$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa File: 4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa (raw, json) Hash identifier: cPTYzI/tqGeDMi5BmTFx8zkWvtPyZMLExP2Xg2p8JNE= Subject key identifier: 72:AD:FC:91:B3:6F:85:B7:1E:73:3A:3B:F7:8B:86:F0:3D:68:19:E1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E6497B73807785869CC1EC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:97:b7:38:07:78:58:69:cc:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=5f2dab7f-abba-4e37-96ee-e8a50eb3b067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:ad:c3:b3:30:b1:63:5b:04:df:01:67:15: a1:25:4a:78:fb:df:eb:d7:c2:53:3c:34:14:c1:b4: 8e:ed:98:f0:8c:48:7e:69:a7:06:3b:13:d2:14:ce: 45:70:a9:98:9a:bd:8e:19:72:7d:08:c6:e2:a5:60: 0c:2b:de:c0:c0:d9:00:83:e8:75:0f:b8:f3:de:50: da:28:af:81:3a:3b:81:b6:d4:d2:c6:b7:a8:18:2a: fd:4c:c9:c6:e0:c4:f4:f5:6b:a4:5a:62:77:cf:f0: c9:8f:3a:34:89:cd:86:1a:fb:51:31:16:66:1a:40: 5c:0e:91:23:f6:4d:8c:8c:58:0f:e3:2f:01:6b:10: 6e:cd:59:f3:29:04:9e:20:81:63:6e:78:7b:d8:c1: 41:65:ed:4b:2e:d0:4a:9f:e7:c6:86:75:02:a5:05: 2f:4b:ea:fe:80:3a:3d:d6:71:29:10:0c:ff:28:91: 19:65:b0:ca:13:13:41:59:b7:f0:73:98:42:4b:42: a3:2b:17:8a:69:50:f5:5f:f6:bb:6f:ea:58:75:91: 1d:34:c2:32:62:d8:4b:23:52:fb:e5:b2:d0:59:30: f1:aa:31:d8:59:2b:ed:11:51:d8:64:cc:18:d0:a9: 06:da:89:02:c0:88:b7:f0:2d:a7:6e:3a:f3:87:d8: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AD:FC:91:B3:6F:85:B7:1E:73:3A:3B:F7:8B:86:F0:3D:68:19:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4d9f3480-3fc5-3e1c-9434-19837d1765f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:46:63:aa:7d:3f:f2:2a:6b:47:07:df:40:b5:fa:d5:b8:ba: fb:1d:f7:a0:55:4c:86:74:84:07:1a:76:cc:df:3c:6a:bd:d5: 5c:47:ee:b8:d8:7d:a2:be:42:2c:58:a1:af:3e:71:2d:f3:36: 54:14:e1:8c:1f:0f:82:85:95:d5:5a:28:0e:f3:1f:90:45:5e: 1b:7c:49:26:93:82:91:54:52:75:68:4f:a3:5f:78:6e:80:43: 5f:fb:0f:6a:cd:96:4c:54:bc:c8:52:ce:97:7a:95:0c:8c:1f: 0b:a8:4b:53:5f:a1:60:76:32:34:63:0a:b3:90:c0:5e:b6:40: c7:60:cf:ac:3e:f8:5e:4d:a3:f2:28:49:48:37:4d:91:7d:79: e0:f0:01:d3:e7:45:bc:01:77:cf:4b:0d:ad:b7:ac:7b:49:f3: 52:6c:43:65:79:a2:64:0a:09:21:49:42:2f:78:62:5f:40:01: 0d:f1:b3:00:81:7a:b4:94:36:d3:09:8c:82:24:94:a8:9c:72: c4:0c:6b:f0:59:0d:4f:e5:30:42:b5:0e:46:2d:b2:44:34:88: 08:7d:5f:24:a6:4c:47:ba:93:ff:e9:12:f6:46:19:63:fc:6e: 9f:c7:55:5c:78:90:fd:f5:89:2b:86:2a:ff:08:0a:ef:bf:b2: ac:46:f4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJe3OAd4WGnMHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NWYyZGFiN2YtYWJiYS00ZTM3LTk2ZWUtZThhNTBlYjNiMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruStw7MwsWNbBN8BZxWhJUp4+9/r18JTPDQU wbSO7ZjwjEh+aacGOxPSFM5FcKmYmr2OGXJ9CMbipWAMK97AwNkAg+h1D7jz3lDa KK+BOjuBttTSxreoGCr9TMnG4MT09WukWmJ3z/DJjzo0ic2GGvtRMRZmGkBcDpEj 9k2MjFgP4y8BaxBuzVnzKQSeIIFjbnh72MFBZe1LLtBKn+fGhnUCpQUvS+r+gDo9 1nEpEAz/KJEZZbDKExNBWbfwc5hCS0KjKxeKaVD1X/a7b+pYdZEdNMIyYthLI1L7 5bLQWTDxqjHYWSvtEVHYZMwY0KkG2okCwIi38C2nbjrzh9i76QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKt/JGzb4W3HnM6O/eLhvA9aBnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGQ5ZjM0ODAtM2ZjNS0z ZTFjLTk0MzQtMTk4MzdkMTc2NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApGY6p9P/Iqa0cH30C1+tW4uvsd96BVTIZ0hAcadszfPGq91VxH7rjY faK+QixYoa8+cS3zNlQU4YwfD4KFldVaKA7zH5BFXht8SSaTgpFUUnVoT6NfeG6A Q1/7D2rNlkxUvMhSzpd6lQyMHwuoS1NfoWB2MjRjCrOQwF62QMdgz6w++F5No/Io SUg3TZF9eeDwAdPnRbwBd89LDa23rHtJ81JsQ2V5omQKCSFJQi94Yl9AAQ3xswCB erSUNtMJjIIklKiccsQMa/BZDU/lMEK1DkYtskQ0iAh9XySmTEe6k//pEvZGGWP8 bp/HVVx4kP31iSuGKv8ICu+/sqxG9DI= -----END CERTIFICATE-----Generated at Sun Apr 27 17:46:39 2025 by rpki-client