$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38c60a09-b904-394d-a0aa-9a25d9c7787d.roa File: 38c60a09-b904-394d-a0aa-9a25d9c7787d.roa (raw, json) Hash identifier: Tfq/YeHTeM36XjnRXRnHn5DIUipQYauiDXySNO7FGfQ= Subject key identifier: 21:2A:4B:75:42:08:D2:E9:4D:0B:A6:0C:3C:3E:02:48:59:82:9A:12 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F35D8C8FCD6E770AA1C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38c60a09-b904-394d-a0aa-9a25d9c7787d.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f3:5d:8c:8f:cd:6e:77:0a:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=e2599d2d-d981-4a2b-b59e-51cf11933ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bf:8c:a2:9a:33:06:c2:21:9d:11:ef:3f:17: 83:48:65:de:ca:1d:d0:15:86:38:95:47:fa:73:f0: 42:5b:43:1a:dc:85:55:4d:65:09:bd:f2:39:79:91: 4b:f5:e8:dd:26:80:31:78:46:e5:47:68:b5:35:10: 84:1d:aa:45:6f:14:2e:e3:bf:02:dc:0a:6a:dc:f7: 15:70:f9:4f:2c:47:50:31:fa:1f:05:34:9a:c9:a8: ad:b4:7f:1a:6f:34:5d:98:a0:fe:61:18:77:85:ca: c9:4f:07:b9:32:9d:12:16:a7:6c:f5:12:e4:79:17: b3:da:83:7e:6a:0d:d1:7d:d2:5c:eb:58:88:0c:47: e9:90:c1:52:37:40:d5:f1:ce:2b:ad:91:5a:50:fa: ba:53:f7:7b:63:41:c6:49:63:95:62:a6:3d:01:16: 75:5a:77:b6:09:33:51:8f:bf:aa:3a:5f:0e:bc:b0: a6:d7:9a:57:6c:50:68:26:71:ea:94:c2:26:d7:45: af:12:2b:16:ab:d8:51:b9:ab:72:0a:17:6f:ec:8a: 48:2e:c1:e3:09:3d:bb:5a:95:cc:8c:3a:2a:eb:34: f1:91:74:35:a2:4e:e4:55:80:1a:32:f9:c1:b5:8b: e5:cf:42:d4:34:43:0f:d7:cd:10:d4:69:ce:ad:e1: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:4B:75:42:08:D2:E9:4D:0B:A6:0C:3C:3E:02:48:59:82:9A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38c60a09-b904-394d-a0aa-9a25d9c7787d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:42:99:a8:6b:7b:42:3c:fa:a0:d0:7b:b8:0d:1d:74:fc:04: a2:37:3b:6f:f6:f4:1a:6f:72:1d:92:2d:7c:ec:dc:04:03:5c: de:eb:27:1c:55:36:11:f3:14:5f:91:ec:31:0c:9e:19:05:58: 17:1a:62:be:5b:70:9d:9c:db:7b:0d:ef:34:ca:e4:ff:20:c9: 2f:31:8e:ab:16:2e:1d:51:a7:fd:41:f1:d0:5e:79:ea:cd:12: 75:3f:4a:d8:d9:23:04:7c:dc:7e:50:b6:7e:66:19:5a:f1:8f: 1a:5b:38:57:00:f9:be:9e:d0:c3:de:42:96:a7:eb:2c:e5:82: 5b:4c:8f:ae:d6:0f:bf:dd:12:2c:c5:9f:f7:23:73:e5:d2:0a: ed:51:1a:7a:8a:42:b1:c1:da:4e:7a:ca:53:ea:74:24:79:e1: de:2d:59:25:d7:b8:d3:ae:4f:34:0f:06:56:4e:6c:73:96:27: f3:e0:88:72:47:4f:99:60:de:6e:b6:ba:e0:8c:21:b8:c9:05: e9:c4:e6:dd:8c:02:9e:09:60:cd:6f:f4:c3:67:af:71:c2:ae: a6:e7:4c:b0:fe:87:3c:3d:11:fe:01:c1:1d:ad:ae:38:e5:9d: c7:7c:b3:e3:0f:48:90:18:05:5c:d5:f6:63:16:b3:a6:97:e9: 7b:c0:c1:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fNdjI/NbncKocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZTI1OTlkMmQtZDk4MS00YTJiLWI1OWUtNTFjZjExOTMzYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr+MopozBsIhnRHvPxeDSGXeyh3QFYY4lUf6 c/BCW0Ma3IVVTWUJvfI5eZFL9ejdJoAxeEblR2i1NRCEHapFbxQu478C3Apq3PcV cPlPLEdQMfofBTSayaittH8abzRdmKD+YRh3hcrJTwe5Mp0SFqds9RLkeRez2oN+ ag3RfdJc61iIDEfpkMFSN0DV8c4rrZFaUPq6U/d7Y0HGSWOVYqY9ARZ1Wne2CTNR j7+qOl8OvLCm15pXbFBoJnHqlMIm10WvEisWq9hRuatyChdv7IpILsHjCT27WpXM jDoq6zTxkXQ1ok7kVYAaMvnBtYvlz0LUNEMP180Q1GnOreGy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEqS3VCCNLpTQumDDw+AkhZgpoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzhjNjBhMDktYjkwNC0z OTRkLWEwYWEtOWEyNWQ5Yzc3ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBCmahre0I8+qDQe7gNHXT8BKI3O2/29Bpvch2SLXzs3AQDXN7rJxxV NhHzFF+R7DEMnhkFWBcaYr5bcJ2c23sN7zTK5P8gyS8xjqsWLh1Rp/1B8dBeeerN EnU/StjZIwR83H5Qtn5mGVrxjxpbOFcA+b6e0MPeQpan6yzlgltMj67WD7/dEizF n/cjc+XSCu1RGnqKQrHB2k56ylPqdCR54d4tWSXXuNOuTzQPBlZObHOWJ/PgiHJH T5lg3m62uuCMIbjJBenE5t2MAp4JYM1v9MNnr3HCrqbnTLD+hzw9Ef4BwR2trjjl ncd8s+MPSJAYBVzV9mMWs6aX6XvAwZo= -----END CERTIFICATE-----Generated at Mon Apr 28 02:12:07 2025 by rpki-client