$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa File: 41ac104c-8079-32fa-8679-7da33c6a1341.roa (raw, json) Hash identifier: lQVZstxMKz2Q9yxd+cCkXcqB3qQmBbQLho6hUBDtlqE= Subject key identifier: 44:45:5E:70:3B:1E:42:4D:28:DD:0F:69:74:2E:AA:78:DE:BF:86:5D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D1AD607F44E211035200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d1:ad:60:7f:44:e2:11:03:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=eea75c1f-1467-480a-80a0-a9d45b200752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:bd:7e:68:e1:c3:68:a1:18:4d:23:d6:7e: e8:f1:c1:8b:56:66:ac:c8:9e:f2:e3:fb:80:74:75: f3:e4:33:77:4b:64:9e:70:19:ad:62:f3:f6:88:7d: ca:b1:f3:6d:bd:44:23:b5:89:0e:a2:d3:d0:c0:91: 4b:3b:ae:40:77:5a:31:64:0a:e1:92:fd:82:32:a9: 0a:81:0d:05:a2:b6:53:bd:68:85:27:3f:af:6a:ab: 8d:5e:38:cf:95:d3:1b:94:12:a8:13:60:e1:9e:a3: 8e:78:d4:df:d1:3e:04:7b:d2:32:89:e2:77:10:bd: 51:96:70:3d:82:c3:4e:bf:91:db:23:8b:58:f1:7e: ca:cb:b6:7a:83:89:bc:82:c0:34:59:6f:8e:da:e3: 75:7f:07:27:49:35:12:2d:17:c6:b5:9e:d6:42:67: f0:c0:6f:e6:ee:15:88:45:91:3b:ee:83:4c:66:3b: f6:04:d9:37:e9:f6:cc:ea:7e:f5:c7:6a:e8:88:f0: d7:fc:d5:0a:dd:5b:a7:14:f6:d4:9c:d5:dd:f8:28: 0f:65:ac:9c:e2:85:ad:a4:26:3a:94:e3:cf:ba:e2: f2:ac:12:3f:43:5d:1a:b0:42:27:ba:11:9b:88:cd: f6:d2:cc:13:eb:96:00:73:5a:9d:c7:41:fc:be:ce: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:5E:70:3B:1E:42:4D:28:DD:0F:69:74:2E:AA:78:DE:BF:86:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4b:32:7b:21:cf:19:a4:f9:d9:52:08:d1:63:64:e3:f9:b5: 89:24:6f:67:10:ec:15:73:77:02:d9:6b:ee:bf:24:7a:3e:87: 1b:fe:6d:35:e5:24:d2:4b:f9:af:c5:42:53:53:db:0c:aa:3e: 3a:44:cf:e2:da:67:59:c4:36:9a:35:a1:0f:cf:1a:24:33:5c: 15:57:22:55:07:e4:ab:65:c2:5c:a0:9a:d4:c5:69:28:37:7e: 80:82:40:0f:32:bd:d2:ee:53:4f:e0:ec:1a:11:92:e7:bb:a1: 87:ae:59:94:07:7f:dc:b5:9c:c2:d3:ac:dd:a3:5e:f3:a0:2b: 17:ad:ed:f7:05:2f:bc:70:5b:ba:13:09:4f:93:e1:f3:99:68: 63:7d:fe:6f:f5:5e:dc:20:77:b5:27:e5:dc:be:55:76:0e:4d: 0e:6e:d9:81:64:80:2b:d8:9c:6c:39:61:96:dd:83:42:52:97: 9e:c9:81:f6:16:66:99:99:33:f9:83:52:02:96:6b:57:5b:1d: 57:3c:9b:40:96:fa:9d:8b:6d:43:a2:75:71:d1:3d:76:e8:a2: 5f:42:a2:14:29:b9:03:ed:d8:f7:34:74:9c:3f:c6:3f:03:4d: b0:9b:fa:5a:cc:83:de:86:60:80:2f:5a:28:02:82:b8:9b:42: 61:bf:b6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNGtYH9E4hEDUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWVhNzVjMWYtMTQ2Ny00ODBhLTgwYTAtYTlkNDViMjAwNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNy9fmjhw2ihGE0j1n7o8cGLVmasyJ7y4/uA dHXz5DN3S2SecBmtYvP2iH3KsfNtvUQjtYkOotPQwJFLO65Ad1oxZArhkv2CMqkK gQ0ForZTvWiFJz+vaquNXjjPldMblBKoE2DhnqOOeNTf0T4Ee9IyieJ3EL1RlnA9 gsNOv5HbI4tY8X7Ky7Z6g4m8gsA0WW+O2uN1fwcnSTUSLRfGtZ7WQmfwwG/m7hWI RZE77oNMZjv2BNk36fbM6n71x2roiPDX/NUK3VunFPbUnNXd+CgPZayc4oWtpCY6 lOPPuuLyrBI/Q10asEInuhGbiM320swT65YAc1qdx0H8vs6UXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERFXnA7HkJNKN0PaXQuqnjev4ZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFhYzEwNGMtODA3OS0z MmZhLTg2NzktN2RhMzNjNmExMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVLMnshzxmk+dlSCNFjZOP5tYkkb2cQ7BVzdwLZa+6/JHo+hxv+bTXl JNJL+a/FQlNT2wyqPjpEz+LaZ1nENpo1oQ/PGiQzXBVXIlUH5KtlwlygmtTFaSg3 foCCQA8yvdLuU0/g7BoRkue7oYeuWZQHf9y1nMLTrN2jXvOgKxet7fcFL7xwW7oT CU+T4fOZaGN9/m/1Xtwgd7Un5dy+VXYOTQ5u2YFkgCvYnGw5YZbdg0JSl57JgfYW ZpmZM/mDUgKWa1dbHVc8m0CW+p2LbUOidXHRPXbool9CohQpuQPt2Pc0dJw/xj8D TbCb+lrMg96GYIAvWigCgribQmG/trE= -----END CERTIFICATE-----Generated at Sun Jun 15 23:32:28 2025 by rpki-client