$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa File: 543dded8-773c-37ac-918d-3d2bf1c75c74.roa (raw, json) Hash identifier: Us1Qzxci0GNRaqGk7Xp97XR28mo6XUvFkJvIWQmPCbQ= Subject key identifier: 63:A7:82:BA:59:1E:A9:4D:E6:9E:52:44:48:BD:31:95:8D:9D:EB:08 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA07CDED7F65236811A400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:07:cd:ed:7f:65:23:68:11:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=9b04506f-d0ed-4027-b5d1-aa6d1da354dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:05:01:59:03:9b:ec:c3:6b:b3:a6:4c:a6: b4:38:01:33:63:df:83:92:dc:0f:e9:18:0a:29:ad: 72:56:87:2e:08:aa:b3:f2:0e:c8:54:1b:35:54:8c: 1c:65:bc:25:21:59:d0:86:74:b6:d8:bf:53:22:fa: 4a:9f:21:b3:0e:e1:5a:24:2f:e3:98:ae:c3:71:31: 20:47:d5:44:d9:3a:61:9e:d4:ee:5c:d1:46:1d:71: 56:cb:5a:4d:3b:63:37:8a:b9:db:89:7a:72:58:c7: 52:10:a5:6e:11:74:fa:7b:04:63:b3:62:6c:68:f6: b0:c5:86:07:30:f4:5c:f2:1e:03:0f:0b:3c:d5:36: b3:e1:45:98:f6:70:ea:e2:3e:99:3b:3a:71:88:bd: 21:39:54:e7:57:ee:4f:b5:18:04:7e:28:e8:fb:e1: 69:61:ed:0d:6f:ed:37:b7:83:d4:c8:da:aa:22:59: 63:f1:9c:09:ee:b1:8f:ac:0e:10:68:a6:3d:88:86: f5:f4:c0:71:a1:d4:42:c8:0c:06:97:c7:29:cd:45: c7:27:04:d6:a2:83:11:d0:03:84:12:fc:35:65:44: e9:44:42:d8:03:3a:f7:f0:28:21:bc:c8:cc:c9:9f: 2d:b2:7f:58:45:8c:15:75:96:56:e2:4a:50:2f:6d: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A7:82:BA:59:1E:A9:4D:E6:9E:52:44:48:BD:31:95:8D:9D:EB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:68:36:92:b7:9d:e4:f9:35:20:1d:5d:16:aa:a3:31:99:25: 26:e3:d4:4d:ed:81:f4:bc:61:cf:0b:75:9f:74:67:73:f1:83: e3:af:ee:15:88:5c:02:e5:cc:f3:b7:c5:c5:14:61:40:5e:32: 02:95:08:82:86:a3:dc:d3:52:41:3e:ad:36:16:10:be:52:4d: 45:03:81:57:54:eb:c9:eb:01:cc:6e:f3:d5:6b:52:95:a6:ac: cf:bd:f8:60:c8:c2:f9:ce:9a:08:e4:4f:93:38:26:9e:eb:93: 22:b7:39:af:6c:c2:5e:cc:38:86:9f:0c:07:d7:78:5d:f3:84: a7:f9:75:91:27:aa:a3:b9:1a:d2:f7:ae:7e:41:85:a8:db:d6: 84:43:0d:1b:3b:f7:d2:a4:1d:9a:9b:55:3d:42:9b:cb:51:9e: c7:48:34:9e:de:c5:fa:02:e8:82:9b:f3:65:6d:4b:dd:e3:c1: 3a:33:eb:da:fb:51:05:2f:85:c9:9e:c6:48:23:a0:0a:99:14: 3e:73:21:f1:6f:98:b5:52:4a:f8:e1:92:c5:b9:bb:9d:d6:92: 0c:00:36:a0:9a:7e:b5:12:b0:46:25:c7:d0:1b:82:cb:38:7a: 41:15:90:5f:15:f6:e0:05:e7:43:8c:7a:fa:e3:f4:60:cb:a5: 06:fc:0b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gfN7X9lI2gRpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk OWIwNDUwNmYtZDBlZC00MDI3LWI1ZDEtYWE2ZDFkYTM1NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRMFAVkDm+zDa7OmTKa0OAEzY9+DktwP6RgK Ka1yVocuCKqz8g7IVBs1VIwcZbwlIVnQhnS22L9TIvpKnyGzDuFaJC/jmK7DcTEg R9VE2TphntTuXNFGHXFWy1pNO2M3irnbiXpyWMdSEKVuEXT6ewRjs2JsaPawxYYH MPRc8h4DDws81Taz4UWY9nDq4j6ZOzpxiL0hOVTnV+5PtRgEfijo++FpYe0Nb+03 t4PUyNqqIllj8ZwJ7rGPrA4QaKY9iIb19MBxodRCyAwGl8cpzUXHJwTWooMR0AOE Evw1ZUTpRELYAzr38CghvMjMyZ8tsn9YRYwVdZZW4kpQL21LFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOngrpZHqlN5p5SREi9MZWNnesIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTQzZGRlZDgtNzczYy0z N2FjLTkxOGQtM2QyYmYxYzc1Yzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFoNpK3neT5NSAdXRaqozGZJSbj1E3tgfS8Yc8LdZ90Z3Pxg+Ov7hWI XALlzPO3xcUUYUBeMgKVCIKGo9zTUkE+rTYWEL5STUUDgVdU68nrAcxu89VrUpWm rM+9+GDIwvnOmgjkT5M4Jp7rkyK3Oa9swl7MOIafDAfXeF3zhKf5dZEnqqO5GtL3 rn5Bhajb1oRDDRs799KkHZqbVT1Cm8tRnsdINJ7exfoC6IKb82VtS93jwToz69r7 UQUvhcmexkgjoAqZFD5zIfFvmLVSSvjhksW5u53WkgwANqCafrUSsEYlx9Abgss4 ekEVkF8V9uAF50OMevrj9GDLpQb8C3U= -----END CERTIFICATE-----Generated at Mon Apr 28 02:05:23 2025 by rpki-client