$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa File: 4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa (raw, json) Hash identifier: NAh3SloMk6CaCKDGrlHmUyTtgwa/ccw0qoO5V/wG3JY= Subject key identifier: E0:BC:FD:CA:A9:57:1B:1B:9B:75:34:61:15:53:A5:83:45:61:00:7D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EECE69B147107F9C21C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ee:ce:69:b1:47:10:7f:9c:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=a8458cbb-5c1d-4246-a2b0-089e5b814b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:00:bb:a3:85:11:ba:9b:92:84:bb:05:08: fa:c9:9c:94:96:14:ab:ef:89:2f:63:8c:84:bf:65: 18:56:7d:5f:f6:7e:29:38:28:75:4b:7a:63:45:e9: 4c:22:95:39:19:c5:96:b3:29:91:f9:45:d2:67:a9: a5:9a:6b:3f:98:f7:c2:37:a7:02:16:fb:75:d7:e6: 3d:e1:88:05:b9:7c:0a:bb:ba:10:74:ae:98:68:40: 15:e9:bb:a4:84:50:a4:e7:1d:9a:c8:f8:04:b1:ce: 12:10:c5:fb:27:ac:4a:a8:df:c2:3a:60:7f:a0:0d: 8e:63:43:62:e4:f7:03:df:84:24:36:44:cd:d6:13: af:87:92:c9:96:68:8a:d7:32:5a:54:4b:a2:22:a0: e5:f9:4a:4a:82:a0:b9:5e:c6:3a:be:15:3e:4a:43: 45:43:a8:39:c2:b5:c7:e2:02:02:2d:99:7f:b5:c0: a3:6d:64:55:c5:64:c2:e2:cd:75:2c:29:1a:65:97: fe:41:44:1b:13:ed:cb:d8:b4:09:5b:e4:d5:8c:ca: 5f:d8:64:1d:01:bc:4f:8c:92:ae:85:ca:52:75:4f: c8:c5:d8:ba:5b:d0:06:3f:d6:7b:3f:74:91:97:c2: 9d:b7:ed:09:d4:ea:34:60:c3:a0:2e:a6:83:95:8e: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:FD:CA:A9:57:1B:1B:9B:75:34:61:15:53:A5:83:45:61:00:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4b:09:47:89:36:4f:ba:cb:e3:c4:8d:31:5c:2c:39:54:b0: d9:c2:1f:a8:e6:a3:30:91:a7:af:03:db:37:40:36:cf:68:58: 06:8f:cc:41:9c:b9:90:9e:a5:89:06:a7:79:67:f4:d0:59:84: c9:d3:8c:1d:75:50:35:93:48:16:7a:39:3b:92:18:af:2a:f4: 93:b9:71:c2:cd:98:ca:2c:69:fd:a3:46:0d:f3:30:cd:61:d6: f6:65:1a:3f:16:dd:41:01:de:f3:4f:3a:23:34:cb:02:e4:d6: 2d:27:f3:d2:c5:52:95:2f:5d:61:39:9f:4c:80:4f:0c:3d:49: 82:ae:df:83:30:9e:d3:7b:a9:68:e9:4e:13:04:bd:db:f9:c0: 80:29:8a:4f:31:1b:ca:f5:b9:99:5d:07:31:ae:df:58:1e:a9: a7:b8:f9:55:c6:c0:cd:78:58:7b:e8:16:9e:12:e3:c6:78:8e: a1:ed:bd:64:4c:8c:c2:fe:84:f3:d6:38:87:4e:40:66:51:f9: 7b:55:2f:e6:74:64:10:63:41:9a:06:13:3b:86:e2:14:26:f4: 1b:5e:ed:e8:13:23:8b:4e:31:b7:cb:05:47:85:da:a0:4b:1e: 75:1b:56:02:6e:d4:04:aa:34:bf:41:23:ac:62:9a:c9:77:b6: 57:b3:eb:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e7OabFHEH+cIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YTg0NThjYmItNWMxZC00MjQ2LWEyYjAtMDg5ZTViODE0YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYcAu6OFEbqbkoS7BQj6yZyUlhSr74kvY4yE v2UYVn1f9n4pOCh1S3pjRelMIpU5GcWWsymR+UXSZ6mlmms/mPfCN6cCFvt11+Y9 4YgFuXwKu7oQdK6YaEAV6bukhFCk5x2ayPgEsc4SEMX7J6xKqN/COmB/oA2OY0Ni 5PcD34QkNkTN1hOvh5LJlmiK1zJaVEuiIqDl+UpKgqC5XsY6vhU+SkNFQ6g5wrXH 4gICLZl/tcCjbWRVxWTC4s11LCkaZZf+QUQbE+3L2LQJW+TVjMpf2GQdAbxPjJKu hcpSdU/Ixdi6W9AGP9Z7P3SRl8Kdt+0J1Oo0YMOgLqaDlY4gAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC8/cqpVxsbm3U0YRVTpYNFYQB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGRhZjcwZWItZDU1MC0z MGNjLWE3NWEtMWUxZGIwYmNmOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVLCUeJNk+6y+PEjTFcLDlUsNnCH6jmozCRp68D2zdANs9oWAaPzEGc uZCepYkGp3ln9NBZhMnTjB11UDWTSBZ6OTuSGK8q9JO5ccLNmMosaf2jRg3zMM1h 1vZlGj8W3UEB3vNPOiM0ywLk1i0n89LFUpUvXWE5n0yATww9SYKu34MwntN7qWjp ThMEvdv5wIApik8xG8r1uZldBzGu31geqae4+VXGwM14WHvoFp4S48Z4jqHtvWRM jML+hPPWOIdOQGZR+XtVL+Z0ZBBjQZoGEzuG4hQm9Bte7egTI4tOMbfLBUeF2qBL HnUbVgJu1ASqNL9BI6ximsl3tlez6zQ= -----END CERTIFICATE-----Generated at Sun Apr 27 15:42:47 2025 by rpki-client