$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa File: 4add4991-07f1-3fc2-8171-b1795c3f31f0.roa (raw, json) Hash identifier: 2xsyxO/wn6+sPVIFySezsNuN9XgtbQzOqPmu/mRuzNw= Subject key identifier: CA:A6:D3:36:51:78:BE:71:25:97:79:5A:04:9D:46:C6:05:82:54:C3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D19FCC1CE84E2BD7F880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d1:9f:cc:1c:e8:4e:2b:d7:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4f552c63-d6db-4a8e-8293-5086c8fc61ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:3c:d5:e5:d2:9e:64:2d:8a:86:19:58:ba: ac:8c:be:47:a6:aa:d7:41:48:0e:b3:76:44:71:2c: ed:ab:77:37:76:42:e3:e7:f9:d2:75:0f:ed:95:4e: 13:d4:75:56:1b:84:cb:51:24:2a:4c:eb:b9:ae:07: 1b:40:f6:9c:1e:8c:23:4d:21:b2:49:fe:ac:0b:19: 3a:06:bb:a0:45:36:4a:b2:47:99:22:ff:ae:3f:33: 19:d5:0a:8b:6c:6f:0e:e2:73:c5:6b:2a:eb:98:54: 5c:ad:38:76:16:4e:bc:fc:f1:c0:a3:dd:d4:8b:0c: 59:6c:fa:e2:2a:96:76:c2:3d:53:94:6d:04:dd:7e: f0:ea:ee:d8:c9:e4:36:34:41:c5:3c:92:2f:26:ad: b1:9e:1f:78:b7:83:03:1c:95:b0:10:d2:67:38:4a: 3c:9a:0d:50:d6:3e:d4:c1:36:12:7a:61:50:82:d0: 3e:3b:16:af:eb:dd:07:46:91:18:0b:6f:29:9b:35: b0:bc:c2:68:92:a6:9a:2a:16:21:24:88:84:dd:cc: 12:47:77:df:87:a0:8b:cf:1e:3c:e8:ec:1c:97:c5: 87:3c:90:5a:8b:9f:de:93:61:b4:ad:6f:59:28:e1: 68:ac:a6:a0:1e:48:9b:cc:ce:90:d5:32:c7:ae:7e: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:D3:36:51:78:BE:71:25:97:79:5A:04:9D:46:C6:05:82:54:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8a:a4:e8:80:45:2b:aa:21:1f:77:63:30:bb:e1:40:0b:cc: b2:c9:5c:2e:ff:93:aa:b6:57:47:79:e9:70:86:92:0d:23:ce: 35:80:be:4e:2f:b7:1d:00:80:fb:05:17:22:21:d6:0d:d8:ab: f3:2f:35:46:a2:5c:7a:bd:bb:8c:34:83:dc:c4:59:99:92:81: 54:30:ae:a2:cb:4f:db:77:51:36:2b:01:82:a0:0c:9b:db:13: b7:e2:01:a0:03:8c:a6:84:c9:f0:24:41:36:d8:e5:94:4c:c7: de:0c:6a:9e:5f:de:e7:42:67:71:5c:03:68:a4:62:ee:79:ad: 09:b0:7f:89:80:a7:c7:cd:d5:8b:3b:9a:95:e0:40:3e:f9:ea: d1:a0:e7:be:c8:f5:8a:92:b6:40:4e:d1:71:88:f7:fc:e7:ba: 59:3d:f7:1b:b9:c5:44:24:69:7c:09:2f:d5:c1:3f:3d:98:c8: d0:7d:cd:2a:34:a0:fc:4c:0f:53:ed:d2:2b:01:ba:af:39:e6: 04:f8:fe:1a:0a:b2:e8:d4:e8:c9:a8:35:dd:8e:47:90:7a:9a: c8:aa:6d:d7:d3:b3:0a:39:44:c5:a2:ca:e6:aa:78:94:88:6c: 1a:45:c1:0e:1b:b9:67:71:28:eb:db:ea:c5:c3:66:d1:02:fb: bf:3c:b1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNGfzBzoTivX+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NGY1NTJjNjMtZDZkYi00YThlLTgyOTMtNTA4NmM4ZmM2MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheQ81eXSnmQtioYZWLqsjL5HpqrXQUgOs3ZE cSztq3c3dkLj5/nSdQ/tlU4T1HVWG4TLUSQqTOu5rgcbQPacHowjTSGySf6sCxk6 BrugRTZKskeZIv+uPzMZ1QqLbG8O4nPFayrrmFRcrTh2Fk68/PHAo93UiwxZbPri KpZ2wj1TlG0E3X7w6u7YyeQ2NEHFPJIvJq2xnh94t4MDHJWwENJnOEo8mg1Q1j7U wTYSemFQgtA+Oxav690HRpEYC28pmzWwvMJokqaaKhYhJIiE3cwSR3ffh6CLzx48 6Owcl8WHPJBai5/ek2G0rW9ZKOForKagHkibzM6Q1TLHrn7imwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqm0zZReL5xJZd5WgSdRsYFglTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGFkZDQ5OTEtMDdmMS0z ZmMyLTgxNzEtYjE3OTVjM2YzMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmKpOiARSuqIR93YzC74UALzLLJXC7/k6q2V0d56XCGkg0jzjWAvk4v tx0AgPsFFyIh1g3Yq/MvNUaiXHq9u4w0g9zEWZmSgVQwrqLLT9t3UTYrAYKgDJvb E7fiAaADjKaEyfAkQTbY5ZRMx94Map5f3udCZ3FcA2ikYu55rQmwf4mAp8fN1Ys7 mpXgQD756tGg577I9YqStkBO0XGI9/znulk99xu5xUQkaXwJL9XBPz2YyNB9zSo0 oPxMD1Pt0isBuq855gT4/hoKsujU6MmoNd2OR5B6msiqbdfTswo5RMWiyuaqeJSI bBpFwQ4buWdxKOvb6sXDZtEC+788sfs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:21 2025 by rpki-client