$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa File: 5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa (raw, json) Hash identifier: xnnQ975PFxf3zHN+fed8dFlwHiXPoOEZcsM+ZkASw0A= Subject key identifier: 46:2E:90:43:BA:E2:D0:64:5A:84:76:43:FC:64:DB:4F:D1:47:4F:C6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F7D8A0D369D318BFFDC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f7:d8:a0:d3:69:d3:18:bf:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=04ec4c17-445f-4705-a8eb-f4a9f73630d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:28:d2:ca:49:4c:ff:43:37:c3:b9:bd:07: 46:05:3d:3b:a4:bd:1d:9c:28:08:cf:3d:d4:e8:8b: 0c:c7:17:54:26:37:49:93:52:e5:e1:a5:24:ab:67: 7d:04:66:00:9e:3b:4d:b7:22:cb:2c:70:8c:b1:4f: 89:f6:60:b5:a0:e0:fb:a8:49:dd:aa:e2:e3:64:c9: 34:8f:87:04:67:6b:71:52:c7:3c:e6:06:04:24:d4: cf:53:aa:42:a9:66:ba:51:7a:0f:ef:ba:ef:dc:42: a3:59:2c:db:20:77:0c:65:c4:4a:97:56:e2:1b:cf: 81:2f:6c:90:b8:31:5a:19:ff:52:f4:0f:4b:cb:9b: 73:8d:a0:ff:c3:69:11:2d:ea:ba:95:66:5f:47:40: 30:5a:01:63:ba:47:d8:50:f7:dc:d3:0e:0c:cc:ae: da:4d:63:e6:d1:c3:7a:1f:19:ff:cf:fa:9d:e9:87: 13:57:90:a3:7a:1b:ed:6a:ff:1b:5e:4c:86:64:41: a2:43:b7:06:40:71:a2:13:8a:5e:5b:49:5b:64:af: c3:59:0d:10:56:6e:13:e3:91:78:c6:f2:2a:a6:33: 49:a6:84:05:4a:91:c9:18:cf:e3:af:e3:da:28:53: 45:41:7b:ac:69:05:bb:5d:5d:ef:4d:bc:a5:e6:b0: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2E:90:43:BA:E2:D0:64:5A:84:76:43:FC:64:DB:4F:D1:47:4F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:35:d2:a5:37:5b:8b:53:3e:f5:9d:a9:0a:a5:59:b4:61:21: df:e6:f0:b9:6b:22:04:29:c3:6b:ed:3f:0a:6a:c9:f0:b5:10: 37:3f:83:e8:1e:15:4b:7d:4c:f0:c6:7c:81:df:dc:21:65:9e: e3:c3:22:ad:cf:a8:d2:75:5f:b6:06:a0:99:dc:9b:64:cc:6f: 97:fb:fc:39:27:6a:af:27:4d:b0:8f:fc:3a:2a:ac:a2:5e:ac: de:db:bc:9f:73:66:43:64:3f:b8:85:6e:ef:d6:76:50:02:6a: 5c:14:93:f3:a9:96:0e:98:9c:f4:5d:c0:28:84:f8:46:47:cc: a9:16:e3:84:55:61:df:dd:19:ef:11:bd:1a:1c:ca:ca:5f:b4: 0d:c9:6e:a1:51:2c:ea:52:ce:48:fd:09:0d:cb:cb:ba:63:07: 3f:13:e1:44:0b:cd:cd:1e:f6:57:1f:6e:03:11:0b:3d:36:ba: 3f:b3:d8:8a:cf:6d:a6:c8:1e:98:59:a4:97:35:d7:85:37:77: f5:7b:f4:bb:ad:cb:37:9a:67:3c:c0:32:f8:f4:b4:c2:0e:82: 17:44:08:37:0c:2d:d8:e6:81:82:27:c9:ca:01:2f:21:7c:76: 21:28:5e:92:74:31:d9:fa:91:9a:12:54:3f:cd:8d:42:ee:cc: f0:c1:87:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+ffYoNNp0xi//cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MDRlYzRjMTctNDQ1Zi00NzA1LWE4ZWItZjRhOWY3MzYzMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4go0spJTP9DN8O5vQdGBT07pL0dnCgIzz3U 6IsMxxdUJjdJk1Ll4aUkq2d9BGYAnjtNtyLLLHCMsU+J9mC1oOD7qEndquLjZMk0 j4cEZ2txUsc85gYEJNTPU6pCqWa6UXoP77rv3EKjWSzbIHcMZcRKl1biG8+BL2yQ uDFaGf9S9A9Ly5tzjaD/w2kRLeq6lWZfR0AwWgFjukfYUPfc0w4MzK7aTWPm0cN6 Hxn/z/qd6YcTV5Cjehvtav8bXkyGZEGiQ7cGQHGiE4peW0lbZK/DWQ0QVm4T45F4 xvIqpjNJpoQFSpHJGM/jr+PaKFNFQXusaQW7XV3vTbyl5rA4mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYukEO64tBkWoR2Q/xk20/RR0/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTE0NmU2ZGUtY2JjMi0z YzFmLTlhOGEtNjQwYzIzNzEyNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC810qU3W4tTPvWdqQqlWbRhId/m8LlrIgQpw2vtPwpqyfC1EDc/g+ge FUt9TPDGfIHf3CFlnuPDIq3PqNJ1X7YGoJncm2TMb5f7/Dknaq8nTbCP/DoqrKJe rN7bvJ9zZkNkP7iFbu/WdlACalwUk/Oplg6YnPRdwCiE+EZHzKkW44RVYd/dGe8R vRocyspftA3JbqFRLOpSzkj9CQ3Ly7pjBz8T4UQLzc0e9lcfbgMRCz02uj+z2IrP babIHphZpJc114U3d/V79LutyzeaZzzAMvj0tMIOghdECDcMLdjmgYInycoBLyF8 diEoXpJ0Mdn6kZoSVD/NjULuzPDBh8k= -----END CERTIFICATE-----Generated at Sun Apr 27 14:47:04 2025 by rpki-client