$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa File: 3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa (raw, json) Hash identifier: q1f+FcolmuupWA2XnmIo43m8Vnu76TBHjODt1yW2wEA= Subject key identifier: 6E:2A:ED:D4:77:18:D5:0C:6E:1E:33:24:65:E4:29:74:A1:1C:6D:28 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24A67E497872C28A7CE660 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a6:7e:49:78:72:c2:8a:7c:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=1d2d2e30-129e-4b18-aaed-0b5122650459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:7e:85:f1:03:d9:20:83:74:fc:2e:92:5b: bc:78:cc:98:bd:0b:d3:6c:f4:36:56:13:92:4c:dc: 0e:bf:02:bf:72:15:6a:94:15:8a:1f:ae:a2:35:cd: cd:51:14:9f:4c:88:2e:f1:8d:db:a0:cb:c7:0e:2a: 9d:ea:f0:a8:3f:74:d0:29:66:0b:41:67:12:0e:62: a3:77:05:e6:07:d6:bd:a0:7e:23:9a:0b:c5:ac:11: 20:7a:ad:3f:db:d3:0d:ad:39:3b:d7:1b:32:c3:47: ec:48:97:41:29:1a:62:da:29:21:2c:ad:90:de:fa: 21:65:34:e1:a6:e4:a9:89:7e:ae:6b:4d:e1:4b:60: 98:bc:ba:ce:49:ea:f2:27:a1:01:ed:58:f2:ea:bc: 30:86:17:e9:23:3f:50:c0:1b:23:d4:ce:f3:6f:87: 6a:19:84:6e:45:e2:5a:b7:d0:f7:04:f3:4e:ac:ab: 8f:04:b1:c3:fa:40:05:bf:db:36:48:7e:a1:83:30: ab:c5:20:b0:5d:8d:c8:5e:3d:0b:36:b9:ca:28:65: 47:10:f4:37:11:f8:fc:0b:1e:08:0e:bc:35:92:71: 6e:81:3f:a3:01:9c:31:5f:75:8e:b6:a8:55:89:12: 89:3b:34:dc:e2:e9:97:33:1d:fd:43:b8:76:14:97: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:ED:D4:77:18:D5:0C:6E:1E:33:24:65:E4:29:74:A1:1C:6D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5d:db:d1:5c:9b:e7:35:fb:91:1a:88:98:40:c1:b5:66:14: ec:10:65:38:cb:ed:c1:e2:f4:80:ab:48:6c:3d:bf:b9:32:c3: f8:b8:5f:e8:7f:bc:5c:3e:1c:73:0d:e0:f0:98:13:6a:76:11: 3f:69:c3:36:10:d0:53:bb:e9:76:9b:7a:ed:3f:7b:40:42:de: 78:59:6b:aa:3b:e8:6d:03:61:89:eb:1d:ec:7a:c8:cd:84:d0: 23:1a:ae:2f:ed:b1:39:7c:84:07:8a:72:10:a2:ed:3b:c0:2c: 4b:d1:de:d5:70:31:a0:2d:14:29:a5:a1:1d:90:0f:06:ca:eb: f6:59:e0:66:14:57:d2:51:e6:33:7a:5e:06:df:a8:77:87:10: f3:b8:fb:56:a6:a2:2d:8e:85:5a:80:ac:60:72:2a:0e:2c:6d: 05:dd:50:d7:45:b2:e9:4d:c1:ca:79:95:b5:4e:24:9f:14:d6: 45:5b:58:37:7d:db:e7:75:e0:01:99:f2:c9:dc:86:93:9e:60: 57:c4:09:b4:b0:b7:f7:15:b4:88:9e:83:d2:17:75:42:c0:58: de:7f:db:1d:bd:05:0a:0e:03:0a:70:62:ae:7d:6d:b1:56:c9: b5:86:74:64:ff:64:e9:7c:f7:02:b4:9e:be:4c:bd:28:5b:d4: 89:4f:59:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKZ+SXhywop85mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MWQyZDJlMzAtMTI5ZS00YjE4LWFhZWQtMGI1MTIyNjUwNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Z+hfED2SCDdPwuklu8eMyYvQvTbPQ2VhOS TNwOvwK/chVqlBWKH66iNc3NURSfTIgu8Y3boMvHDiqd6vCoP3TQKWYLQWcSDmKj dwXmB9a9oH4jmgvFrBEgeq0/29MNrTk71xsyw0fsSJdBKRpi2ikhLK2Q3vohZTTh puSpiX6ua03hS2CYvLrOSeryJ6EB7Vjy6rwwhhfpIz9QwBsj1M7zb4dqGYRuReJa t9D3BPNOrKuPBLHD+kAFv9s2SH6hgzCrxSCwXY3IXj0LNrnKKGVHEPQ3Efj8Cx4I Drw1knFugT+jAZwxX3WOtqhViRKJOzTc4umXMx39Q7h2FJe5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4q7dR3GNUMbh4zJGXkKXShHG0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM0MWJiZmUtMDYwMi0z YmNlLWE3YTItZDcyMTMyMWQ2YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFd29Fcm+c1+5EaiJhAwbVmFOwQZTjL7cHi9ICrSGw9v7kyw/i4X+h/ vFw+HHMN4PCYE2p2ET9pwzYQ0FO76Xabeu0/e0BC3nhZa6o76G0DYYnrHex6yM2E 0CMari/tsTl8hAeKchCi7TvALEvR3tVwMaAtFCmloR2QDwbK6/ZZ4GYUV9JR5jN6 XgbfqHeHEPO4+1amoi2OhVqArGByKg4sbQXdUNdFsulNwcp5lbVOJJ8U1kVbWDd9 2+d14AGZ8snchpOeYFfECbSwt/cVtIieg9IXdULAWN5/2x29BQoOAwpwYq59bbFW ybWGdGT/ZOl89wK0nr5MvShb1IlPWeE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:10 2025 by rpki-client