$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3373ab21-9f02-31c6-89b1-4671f50e141f.roa File: 3373ab21-9f02-31c6-89b1-4671f50e141f.roa (raw, json) Hash identifier: trzXZtISo0Eo+OXyL6Oy8TgN/lhsPoE+Ij9DQdrwAdE= Subject key identifier: DB:AB:A5:90:96:11:57:B1:EF:39:69:4C:A9:83:A6:9C:95:C2:D7:07 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F7160A926B3CC4DCF780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3373ab21-9f02-31c6-89b1-4671f50e141f.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f7:16:0a:92:6b:3c:c4:dc:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=f2d7e104-85bb-415c-a32f-9616ad648c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:84:79:2d:b4:9b:63:03:51:d0:e9:19:19: 06:41:ff:e5:ce:0f:f6:b1:0b:c3:5c:5f:a6:d8:51: 87:c2:6a:23:a6:c3:b6:33:99:a4:7b:34:bf:2a:9c: c9:ee:e8:16:4d:f2:cf:27:30:7d:73:27:eb:fb:d4: f1:22:58:fd:28:57:3d:b7:71:b8:71:3a:9c:86:49: 03:dd:3f:dc:ad:78:c8:1d:1c:1b:5a:c7:c7:cf:8c: 64:f4:48:fd:30:3f:54:57:d6:f2:36:c4:72:ae:e1: 4b:63:da:95:e6:ba:d3:d9:81:de:90:18:43:26:37: 1f:69:97:78:9b:91:7a:c4:ff:3e:d0:c8:de:8a:b1: 1c:95:16:6b:bf:87:6b:3f:e0:1a:6e:2c:fe:37:61: 85:64:6d:04:97:ca:7e:74:ef:87:ba:a0:f8:97:20: 78:77:68:d9:84:35:7a:2b:3d:ff:da:14:7f:da:35: a4:8a:82:7d:8f:e8:2b:c6:ab:dd:d6:8b:2c:38:0f: 81:99:a2:d2:4b:2d:e4:9d:5c:8b:a0:72:d0:2d:9b: 04:e4:35:49:fa:bd:80:5e:ba:cd:55:4c:21:bf:cd: 34:36:44:49:f2:c5:52:e7:28:b3:53:d7:8c:6c:d9: 33:33:31:95:e1:bd:e2:c1:51:c0:bb:9d:19:c1:10: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AB:A5:90:96:11:57:B1:EF:39:69:4C:A9:83:A6:9C:95:C2:D7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3373ab21-9f02-31c6-89b1-4671f50e141f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b0:30:fb:68:1e:a8:1e:82:03:b4:97:07:5d:c7:e1:b2:f7: 85:3a:55:85:38:58:a1:34:07:5c:9b:f0:af:04:33:34:7d:6b: 0f:7f:b6:31:1e:87:33:26:3f:7f:62:1e:11:a1:3e:3b:1e:6a: f9:78:9d:59:38:e3:82:80:fd:0d:ea:e9:d6:3c:f6:32:ca:36: ea:42:30:68:a0:a4:04:be:5e:83:d2:67:95:77:93:02:26:07: 68:69:85:97:87:ef:02:b2:e1:8b:67:fb:10:95:9a:ed:1d:2b: ac:d5:12:02:db:23:bc:ba:14:84:5b:bc:22:6f:12:0c:b4:62: 68:06:88:6f:b9:f9:91:f8:b0:ab:cd:72:be:93:12:8c:12:b9: 5d:1a:7d:bf:79:d2:4c:ff:6b:02:47:44:bc:33:79:18:94:6c: 90:19:5a:20:b8:4b:bb:ae:4b:0b:69:2b:1e:87:46:27:2f:5e: a5:2e:4a:02:47:e8:2b:83:85:2f:30:e9:bf:17:de:da:62:34: c5:d7:05:17:53:5f:05:2c:79:c0:69:b9:4c:81:99:2a:f3:71: 48:d5:f3:60:62:44:b6:a1:d4:db:ac:66:b8:6d:cd:12:bf:2c: 3a:2e:92:ea:2a:a1:47:9f:52:76:6e:52:fc:48:64:11:85:69: c7:55:a4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fcWCpJrPMTc94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZjJkN2UxMDQtODViYi00MTVjLWEzMmYtOTYxNmFkNjQ4YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z6EeS20m2MDUdDpGRkGQf/lzg/2sQvDXF+m 2FGHwmojpsO2M5mkezS/KpzJ7ugWTfLPJzB9cyfr+9TxIlj9KFc9t3G4cTqchkkD 3T/crXjIHRwbWsfHz4xk9Ej9MD9UV9byNsRyruFLY9qV5rrT2YHekBhDJjcfaZd4 m5F6xP8+0MjeirEclRZrv4drP+Aabiz+N2GFZG0El8p+dO+HuqD4lyB4d2jZhDV6 Kz3/2hR/2jWkioJ9j+grxqvd1ossOA+BmaLSSy3knVyLoHLQLZsE5DVJ+r2AXrrN VUwhv800NkRJ8sVS5yizU9eMbNkzMzGV4b3iwVHAu50ZwRC60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNurpZCWEVex7zlpTKmDppyVwtcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM3M2FiMjEtOWYwMi0z MWM2LTg5YjEtNDY3MWY1MGUxNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIamMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKwMPtoHqgeggO0lwddx+Gy94U6VYU4WKE0B1yb8K8EMzR9aw9/tjEe hzMmP39iHhGhPjseavl4nVk444KA/Q3q6dY89jLKNupCMGigpAS+XoPSZ5V3kwIm B2hphZeH7wKy4Ytn+xCVmu0dK6zVEgLbI7y6FIRbvCJvEgy0YmgGiG+5+ZH4sKvN cr6TEowSuV0afb950kz/awJHRLwzeRiUbJAZWiC4S7uuSwtpKx6HRicvXqUuSgJH 6CuDhS8w6b8X3tpiNMXXBRdTXwUsecBpuUyBmSrzcUjV82BiRLah1NusZrhtzRK/ LDoukuoqoUefUnZuUvxIZBGFacdVpBE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:24 2025 by rpki-client