5My00YzUzLWE3OTItMWRmODlmNzYxYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss27VD/UTZA2c0qlsjTmPnsYbb+VB99che45 QmxD2wdN7KBNZgf6aU0MHhTfXWB6KIEfNAiZDoys9Mf4ha88Pn2KaTF0pBkDzuyd iNQRlsCrV7P0l2dYzEfHwdmkaYgbYr7txMlxuqfRnro1IFxQdIJ1iVtjh7mOJY6E MHili8FrM3M229eSFC7y+ZQKUhjZCtJCqPcsINvwVgReZKfjeaEXLaxMvvi3KoJG Rw+eekM1/iqtBWP75oN2eK+VwIfB+CLAzgf3OKyT8xTCxqs/km+F02FOoey6YHfN XkSJNmMfba24R7q8JJkK5m1NdJ9oWAFSUymgqjq1s/fXnxwgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwTRNJemo1iSHg7WGU1qxOXRz3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjM1YjEyMDAtOWMwNi0z ZTM3LWI4ODEtYTU4YTA2YzRjMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUZWfP8eqIpk6i6dnCTVahPn/PVbiCbBwlUxA4U523aX8JtobyWCqiV Flt7E1LREdItuQu0bgAayDqhTN5QGjS57qb1Pc7Rp1mgIXxFS55AcZ24rNrtjAg2 BXQOiLW1M4y0gEoVMz0nRxyms1whT0CS0zkk+Sse6MyNyyHMqUFDiswIHzfB5D2j eg4ibAl/vwLquONPv8Cg3zqLSFE7cHAWM0R83h3gCPl3wi3aAS+8C/ayWgk9nSC1 QKfmgAW0ZbJHbmBzQuZgzSjIj6LGpSvUE1sP5er13gZcL+07dYDFT9OlEM0gbQIT 0AXqAyMaXimbvCAgqrn+5Pkvj+ZjBRs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:01 2025 by rpki-client