$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa File: 3579afbb-c9be-3aac-96b3-6f9060525a56.roa (raw, json) Hash identifier: 6HJjkZv+sdGcTfk4lx4mIkV5p9ejNtjK28McPEBx1b0= Subject key identifier: 6B:68:D1:A5:08:96:C2:44:D8:DE:68:AD:84:D6:21:39:93:D3:C2:A3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F46EFA095FDC5EDCA0540 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:46:ef:a0:95:fd:c5:ed:ca:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=209d88fb-167f-4bca-bca6-b3cf46ae8cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:d4:81:0d:31:af:c3:7d:50:ef:47:4a:b1: 27:48:a5:2b:63:c7:05:e6:cc:23:dc:02:e1:94:4c: c3:17:38:14:c3:9f:45:f9:53:7a:22:9a:08:86:03: a6:3e:a1:02:01:89:5d:c4:72:40:13:28:fa:97:64: e6:cd:44:a2:4c:4c:ce:ed:60:9d:68:f2:05:67:a7: 69:2a:72:e7:a2:ef:2a:f4:ef:ef:1f:14:e0:ad:b0: 70:5c:62:ae:1c:98:8b:e4:54:48:f2:43:fb:13:77: 02:06:5f:b6:c9:07:50:69:ca:6d:cc:c8:c7:99:a3: 03:42:18:3e:ee:bc:d6:c0:72:f3:17:42:81:72:97: 78:99:b1:24:c0:b3:a9:92:c0:88:3d:d5:c5:f3:29: fd:47:38:df:92:92:0e:5d:d7:33:e5:49:c3:f1:93: 4f:3b:e3:96:2d:f8:a5:26:e1:10:f3:77:71:37:4c: 70:4c:35:95:00:5e:ab:b8:61:79:80:bf:fb:06:00: f0:46:eb:b6:47:9b:88:a9:e4:24:4d:e9:5f:88:fd: 95:75:aa:fe:ff:f6:32:38:93:27:c9:0b:19:73:c7: d7:d2:82:15:ec:ba:b2:5a:e1:b9:0d:b9:e7:e2:74: d4:1e:e9:5a:66:29:45:0a:be:aa:55:c3:e5:45:be: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:68:D1:A5:08:96:C2:44:D8:DE:68:AD:84:D6:21:39:93:D3:C2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d5:44:3e:8d:8f:36:14:b6:da:b1:1b:b6:4d:8a:c8:f0:17: df:5e:81:20:7e:0d:1b:43:22:42:78:86:ea:4c:ca:8f:b8:ee: b0:84:f4:05:95:c4:fa:cb:98:c2:78:0e:a2:b7:34:f0:d8:0a: c9:0a:9e:90:63:c4:87:ae:21:e3:bb:e5:67:12:56:9a:69:6a: ba:77:45:35:c1:6e:4b:32:1a:7f:1d:fc:ff:33:1b:5c:d0:e4: 88:6f:8a:2e:6d:d6:b8:61:52:1e:5d:c3:89:fc:b1:43:b8:a7: 6d:a5:1b:51:ab:07:01:e3:a8:70:c5:c3:d9:0d:7c:1d:b2:16: 34:e3:9a:82:45:2f:03:31:6d:d0:65:d9:2b:56:b9:00:be:d0: 2f:85:24:4f:da:11:94:6f:00:6f:63:7a:dd:50:42:8b:d3:13: b1:4a:fd:41:9c:96:93:d7:16:90:5a:3f:cf:f4:8d:89:bf:92: b2:d2:d2:63:f2:f5:78:90:c6:e8:d3:90:cf:5d:38:b3:ef:ab: e7:4d:ab:4c:7f:d9:f0:ee:bc:eb:68:3a:bc:eb:eb:c9:bd:ee: 36:41:f9:62:94:2c:98:d5:a7:aa:6f:9d:00:86:1d:2e:37:9a: d6:2d:b9:b2:37:fc:da:d8:5b:41:09:e7:66:5c:4d:06:94:ce: 0e:59:91:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0bvoJX9xe3KBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MjA5ZDg4ZmItMTY3Zi00YmNhLWJjYTYtYjNjZjQ2YWU4Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLrUgQ0xr8N9UO9HSrEnSKUrY8cF5swj3ALh lEzDFzgUw59F+VN6IpoIhgOmPqECAYldxHJAEyj6l2TmzUSiTEzO7WCdaPIFZ6dp KnLnou8q9O/vHxTgrbBwXGKuHJiL5FRI8kP7E3cCBl+2yQdQacptzMjHmaMDQhg+ 7rzWwHLzF0KBcpd4mbEkwLOpksCIPdXF8yn9RzjfkpIOXdcz5UnD8ZNPO+OWLfil JuEQ83dxN0xwTDWVAF6ruGF5gL/7BgDwRuu2R5uIqeQkTelfiP2Vdar+//YyOJMn yQsZc8fX0oIV7LqyWuG5Dbnn4nTUHulaZilFCr6qVcPlRb6nzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGto0aUIlsJE2N5orYTWITmT08KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU3OWFmYmItYzliZS0z YWFjLTk2YjMtNmY5MDYwNTI1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHVRD6NjzYUttqxG7ZNisjwF99egSB+DRtDIkJ4hupMyo+47rCE9AWV xPrLmMJ4DqK3NPDYCskKnpBjxIeuIeO75WcSVppparp3RTXBbksyGn8d/P8zG1zQ 5Ihvii5t1rhhUh5dw4n8sUO4p22lG1GrBwHjqHDFw9kNfB2yFjTjmoJFLwMxbdBl 2StWuQC+0C+FJE/aEZRvAG9jet1QQovTE7FK/UGclpPXFpBaP8/0jYm/krLS0mPy 9XiQxujTkM9dOLPvq+dNq0x/2fDuvOtoOrzr68m97jZB+WKULJjVp6pvnQCGHS43 mtYtubI3/NrYW0EJ52ZcTQaUzg5ZkdQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:07:58 2025 by rpki-client