$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa File: 3b98884f-6544-3561-9a52-f8ff6f884f01.roa (raw, json) Hash identifier: RXqVBY5MzhKfgL3t92r12XkDbqarZV5fVUpazP4u7F8= Subject key identifier: 85:D2:C7:7B:0F:FE:DA:0A:EA:D2:17:99:5D:F0:E4:17:C0:3A:82:CE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D9C76F2BB407E72523A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d9:c7:6f:2b:b4:07:e7:25:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=72b63f53-802d-403a-9e27-8f344f1059d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:19:c0:6d:0b:4c:ea:1e:10:2c:b5:06:92: 55:3e:a6:6c:cf:d5:1b:33:29:ec:0b:cb:ec:47:c1: b4:91:98:53:8a:1d:74:33:90:e3:23:12:6d:e6:1a: 32:78:3c:af:db:25:f9:d5:dc:1d:f4:53:4d:2b:48: ac:5b:3a:fb:d2:53:e7:62:31:6b:e2:cd:2f:9f:ce: 9d:7a:b5:05:38:55:f7:46:92:ff:21:c1:e3:ce:df: b7:27:f9:16:38:ee:6e:bd:b3:f1:41:0b:a8:11:5a: 67:0d:d1:ce:ea:4f:46:c1:f1:be:4d:e6:44:b2:20: 31:f1:71:45:fd:6f:d9:3b:87:d3:4c:6d:e4:1d:6d: b5:91:61:be:3a:84:d2:c5:e1:3a:b5:a9:7e:74:d3: 1e:61:99:ee:f5:58:0b:b0:a4:d5:ae:80:ec:c0:d3: 93:73:d8:c8:e1:69:5d:15:c4:67:92:7a:06:37:20: 97:dc:c9:8e:40:56:9a:e1:22:90:3e:0c:92:a7:f2: 25:10:25:c9:98:56:9e:cc:23:fe:5a:c2:f1:df:ea: c6:e3:53:6c:45:40:38:51:11:60:b2:57:45:82:62: 92:e8:b2:55:28:06:f8:73:34:2c:a2:21:b7:b2:b2: d3:27:23:2b:d1:3f:5b:54:00:fd:5a:90:96:66:45: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:C7:7B:0F:FE:DA:0A:EA:D2:17:99:5D:F0:E4:17:C0:3A:82:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:43:37:c9:9c:fb:e2:3b:44:ea:9e:af:10:b7:53:76:81:9a: 9e:cc:5a:36:a2:52:b5:5a:28:8d:a8:a1:a1:64:95:da:40:16: 7f:7a:76:e4:cd:d0:2a:7c:c1:61:97:b0:f2:5e:9a:7c:90:6f: c4:1d:d8:9d:13:24:c8:86:34:55:f5:8c:86:1c:8d:50:6e:ef: e5:90:cc:61:0c:84:69:44:1e:1d:9f:6c:33:5e:63:da:24:27: c9:61:6a:d4:61:4b:6b:15:90:cc:88:d4:7d:bd:38:f8:b9:7f: 8d:00:58:e0:f9:e8:a9:24:f4:3e:f4:88:17:10:5a:3a:22:c5: 1c:b5:f4:08:f3:05:8a:b6:4d:fc:36:4e:70:b5:c7:6a:01:b1: 15:af:49:84:eb:65:99:93:87:44:60:d3:e9:7c:a4:95:3f:05: 47:72:03:6d:2f:b3:5b:7d:12:7e:73:f4:f1:5e:4a:71:5b:25: f6:59:de:fd:eb:cb:1d:f4:72:a0:6c:28:7f:ab:78:66:cc:d1: d9:18:34:6c:39:03:5d:cb:ba:32:4b:4f:c1:12:0c:b6:7c:a3: ab:0f:b6:83:3f:fa:fb:77:2e:42:41:59:25:a9:05:f8:b2:47: 61:a7:b3:51:24:d5:14:f6:3b:9d:21:31:4d:2c:e1:3b:3c:a1: 6e:d6:e3:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNnHbyu0B+clI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzJiNjNmNTMtODAyZC00MDNhLTllMjctOGYzNDRmMTA1OWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTgZwG0LTOoeECy1BpJVPqZsz9UbMynsC8vs R8G0kZhTih10M5DjIxJt5hoyeDyv2yX51dwd9FNNK0isWzr70lPnYjFr4s0vn86d erUFOFX3RpL/IcHjzt+3J/kWOO5uvbPxQQuoEVpnDdHO6k9GwfG+TeZEsiAx8XFF /W/ZO4fTTG3kHW21kWG+OoTSxeE6tal+dNMeYZnu9VgLsKTVroDswNOTc9jI4Wld FcRnknoGNyCX3MmOQFaa4SKQPgySp/IlECXJmFaezCP+WsLx3+rG41NsRUA4URFg sldFgmKS6LJVKAb4czQsoiG3srLTJyMr0T9bVAD9WpCWZkVkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXSx3sP/toK6tIXmV3w5BfAOoLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2I5ODg4NGYtNjU0NC0z NTYxLTlhNTItZjhmZjZmODg0ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpDN8mc++I7ROqerxC3U3aBmp7MWjaiUrVaKI2ooaFkldpAFn96duTN 0Cp8wWGXsPJemnyQb8Qd2J0TJMiGNFX1jIYcjVBu7+WQzGEMhGlEHh2fbDNeY9ok J8lhatRhS2sVkMyI1H29OPi5f40AWOD56Kkk9D70iBcQWjoixRy19AjzBYq2Tfw2 TnC1x2oBsRWvSYTrZZmTh0Rg0+l8pJU/BUdyA20vs1t9En5z9PFeSnFbJfZZ3v3r yx30cqBsKH+reGbM0dkYNGw5A13LujJLT8ESDLZ8o6sPtoM/+vt3LkJBWSWpBfiy R2Gns1Ek1RT2O50hMU0s4Ts8oW7W4zw= -----END CERTIFICATE-----Generated at Tue Apr 29 19:54:45 2025 by rpki-client