$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa File: 3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa (raw, json) Hash identifier: MDpzKB0JjaaCjnn5c0ytPY6dNzwIT04RdP8STa5KvVs= Subject key identifier: 27:B2:C8:EE:8A:24:C1:5E:B5:0D:B0:7F:B5:22:72:86:B5:8A:81:F1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F3275C0E6BB39C84E600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f3:27:5c:0e:6b:b3:9c:84:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=aed1d913-6b84-4704-a26e-46c32219de96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:34:f2:4a:15:2e:98:c2:09:52:96:f7:bb: f1:f3:39:f7:79:c8:e6:76:9c:cc:2c:4e:a2:d6:87: 2f:55:c6:af:a4:32:91:55:34:56:ee:b5:44:5a:49: 41:8e:04:8d:53:67:ef:4e:69:d6:de:5e:f9:d1:fb: f4:f4:a4:7b:57:4d:1e:86:7c:57:8b:8b:ed:15:7e: 69:cb:ed:a4:7c:bc:82:0d:e8:ed:9d:a4:c4:97:3a: 16:4a:43:06:02:d0:b9:6f:22:3c:da:e2:f3:ad:54: 86:90:f0:44:f2:77:e6:81:b8:48:4c:02:6c:6f:c3: 87:fc:10:ea:a3:f4:2d:d1:c1:95:84:f3:b4:bf:fc: f7:d1:89:c4:fa:f5:21:25:88:61:d9:3f:f3:95:09: ee:dc:0f:75:03:47:5e:62:42:26:4c:64:80:f2:ce: 00:71:81:74:7a:37:b3:71:1c:12:47:ad:a3:fb:6f: de:5e:ed:52:52:5f:c7:4d:78:0f:3f:e7:6e:d0:b7: 83:7e:e9:66:3c:4f:61:88:b6:0d:70:6a:7b:a9:89: 54:8c:a0:de:38:64:99:b8:ac:b1:c4:44:7f:2a:e3: 07:d4:ae:73:e4:e9:92:83:92:ea:d3:ea:8a:7f:a8: 61:43:0a:9d:b0:b9:a8:79:39:82:fe:8b:ab:fc:c5: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B2:C8:EE:8A:24:C1:5E:B5:0D:B0:7F:B5:22:72:86:B5:8A:81:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5d:44:d6:45:68:19:31:1d:4b:ec:7c:58:f4:b6:4f:4c:d0: 14:58:72:21:f4:e5:4d:eb:5b:da:b6:fa:bb:6d:ee:44:bf:58: 87:49:4a:2a:e2:15:4a:6a:28:77:d4:70:0d:c9:0f:5b:36:73: ae:91:8c:d3:3d:6f:5d:0a:77:69:7a:f3:3f:05:74:14:22:d6: ee:e7:9b:2c:d0:15:50:db:b0:87:9e:42:5f:8c:ea:44:e2:08: eb:2f:14:7b:54:63:44:bc:18:34:6d:60:38:5a:67:63:a3:34: b5:8c:2c:14:c3:fa:8b:6c:d5:a2:0a:56:40:35:09:71:b7:13: 56:a9:74:9b:1e:73:c1:63:99:07:fb:0a:1c:39:ac:94:b6:81: c4:ec:bf:61:57:de:aa:1e:dd:eb:da:91:39:6c:7b:de:a6:9c: f2:0e:89:99:f5:3e:91:78:90:99:64:e2:b8:b2:c7:cb:95:a0: 40:cb:71:2a:3d:82:87:57:d7:05:9a:cb:7e:67:b4:a0:96:d5: 36:66:23:e1:a6:dd:cf:ee:b3:a3:5f:2b:1c:eb:31:fa:c3:1a: c3:4e:45:4a:ce:8c:36:4f:cd:2a:f1:0c:fb:f7:51:59:77:b9: 62:3a:76:8d:a5:1f:a9:68:67:3a:a5:3a:e3:5d:91:a0:ea:48: e1:90:08:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fMnXA5rs5yE5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YWVkMWQ5MTMtNmI4NC00NzA0LWEyNmUtNDZjMzIyMTlkZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCk08koVLpjCCVKW97vx8zn3ecjmdpzMLE6i 1ocvVcavpDKRVTRW7rVEWklBjgSNU2fvTmnW3l750fv09KR7V00ehnxXi4vtFX5p y+2kfLyCDejtnaTElzoWSkMGAtC5byI82uLzrVSGkPBE8nfmgbhITAJsb8OH/BDq o/Qt0cGVhPO0v/z30YnE+vUhJYhh2T/zlQnu3A91A0deYkImTGSA8s4AcYF0ejez cRwSR62j+2/eXu1SUl/HTXgPP+du0LeDfulmPE9hiLYNcGp7qYlUjKDeOGSZuKyx xER/KuMH1K5z5OmSg5Lq0+qKf6hhQwqdsLmoeTmC/our/MXCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeyyO6KJMFetQ2wf7Uicoa1ioHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM5NmM1MGQtNDExYi0z YTFhLThjZDAtZjQwZGZkYjUzYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFdRNZFaBkxHUvsfFj0tk9M0BRYciH05U3rW9q2+rtt7kS/WIdJSiri FUpqKHfUcA3JD1s2c66RjNM9b10Kd2l68z8FdBQi1u7nmyzQFVDbsIeeQl+M6kTi COsvFHtUY0S8GDRtYDhaZ2OjNLWMLBTD+ots1aIKVkA1CXG3E1apdJsec8FjmQf7 Chw5rJS2gcTsv2FX3qoe3evakTlse96mnPIOiZn1PpF4kJlk4riyx8uVoEDLcSo9 godX1wWay35ntKCW1TZmI+Gm3c/us6NfKxzrMfrDGsNORUrOjDZPzSrxDPv3UVl3 uWI6do2lH6loZzqlOuNdkaDqSOGQCIg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:03 2025 by rpki-client