$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/236d1969-557e-3fc1-b717-f94f1cb2c04a.roa File: 236d1969-557e-3fc1-b717-f94f1cb2c04a.roa (raw, json) Hash identifier: kFosZzm4vERdk6ALoWb+qxk7AFUk1/9v5ZQZtomHuXY= Subject key identifier: 3C:97:A2:A7:89:DC:83:67:25:03:31:5D:D6:6A:7F:42:F5:DF:86:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F554E58DD56011B070D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/236d1969-557e-3fc1-b717-f94f1cb2c04a.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:55:4e:58:dd:56:01:1b:07:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=5fac0317-1aee-4d56-acdb-e7b7b374466c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:dc:26:9c:8d:38:93:f2:21:37:b3:cb:36: 8a:79:cc:b6:d3:90:f1:b0:dc:95:ba:64:22:42:06: 54:21:c7:34:5d:67:ff:c9:e3:9a:3b:1b:21:d6:3a: 11:9b:58:81:d8:fa:f0:09:32:12:ac:a0:90:ac:a9: ea:2e:d3:c8:23:2a:fc:dd:65:db:3d:5e:06:43:66: 88:94:a2:d4:4f:75:89:0a:32:96:b6:67:02:03:02: a9:8b:5e:94:7a:3b:04:9e:55:43:56:b2:37:9c:93: 42:6d:14:e1:06:97:9a:60:bf:2b:93:87:9a:be:0c: ed:e0:35:7e:38:28:37:30:fb:67:ea:58:1b:b4:28: ab:06:cd:1b:ce:ae:84:35:22:71:74:0d:54:de:76: da:b9:62:aa:7b:f4:2f:c8:e6:c4:33:9c:83:2d:da: 04:e6:41:1b:d0:a9:fe:95:53:b9:a2:cb:e8:64:cd: 3b:aa:9e:3b:2b:02:0d:e3:d7:ed:d3:8b:0a:26:02: a2:58:19:e4:72:e7:13:05:cd:0f:9e:20:59:8c:0d: 6d:63:99:70:95:35:b9:f8:4a:c9:6e:12:8f:4b:6b: 5d:22:17:97:e1:b8:e1:02:d7:e1:0c:58:e3:40:aa: 7f:8a:f4:10:fe:ca:43:dd:d7:ca:e9:6d:29:26:78: e4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:A2:A7:89:DC:83:67:25:03:31:5D:D6:6A:7F:42:F5:DF:86:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/236d1969-557e-3fc1-b717-f94f1cb2c04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:c9:cc:64:1c:76:0e:68:54:2b:53:67:68:f1:30:8c:8c:28: 38:cc:da:ac:07:f1:7b:b6:dd:1c:8f:3a:f3:b1:04:fc:d7:17: 9d:f2:78:3c:fb:65:75:a3:38:62:27:81:55:26:1d:42:5b:89: d6:af:31:a7:c6:9e:58:4c:49:5d:1c:a7:49:77:0a:b3:75:80: 35:98:bb:4a:cc:32:95:21:71:05:a3:79:75:dc:56:7a:33:9e: 12:32:ff:42:c8:fc:bd:17:78:57:16:02:16:fd:a4:6f:4d:cc: b4:99:93:3a:20:80:28:4c:99:bb:0a:75:54:42:20:5d:66:91: 15:fb:20:52:f2:6c:a0:89:97:0a:ca:fc:51:a5:d7:77:41:0a: 59:57:cb:a0:98:f8:ae:29:1c:6c:35:47:ee:84:1e:8e:3f:87: f3:a2:28:7e:82:e3:06:05:33:d7:48:a0:56:56:af:ef:a2:9e: e5:a0:fe:db:18:b8:ae:52:41:91:e0:45:40:82:86:8f:f5:c3: db:2c:08:8a:ac:23:35:21:55:80:7e:96:b4:f5:90:04:e4:9f: 15:ac:4b:83:b0:02:49:24:47:28:4a:0c:e3:91:8e:7e:2c:3e: cd:cb:30:d2:6e:96:30:00:93:d7:37:c9:c0:02:e4:a0:cd:24: 40:26:f9:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1VOWN1WARsHDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NWZhYzAzMTctMWFlZS00ZDU2LWFjZGItZTdiN2IzNzQ0NjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn/cJpyNOJPyITezyzaKecy205DxsNyVumQi QgZUIcc0XWf/yeOaOxsh1joRm1iB2PrwCTISrKCQrKnqLtPIIyr83WXbPV4GQ2aI lKLUT3WJCjKWtmcCAwKpi16UejsEnlVDVrI3nJNCbRThBpeaYL8rk4eavgzt4DV+ OCg3MPtn6lgbtCirBs0bzq6ENSJxdA1U3nbauWKqe/QvyObEM5yDLdoE5kEb0Kn+ lVO5osvoZM07qp47KwIN49ft04sKJgKiWBnkcucTBc0PniBZjA1tY5lwlTW5+ErJ bhKPS2tdIheX4bjhAtfhDFjjQKp/ivQQ/spD3dfK6W0pJnjkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyXoqeJ3INnJQMxXdZqf0L134Z3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjM2ZDE5NjktNTU3ZS0z ZmMxLWI3MTctZjk0ZjFjYjJjMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3JzGQcdg5oVCtTZ2jxMIyMKDjM2qwH8Xu23RyPOvOxBPzXF53yeDz7 ZXWjOGIngVUmHUJbidavMafGnlhMSV0cp0l3CrN1gDWYu0rMMpUhcQWjeXXcVnoz nhIy/0LI/L0XeFcWAhb9pG9NzLSZkzoggChMmbsKdVRCIF1mkRX7IFLybKCJlwrK /FGl13dBCllXy6CY+K4pHGw1R+6EHo4/h/OiKH6C4wYFM9dIoFZWr++inuWg/tsY uK5SQZHgRUCCho/1w9ssCIqsIzUhVYB+lrT1kATknxWsS4OwAkkkRyhKDOORjn4s Ps3LMNJuljAAk9c3ycAC5KDNJEAm+TU= -----END CERTIFICATE-----Generated at Mon Apr 28 07:54:21 2025 by rpki-client