$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36b4940b-7b79-39c3-8db0-25125c1d4afc.roa File: 36b4940b-7b79-39c3-8db0-25125c1d4afc.roa (raw, json) Hash identifier: szTP5Ils6l5goy6B//6AaaiWxVYXYNsgTfA5nBPUlE8= Subject key identifier: 2F:11:CB:B3:62:02:16:54:DA:B9:AE:7D:04:D7:8C:44:F3:B4:85:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E649AC23B3BFA786A9BCD00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36b4940b-7b79-39c3-8db0-25125c1d4afc.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9a:c2:3b:3b:fa:78:6a:9b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=7638ba94-9bd2-4047-a8ed-4911d26e3892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:95:80:a7:38:54:b1:68:38:e2:ea:08:46: dc:81:cd:00:c7:55:d2:b9:a9:ac:5c:dc:01:68:8c: d3:ca:62:9c:7d:62:ae:49:62:bc:26:3c:b9:d9:92: af:d8:1f:3c:a1:6a:ed:1f:00:ed:7d:80:a9:87:fc: 11:0d:86:bc:64:22:b9:5a:c8:76:7c:95:23:4a:23: 61:36:d6:99:7e:d0:ad:8e:c1:df:a6:1e:49:a2:36: cf:24:b8:0e:fe:35:26:4f:c9:2f:0b:4d:6e:02:b4: 35:54:ee:02:99:7e:b2:f8:52:e5:0f:2e:26:ca:d5: dc:75:66:da:6c:1b:5c:40:9e:70:2f:d3:eb:a0:f8: 40:c9:29:43:9d:36:97:69:4a:a7:97:fc:52:cd:e1: c7:69:77:9c:aa:2f:7e:e5:1f:df:ff:73:b5:5e:33: 17:29:40:02:fb:c0:f6:f2:77:78:1b:ea:d4:83:b6: 66:76:08:c4:7a:d0:f3:d9:aa:7f:b0:00:50:f7:dc: 8d:5e:d0:36:15:5c:ec:cf:12:b0:be:eb:c4:d3:ba: 86:ca:e1:01:a3:82:38:57:3d:13:17:66:67:94:b4: 2c:21:53:4a:0f:2e:39:6e:53:7b:78:2d:22:f2:c2: 1b:5f:19:85:7b:d8:a2:74:3a:12:36:69:ff:59:b3: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:11:CB:B3:62:02:16:54:DA:B9:AE:7D:04:D7:8C:44:F3:B4:85:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/36b4940b-7b79-39c3-8db0-25125c1d4afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ae:b7:b4:d8:8f:72:8a:6f:37:b7:8a:6d:3d:5f:cc:06:e1: 87:97:63:44:f7:61:01:f8:d4:b3:5d:f8:0c:f8:ff:75:69:53: 1a:be:44:28:de:0c:85:1d:55:7d:c5:28:72:bd:e6:ba:66:11: 84:9c:37:b7:03:57:6d:03:6e:73:31:b9:25:02:db:13:55:9c: d7:e0:08:6c:90:ec:a9:82:eb:e1:35:a7:0b:2e:7c:9f:cd:0a: a8:01:f3:11:82:41:80:71:48:9e:5f:5f:75:50:fd:75:d1:d5: f3:81:60:c2:c2:3e:b3:ef:c5:e3:06:cc:44:cb:11:3f:5d:55: 9a:03:de:f1:ae:f9:44:d6:0b:7f:06:aa:c7:c7:27:da:93:23: 63:01:35:10:63:a5:30:a3:97:5a:72:4b:38:1a:e6:1f:62:af: ad:00:a2:79:62:80:91:fe:43:36:d0:d6:a9:29:4d:15:c8:99: 8c:a9:63:68:90:28:c1:bf:9f:75:47:9b:84:e1:5e:b3:8c:05: 7a:c0:79:cc:16:71:e0:e0:3e:39:46:70:60:c1:d9:b2:5c:54: 3e:f2:5c:f6:77:3e:33:20:d2:f2:e3:72:6f:66:8e:cc:08:29: 33:a6:53:8d:3f:3f:ce:e1:6a:ff:4a:eb:68:b3:8d:12:f6:f7: 40:96:33:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJrCOzv6eGqbzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NzYzOGJhOTQtOWJkMi00MDQ3LWE4ZWQtNDkxMWQyNmUzODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqguVgKc4VLFoOOLqCEbcgc0Ax1XSuamsXNwB aIzTymKcfWKuSWK8Jjy52ZKv2B88oWrtHwDtfYCph/wRDYa8ZCK5Wsh2fJUjSiNh NtaZftCtjsHfph5JojbPJLgO/jUmT8kvC01uArQ1VO4CmX6y+FLlDy4mytXcdWba bBtcQJ5wL9ProPhAySlDnTaXaUqnl/xSzeHHaXecqi9+5R/f/3O1XjMXKUAC+8D2 8nd4G+rUg7ZmdgjEetDz2ap/sABQ99yNXtA2FVzszxKwvuvE07qGyuEBo4I4Vz0T F2ZnlLQsIVNKDy45blN7eC0i8sIbXxmFe9iidDoSNmn/WbMWdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Ry7NiAhZU2rmufQTXjETztIVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzZiNDk0MGItN2I3OS0z OWMzLThkYjAtMjUxMjVjMWQ0YWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWut7TYj3KKbze3im09X8wG4YeXY0T3YQH41LNd+Az4/3VpUxq+RCje DIUdVX3FKHK95rpmEYScN7cDV20DbnMxuSUC2xNVnNfgCGyQ7KmC6+E1pwsufJ/N CqgB8xGCQYBxSJ5fX3VQ/XXR1fOBYMLCPrPvxeMGzETLET9dVZoD3vGu+UTWC38G qsfHJ9qTI2MBNRBjpTCjl1pySzga5h9ir60AonligJH+QzbQ1qkpTRXImYypY2iQ KMG/n3VHm4ThXrOMBXrAecwWceDgPjlGcGDB2bJcVD7yXPZ3PjMg0vLjcm9mjswI KTOmU40/P87hav9K62izjRL290CWM64= -----END CERTIFICATE-----Generated at Mon Apr 28 20:47:28 2025 by rpki-client