$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa File: 3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa (raw, json) Hash identifier: N7otdxo1EmQJc0/gBr1XoZQ7TTE4GXPwmTEXidYop94= Subject key identifier: 1A:29:3C:77:46:87:77:52:EC:58:50:2B:82:E1:F9:49:5D:8A:DB:FF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA034F9583647990C88A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:03:4f:95:83:64:79:90:c8:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=f3ef350a-e46b-465e-966c-8ba4a93153f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:de:2c:68:53:d5:4a:ab:cc:36:06:27:1e: e9:5a:85:41:1c:a8:20:66:65:bf:3b:2d:c0:2d:c5: d3:8f:1c:8c:7e:34:89:f6:82:28:0b:82:20:de:ea: 36:61:c9:dc:06:eb:91:f9:80:e6:43:7f:de:23:90: ac:78:f6:d0:89:93:56:c1:be:b7:1a:16:9e:a5:9d: 44:02:12:17:c3:71:e5:e2:1b:fb:53:ef:a4:b8:91: 1e:30:9b:b4:12:3a:bf:ea:63:c9:1a:1c:cd:88:f9: 0f:d4:3f:31:ab:e1:09:a7:8c:5d:7a:1a:24:75:da: 10:29:1f:c4:b1:79:92:4f:a2:2d:37:26:fe:63:ee: 8e:fd:4e:f5:5e:f0:ec:a0:ce:d3:89:87:b8:32:c1: 1a:95:c0:18:2b:87:f8:f0:8d:21:8b:32:3f:bb:75: 2e:48:04:e2:ec:af:89:e8:22:5d:85:e7:db:68:aa: cb:2b:cd:b1:d4:58:44:e9:c3:e7:c3:1d:20:e1:05: 66:d5:00:55:b6:ed:b8:b1:3e:80:b5:93:ff:5f:33: 96:ce:34:de:40:61:92:6b:05:49:6b:dc:6e:13:e9: a3:06:38:ef:d7:be:90:b1:d3:7f:90:75:1d:f9:e2: e5:2f:55:99:d0:72:c0:3a:2f:a6:ee:40:c5:a1:f7: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:3C:77:46:87:77:52:EC:58:50:2B:82:E1:F9:49:5D:8A:DB:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fa:13:01:1b:8f:7c:89:a9:fb:c5:1a:b0:fc:b0:5c:c0:77: fb:3b:7d:09:d9:29:41:d3:e7:06:e7:37:2c:dd:d9:b9:07:fc: 7a:af:78:2c:07:63:b7:21:97:e3:0f:26:5c:db:2d:9a:20:60: 6b:37:4c:85:33:c1:31:90:e4:98:b1:1a:69:68:cc:8a:c3:b1: 18:4d:43:0d:96:9e:b0:a7:df:42:63:64:26:ea:e4:c0:d6:6b: 4d:88:46:22:df:89:39:47:82:bf:f6:68:e3:66:a1:60:ae:fe: 5f:36:74:f2:c6:6c:42:d0:9b:aa:07:8c:50:d5:1e:5b:60:d1: d2:17:ee:1f:48:3a:73:61:6f:30:18:cc:d4:94:7b:f1:fc:1d: eb:56:b6:9f:45:35:a9:ed:1e:ab:c3:f4:5e:87:61:02:8a:df: af:f2:7d:98:cf:6d:8c:c1:8b:0d:77:08:12:1f:5c:d1:e2:2e: 12:4e:db:63:39:c1:b5:0b:d5:60:1a:e0:71:c1:4e:e6:cf:f9: e6:7f:a5:4e:44:20:9e:16:fc:81:21:80:86:92:aa:53:3b:34: 54:ad:f2:68:4c:da:57:2f:58:2b:4b:f6:5d:63:4c:6d:30:f9: c1:73:79:71:8d:5c:ed:63:6c:83:65:0f:7b:48:05:e2:2d:77: 2c:04:d1:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gNPlYNkeZDIigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZjNlZjM1MGEtZTQ2Yi00NjVlLTk2NmMtOGJhNGE5MzE1M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKPeLGhT1UqrzDYGJx7pWoVBHKggZmW/Oy3A LcXTjxyMfjSJ9oIoC4Ig3uo2YcncBuuR+YDmQ3/eI5CsePbQiZNWwb63GhaepZ1E AhIXw3Hl4hv7U++kuJEeMJu0Ejq/6mPJGhzNiPkP1D8xq+EJp4xdehokddoQKR/E sXmST6ItNyb+Y+6O/U71XvDsoM7TiYe4MsEalcAYK4f48I0hizI/u3UuSATi7K+J 6CJdhefbaKrLK82x1FhE6cPnwx0g4QVm1QBVtu24sT6AtZP/XzOWzjTeQGGSawVJ a9xuE+mjBjjv176QsdN/kHUd+eLlL1WZ0HLAOi+m7kDFoffZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBopPHdGh3dS7FhQK4Lh+Ulditv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2U5OTI2MTMtODBjNC0z YmI1LTllYmMtNmM4ZTdhNWZmMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX6EwEbj3yJqfvFGrD8sFzAd/s7fQnZKUHT5wbnNyzd2bkH/HqveCwH Y7chl+MPJlzbLZogYGs3TIUzwTGQ5JixGmlozIrDsRhNQw2WnrCn30JjZCbq5MDW a02IRiLfiTlHgr/2aONmoWCu/l82dPLGbELQm6oHjFDVHltg0dIX7h9IOnNhbzAY zNSUe/H8HetWtp9FNantHqvD9F6HYQKK36/yfZjPbYzBiw13CBIfXNHiLhJO22M5 wbUL1WAa4HHBTubP+eZ/pU5EIJ4W/IEhgIaSqlM7NFSt8mhM2lcvWCtL9l1jTG0w +cFzeXGNXO1jbINlD3tIBeItdywE0Yo= -----END CERTIFICATE-----Generated at Sun Apr 27 22:23:17 2025 by rpki-client