$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6191e4a8-833f-3dd7-886b-ff0f2402992a.roa File: 6191e4a8-833f-3dd7-886b-ff0f2402992a.roa (raw, json) Hash identifier: q/o+KciF2Bwl/IQ+Bv2UyBvYuccEuk5G71Kvt0CbsSk= Subject key identifier: 40:20:CC:31:0C:CF:1F:D3:99:67:B7:20:0A:BC:A2:CC:6F:23:F0:FD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA051078034DA2A4F06200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6191e4a8-833f-3dd7-886b-ff0f2402992a.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:05:10:78:03:4d:a2:a4:f0:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=9c7b80fa-945d-4770-a4b4-53f613d95edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:94:f5:09:3a:08:c9:e6:e1:05:af:77:58: 62:ef:cb:8c:0d:2e:55:bf:b7:34:e2:f4:a1:eb:86: 33:b9:02:7c:2b:af:2c:23:c7:e8:be:74:be:c8:7f: 0e:d5:8c:e6:40:af:91:5d:51:9d:a5:33:6b:69:fa: 11:30:27:58:23:bb:f9:82:5d:b7:19:6d:f5:71:58: 66:92:dd:55:45:bd:0e:4f:02:e0:99:67:f4:97:6c: a9:b0:04:11:ef:90:1b:8b:d9:c9:5a:1b:d4:38:48: d7:b1:1a:e0:e6:ef:6e:e8:09:54:51:ad:75:2d:60: c4:f9:df:2e:a9:f6:1d:e5:57:47:8b:1b:3d:ed:88: 84:c7:64:e2:df:be:32:ea:6f:31:2d:a9:b7:f3:97: 75:f6:32:b0:74:68:df:87:14:b1:c5:79:26:a3:a8: e1:3b:0e:10:f6:be:0d:31:8d:83:41:0f:64:3d:89: a9:79:77:24:69:2a:36:e8:6b:72:2f:a1:15:29:a9: 2c:96:39:a7:c1:ac:e4:84:0e:42:b9:5c:09:bd:7a: c6:20:69:d1:fa:ae:0a:82:29:20:bf:4a:d7:a1:c1: dd:84:60:99:71:c8:8f:53:6e:30:6e:03:22:61:1e: ab:d0:88:16:43:30:54:84:55:28:b7:a2:d4:13:51: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:CC:31:0C:CF:1F:D3:99:67:B7:20:0A:BC:A2:CC:6F:23:F0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6191e4a8-833f-3dd7-886b-ff0f2402992a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e5:7c:4f:80:5a:d5:6f:eb:7e:0f:1a:d2:d6:7c:91:ac:e5: ba:bd:0b:20:a8:30:14:67:c6:41:a6:7c:44:19:b0:60:cf:97: 3d:89:23:9e:cd:68:c7:07:54:c0:6d:a6:82:10:df:ce:74:32: 14:1f:c8:ef:4d:87:9b:e6:da:8e:28:54:6d:6d:9a:83:b6:e5: 05:ed:6d:a9:93:87:52:c7:23:a4:bd:84:ec:c5:cc:d6:6f:6a: c2:1d:73:04:92:70:98:11:8d:cb:92:ff:08:25:b0:ec:2b:6e: cb:f4:74:7a:9e:ad:0e:77:a3:75:c4:0f:af:a3:62:c0:05:ce: 33:07:98:08:6c:1a:8b:93:05:1b:f4:10:c1:0f:79:04:2d:5e: bf:e8:50:4a:bf:1c:2a:c3:5e:08:56:c9:39:55:38:6b:c5:62: 21:46:34:e1:87:d3:a5:22:4b:89:fa:0b:40:1e:8b:a3:48:57: 30:75:55:35:f9:2c:b7:e2:70:2a:3b:9d:a0:e6:a6:f9:8f:0c: 4c:9f:0a:b2:d4:63:65:15:2d:b6:61:1d:bf:5c:bc:32:bc:7c: 57:78:3e:6c:ca:09:c2:fd:f9:c3:26:11:41:e2:90:f3:cf:5b: ff:b3:93:25:25:53:97:cc:9f:33:a5:2e:22:fe:b1:85:33:3f: a5:6a:65:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gUQeANNoqTwYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk OWM3YjgwZmEtOTQ1ZC00NzcwLWE0YjQtNTNmNjEzZDk1ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun+U9Qk6CMnm4QWvd1hi78uMDS5Vv7c04vSh 64YzuQJ8K68sI8fovnS+yH8O1YzmQK+RXVGdpTNrafoRMCdYI7v5gl23GW31cVhm kt1VRb0OTwLgmWf0l2ypsAQR75Abi9nJWhvUOEjXsRrg5u9u6AlUUa11LWDE+d8u qfYd5VdHixs97YiEx2Ti374y6m8xLam385d19jKwdGjfhxSxxXkmo6jhOw4Q9r4N MY2DQQ9kPYmpeXckaSo26GtyL6EVKaksljmnwazkhA5CuVwJvXrGIGnR+q4Kgikg v0rXocHdhGCZcciPU24wbgMiYR6r0IgWQzBUhFUot6LUE1GRCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAgzDEMzx/TmWe3IAq8osxvI/D9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjE5MWU0YTgtODMzZi0z ZGQ3LTg4NmItZmYwZjI0MDI5OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnlfE+AWtVv634PGtLWfJGs5bq9CyCoMBRnxkGmfEQZsGDPlz2JI57N aMcHVMBtpoIQ3850MhQfyO9Nh5vm2o4oVG1tmoO25QXtbamTh1LHI6S9hOzFzNZv asIdcwSScJgRjcuS/wglsOwrbsv0dHqerQ53o3XED6+jYsAFzjMHmAhsGouTBRv0 EMEPeQQtXr/oUEq/HCrDXghWyTlVOGvFYiFGNOGH06UiS4n6C0Aei6NIVzB1VTX5 LLficCo7naDmpvmPDEyfCrLUY2UVLbZhHb9cvDK8fFd4PmzKCcL9+cMmEUHikPPP W/+zkyUlU5fMnzOlLiL+sYUzP6VqZXw= -----END CERTIFICATE-----Generated at Tue Apr 29 08:28:14 2025 by rpki-client