$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4de406e2-c4f4-39e6-965a-59d35296acd8.roa File: 4de406e2-c4f4-39e6-965a-59d35296acd8.roa (raw, json) Hash identifier: l4HXF0Rd9bsEaGYg/auXPUgZMfEB4GSIalDRcbVssDw= Subject key identifier: 7A:11:07:A7:5C:71:11:C1:F3:70:C9:DD:01:9C:0C:64:EB:91:25:60 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F1256C65CFB15284FAC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4de406e2-c4f4-39e6-965a-59d35296acd8.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f1:25:6c:65:cf:b1:52:84:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=ef58b650-dc0e-46c6-9a06-afe744baa2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:59:ad:f5:6b:96:16:29:44:a2:60:c3:62: 0f:79:cb:a3:e8:4d:9c:57:13:27:1e:ce:5f:39:b4: 9c:c0:cb:0e:fb:d7:5f:c5:7e:e5:a4:10:f3:c9:7e: d9:49:8f:33:b7:5f:ad:08:52:27:c2:9f:05:a9:40: d6:60:cc:fd:cb:c9:19:8c:9d:79:57:05:76:5e:58: f3:51:90:c0:b0:de:3d:21:b6:60:d0:5a:4e:3f:7f: 95:d6:67:33:65:fb:df:ef:4a:19:05:5e:c8:2c:02: 16:f3:c3:b5:54:fc:cd:9a:32:92:6a:dd:d6:1d:f6: b2:09:8c:d7:95:2d:61:bd:10:63:b4:24:08:80:ea: e4:f4:93:bd:9d:35:be:3d:16:10:fc:4e:73:32:12: 22:07:a3:62:c4:20:db:2e:fc:60:d8:e8:e6:9b:fd: df:a2:90:1c:1a:cc:3b:1b:3d:b9:4a:b6:43:6d:15: 65:03:99:a3:2b:9a:b0:8d:5d:c9:3f:2e:cc:bd:e2: 88:37:cc:8a:f9:d8:08:82:98:fd:dd:0b:b7:ae:62: dd:50:ce:18:39:e4:09:8c:0c:b1:24:12:b0:e7:4f: f2:19:a5:4a:c3:70:40:4e:73:8d:98:ca:4b:b2:ea: 00:d9:f5:ad:4a:04:2f:a7:64:c3:e9:a8:9d:27:c3: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:11:07:A7:5C:71:11:C1:F3:70:C9:DD:01:9C:0C:64:EB:91:25:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4de406e2-c4f4-39e6-965a-59d35296acd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:00:2f:bd:d3:2c:2e:2b:28:f2:df:ad:10:64:71:75:eb:77: 5c:fb:5a:2d:04:cb:71:4c:89:98:10:34:95:02:c8:98:21:c0: 92:a9:bf:4d:94:8a:16:23:2f:c4:c8:b5:b9:be:d1:a4:1e:52: f4:09:ac:3c:0b:86:98:c3:18:d3:cf:83:49:96:42:fd:62:07: f3:af:09:65:1a:2f:38:61:c1:ee:90:61:5b:12:35:ef:6c:60: 89:1b:fc:29:69:7c:51:e2:90:d7:3f:78:0f:9a:b4:f4:b0:3b: 24:20:83:c3:61:cf:dc:57:1f:13:10:ba:81:94:6c:0f:c7:e0: 4a:d2:13:6e:13:68:af:ae:ef:43:b5:91:bf:95:3f:41:dc:4b: 28:1f:26:08:09:60:87:10:f6:08:d1:bc:03:66:39:6c:5f:61: 4b:b7:83:1e:89:69:9e:f9:ce:33:5f:67:d2:25:f5:3a:7e:43: 3e:d5:96:7c:f3:e9:a7:63:e4:ca:2e:14:67:1d:08:78:76:c4: d3:f9:dd:83:7b:32:39:b6:5b:86:f8:59:82:17:8d:33:78:19: 43:ec:30:b0:02:c7:47:16:9c:55:6b:37:04:1e:ea:6d:07:74: bd:23:aa:fc:70:27:3b:7a:02:67:28:91:3f:a4:09:cc:64:8f: d4:b3:c7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fElbGXPsVKE+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZWY1OGI2NTAtZGMwZS00NmM2LTlhMDYtYWZlNzQ0YmFhMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGJZrfVrlhYpRKJgw2IPecuj6E2cVxMnHs5f ObScwMsO+9dfxX7lpBDzyX7ZSY8zt1+tCFInwp8FqUDWYMz9y8kZjJ15VwV2Xljz UZDAsN49IbZg0FpOP3+V1mczZfvf70oZBV7ILAIW88O1VPzNmjKSat3WHfayCYzX lS1hvRBjtCQIgOrk9JO9nTW+PRYQ/E5zMhIiB6NixCDbLvxg2Ojmm/3fopAcGsw7 Gz25SrZDbRVlA5mjK5qwjV3JPy7MveKIN8yK+dgIgpj93Qu3rmLdUM4YOeQJjAyx JBKw50/yGaVKw3BATnONmMpLsuoA2fWtSgQvp2TD6aidJ8PUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoRB6dccRHB83DJ3QGcDGTrkSVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGRlNDA2ZTItYzRmNC0z OWU2LTk2NWEtNTlkMzUyOTZhY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8AL73TLC4rKPLfrRBkcXXrd1z7Wi0Ey3FMiZgQNJUCyJghwJKpv02U ihYjL8TItbm+0aQeUvQJrDwLhpjDGNPPg0mWQv1iB/OvCWUaLzhhwe6QYVsSNe9s YIkb/ClpfFHikNc/eA+atPSwOyQgg8Nhz9xXHxMQuoGUbA/H4ErSE24TaK+u70O1 kb+VP0HcSygfJggJYIcQ9gjRvANmOWxfYUu3gx6JaZ75zjNfZ9Il9Tp+Qz7Vlnzz 6adj5MouFGcdCHh2xNP53YN7Mjm2W4b4WYIXjTN4GUPsMLACx0cWnFVrNwQe6m0H dL0jqvxwJzt6AmcokT+kCcxkj9Szx4Y= -----END CERTIFICATE-----Generated at Sun Apr 27 14:49:33 2025 by rpki-client