$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa File: 501e8e72-de2b-3185-a1ac-945d85083b8f.roa (raw, json) Hash identifier: +Ko5Il0XWeGdKHXNilqdNBim6X1rHeaCFsBmht8Ktuc= Subject key identifier: A9:F3:E8:36:39:3D:12:8A:EC:E9:73:F7:03:BD:97:4F:C9:01:65:FC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0A56487FC9062EE87500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0a:56:48:7f:c9:06:2e:e8:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=b92a8da4-be80-45da-ba4b-83494bc6b9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:c1:9e:bb:7f:76:ae:9b:bd:58:d9:95:61: 9a:d8:7c:5f:a7:3d:93:5f:7f:f2:62:1c:ed:54:d8: cc:35:8a:4d:1f:4c:3f:57:32:be:36:59:0c:90:4c: b8:50:14:d2:16:15:0a:81:dd:f1:70:90:ae:bc:53: 19:68:51:4e:e9:38:35:4e:36:a8:98:67:6e:98:4d: 6a:8e:83:94:a5:ad:13:62:9d:78:5b:53:31:be:09: 95:ee:8e:b9:dd:ae:e4:cf:44:d9:52:96:df:84:f4: 1b:7c:da:8d:b0:50:9d:4a:06:86:b0:38:56:c4:58: 47:7f:68:c2:30:5f:70:5c:b9:c5:8f:d2:1f:1f:23: ee:10:12:4c:f7:e0:93:a0:d7:9a:f4:9c:76:ee:ad: 09:2c:a3:7c:3b:6d:a4:61:db:d0:9b:40:ee:30:ff: 4b:9b:a5:ac:7d:c4:26:3a:ba:c2:51:13:f5:f0:a6: b3:0a:6c:b8:4d:40:fb:cb:3f:71:c3:bd:e7:f0:61: 0e:85:1f:51:42:cc:66:04:e5:ac:db:1c:64:99:f4: 81:b0:7e:9a:31:36:8f:a3:15:80:18:33:9d:8c:d3: 4d:6f:67:72:59:5a:00:40:42:a9:bb:29:40:28:a6: ac:16:04:89:21:c9:4e:2d:8a:4b:29:4f:fc:32:08: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F3:E8:36:39:3D:12:8A:EC:E9:73:F7:03:BD:97:4F:C9:01:65:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:df:74:70:da:e1:39:12:6f:ca:79:ca:7e:a0:05:87:9d:bf: 9b:10:aa:fa:46:d5:45:2a:71:fa:a1:5a:06:23:38:7a:ce:33: 50:9b:2f:c3:a3:7d:33:0f:c6:40:d1:78:92:dc:02:f1:7b:9a: 12:3d:61:b1:77:21:29:20:0e:2c:9f:52:c9:15:82:06:a9:eb: 0a:6c:07:5b:aa:70:50:58:ee:b3:0c:9d:56:5a:ce:22:4e:eb: 44:0f:9d:82:25:56:c6:19:d7:a2:5d:1b:03:77:fe:f8:cc:4a: bb:b3:61:99:a9:34:fa:dd:23:57:ea:a4:4f:85:b6:dc:87:4f: 8e:86:01:00:71:60:92:ee:78:c2:06:7d:2c:c7:b7:92:77:a1: 34:76:72:be:aa:4a:da:97:9e:64:d7:db:1b:f6:9c:10:fa:00: a0:62:20:a9:bb:4b:3c:f6:92:bf:2e:10:80:6e:60:0a:80:7f: fd:62:8b:8c:08:aa:79:7b:5a:7f:68:84:2d:d5:02:e8:49:b9: ea:b2:6b:54:5d:95:44:8b:db:42:52:d2:eb:41:87:6f:72:33: b4:28:fc:00:30:61:44:cb:fe:96:a3:95:d9:2d:a2:d3:6b:3a: e0:d4:70:e4:04:47:3b:63:2e:af:45:8f:6b:4e:a9:11:3e:cf: e7:9a:68:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gpWSH/JBi7odQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YjkyYThkYTQtYmU4MC00NWRhLWJhNGItODM0OTRiYzZiOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOXBnrt/dq6bvVjZlWGa2Hxfpz2TX3/yYhzt VNjMNYpNH0w/VzK+NlkMkEy4UBTSFhUKgd3xcJCuvFMZaFFO6Tg1TjaomGdumE1q joOUpa0TYp14W1MxvgmV7o653a7kz0TZUpbfhPQbfNqNsFCdSgaGsDhWxFhHf2jC MF9wXLnFj9IfHyPuEBJM9+CToNea9Jx27q0JLKN8O22kYdvQm0DuMP9Lm6WsfcQm OrrCURP18KazCmy4TUD7yz9xw73n8GEOhR9RQsxmBOWs2xxkmfSBsH6aMTaPoxWA GDOdjNNNb2dyWVoAQEKpuylAKKasFgSJIclOLYpLKU/8MgiwWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnz6DY5PRKK7Olz9wO9l0/JAWX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTAxZThlNzItZGUyYi0z MTg1LWExYWMtOTQ1ZDg1MDgzYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHfdHDa4TkSb8p5yn6gBYedv5sQqvpG1UUqcfqhWgYjOHrOM1CbL8Oj fTMPxkDReJLcAvF7mhI9YbF3ISkgDiyfUskVggap6wpsB1uqcFBY7rMMnVZaziJO 60QPnYIlVsYZ16JdGwN3/vjMSruzYZmpNPrdI1fqpE+FttyHT46GAQBxYJLueMIG fSzHt5J3oTR2cr6qStqXnmTX2xv2nBD6AKBiIKm7Szz2kr8uEIBuYAqAf/1ii4wI qnl7Wn9ohC3VAuhJueqya1RdlUSL20JS0utBh29yM7Qo/AAwYUTL/pajldktotNr OuDUcOQERztjLq9Fj2tOqRE+z+eaaI4= -----END CERTIFICATE-----Generated at Sun Apr 27 14:48:03 2025 by rpki-client