$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa File: 3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa (raw, json) Hash identifier: 4Bu5V64BR3TdoqFPLjdnRpNFdaj3wojoMzyggJ0axZI= Subject key identifier: 47:D2:B8:98:C3:D3:32:5E:85:D2:08:F9:FF:24:1E:5B:0E:79:CB:CA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EB322593A7A729693100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:eb:32:25:93:a7:a7:29:69:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=d548c4d9-ecfe-41f3-91b3-2d524a9e4298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:09:72:5a:17:90:b5:3f:a2:38:75:9b:14: 33:cd:0c:b6:c9:77:ce:a7:92:2d:5a:18:01:02:22: f1:dd:8e:28:8c:43:fb:ee:62:b3:d6:6a:06:0e:be: 11:85:32:83:90:ff:15:5e:e4:70:7f:a1:53:61:06: cb:48:80:dc:c5:90:4a:8e:4e:db:73:5f:ec:15:3a: 37:ea:86:3c:45:12:d1:83:ae:bd:88:72:46:b2:01: 5e:77:57:24:be:c8:d5:37:59:34:40:6e:5f:35:3e: a2:34:35:e7:dd:f9:2f:41:76:ce:2f:6b:cf:91:a2: 9a:06:c2:59:a5:2f:48:ce:58:e8:9c:9c:14:24:1d: ca:84:45:ad:3e:f1:9f:74:fd:aa:6b:ae:48:f7:d2: e1:97:57:fe:ea:07:e4:78:66:8d:2e:60:a5:9c:7a: 8a:05:81:3d:ce:8c:4f:3f:86:01:14:5d:87:b9:5d: 0e:75:5d:72:da:19:21:e8:c0:7f:56:68:e2:d3:c3: 54:9a:d5:b8:2c:1e:5b:02:ad:db:d2:c7:1a:22:eb: df:27:97:48:f5:fa:90:f1:c7:43:aa:79:10:ff:72: c2:b4:dd:36:74:56:1f:0f:bf:6d:6c:9b:59:8d:7c: b1:63:1e:31:fd:e9:36:6c:d2:36:be:02:74:d2:3a: ff:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:B8:98:C3:D3:32:5E:85:D2:08:F9:FF:24:1E:5B:0E:79:CB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c4:7b:99:ce:b9:1a:68:72:bc:36:6e:6e:b7:29:5e:32:c8: fd:26:2a:9d:1e:34:69:74:b5:52:90:22:b6:8e:0e:11:21:33: b1:57:65:c8:be:11:ef:f7:82:2c:fd:6a:0d:fa:82:2a:7e:3b: 4e:87:3d:17:c8:f9:2a:4a:50:9a:ea:3e:77:54:94:df:53:89: 65:3f:fa:0b:b5:8a:7e:a1:83:6f:77:fa:40:d5:d4:da:a5:2f: 4a:d0:80:3c:db:07:7f:13:9d:9f:f5:5c:bf:77:94:35:78:68: a8:e6:ca:1f:8a:85:a3:a5:40:00:fd:95:62:03:c5:7b:8b:99: fe:4e:f4:eb:a1:15:19:f6:3c:52:ef:4a:70:ce:bd:1d:fe:a3: d0:0a:60:e4:aa:84:4f:1a:eb:36:22:22:1b:66:ff:ff:06:3e: c8:9b:ef:8f:83:f1:7f:f3:71:e3:0f:da:52:f9:72:45:b7:77: 81:ef:68:7b:10:c0:1a:47:0c:eb:c9:12:4c:75:42:95:bb:e9: 44:2c:1c:d3:13:a5:1f:7e:22:a9:56:c6:39:52:14:49:b8:de: bb:d4:37:2e:33:d8:91:a3:4c:e8:db:f2:9b:71:9d:5a:06:fa: 21:b9:6c:00:ec:cc:6e:09:55:14:2f:1a:94:d9:81:96:67:0c: 54:a0:c3:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+esyJZOnpylpMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZDU0OGM0ZDktZWNmZS00MWYzLTkxYjMtMmQ1MjRhOWU0Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXQJcloXkLU/ojh1mxQzzQy2yXfOp5ItWhgB AiLx3Y4ojEP77mKz1moGDr4RhTKDkP8VXuRwf6FTYQbLSIDcxZBKjk7bc1/sFTo3 6oY8RRLRg669iHJGsgFed1ckvsjVN1k0QG5fNT6iNDXn3fkvQXbOL2vPkaKaBsJZ pS9IzljonJwUJB3KhEWtPvGfdP2qa65I99Lhl1f+6gfkeGaNLmClnHqKBYE9zoxP P4YBFF2HuV0OdV1y2hkh6MB/Vmji08NUmtW4LB5bAq3b0scaIuvfJ5dI9fqQ8cdD qnkQ/3LCtN02dFYfD79tbJtZjXyxYx4x/ek2bNI2vgJ00jr/qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfSuJjD0zJehdII+f8kHlsOecvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2E2MDdkOTUtOTRkNi0z MmU2LTliNjAtMzU0Y2E1ZjI3YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvEe5nOuRpocrw2bm63KV4yyP0mKp0eNGl0tVKQIraODhEhM7FXZci+ Ee/3giz9ag36gip+O06HPRfI+SpKUJrqPndUlN9TiWU/+gu1in6hg293+kDV1Nql L0rQgDzbB38TnZ/1XL93lDV4aKjmyh+KhaOlQAD9lWIDxXuLmf5O9OuhFRn2PFLv SnDOvR3+o9AKYOSqhE8a6zYiIhtm//8GPsib74+D8X/zceMP2lL5ckW3d4HvaHsQ wBpHDOvJEkx1QpW76UQsHNMTpR9+IqlWxjlSFEm43rvUNy4z2JGjTOjb8ptxnVoG +iG5bADszG4JVRQvGpTZgZZnDFSgwyU= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:56 2025 by rpki-client