$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa File: 65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa (raw, json) Hash identifier: b+MaH1gXhSg/+nEoMSgEDn5Wt1hID/akVSQRWnR8/wI= Subject key identifier: 2B:97:A1:FD:51:53:78:75:C7:03:C3:4D:C4:9B:15:8F:90:E0:E2:06 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EF52B578FBB354A7DA80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ef:52:b5:78:fb:b3:54:a7:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=f9a5ad3b-3955-4735-8a7c-154476e30b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:77:08:ec:77:5d:18:6e:42:ec:e1:b4:72: 12:2c:d6:1d:93:23:50:11:3b:52:73:5d:33:3a:5b: fe:26:51:c1:6a:b2:2b:42:8a:68:3d:f7:0a:94:90: a1:69:7e:c6:c5:1d:9e:32:b5:29:97:45:b0:50:e7: 03:1a:a7:d2:9a:14:3f:eb:6f:63:5b:24:98:ac:fe: 8b:33:8b:75:c2:bb:fe:b7:a1:f2:a1:9f:f2:4c:f2: 11:08:88:27:7e:51:ee:a0:b1:42:ed:3e:44:6e:9f: f3:e6:a4:22:85:b6:07:37:eb:99:c0:5e:94:e1:2e: 8b:4e:b7:d5:e0:d1:71:ff:a7:ae:0b:45:5c:1a:4e: f0:2f:f0:b2:02:b4:e9:f1:ce:90:b0:a1:64:f6:bd: 11:da:e0:73:2a:86:e9:32:e2:9c:86:8a:d6:f9:30: 7d:0e:cc:e5:33:6c:69:4a:52:3a:b4:55:5f:13:4d: 1e:78:f5:50:ec:49:a6:be:f7:ae:55:6e:da:f5:a9: a6:3a:26:ce:94:b3:d6:27:3c:92:b9:de:42:ad:bb: 0d:54:dc:99:80:9a:da:d3:81:bf:cd:f7:2e:64:18: 8a:60:1d:d8:a1:3b:ae:34:58:a3:ac:50:62:a7:6b: 39:33:9a:24:33:d2:b2:c9:36:cd:bc:1d:89:60:ef: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:97:A1:FD:51:53:78:75:C7:03:C3:4D:C4:9B:15:8F:90:E0:E2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65b3a49a-b4a5-3721-9889-ddc1488b4b62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:51:1a:41:29:ca:e1:b6:68:a2:55:3e:0a:09:0e:f8:13:ef: d2:ba:7b:95:3e:5c:4a:42:5e:e3:d9:38:ac:bc:12:13:67:1a: 97:9d:53:4b:fb:72:fc:00:ac:ef:bd:ec:aa:9a:5d:72:d6:e3: 74:7a:24:fd:69:05:85:24:6f:9b:63:b8:54:06:c0:1c:7c:39: 97:16:21:25:08:83:74:27:96:cc:ed:6f:c4:75:32:ba:2d:43: 87:c4:70:cb:2a:da:31:51:d1:cc:48:55:07:64:0e:96:ae:9a: f6:48:4d:8f:0e:c5:0e:ab:b2:f3:82:68:a6:40:3e:71:03:d0: 0d:26:fe:45:40:21:70:bf:db:6f:88:33:a7:9e:e9:07:f4:52: 69:4b:e4:62:e4:1e:b9:77:5e:40:a3:3e:3f:2c:a9:62:66:1e: 85:07:90:0f:85:2d:e4:2b:34:0c:08:0b:1d:44:e0:c6:59:4d: 53:1e:f0:30:7f:c0:b1:75:1e:24:2a:8d:5c:5f:96:64:0c:9d: 66:ba:17:4f:30:46:80:d7:65:1e:80:87:86:81:e4:d9:21:fe: 54:3b:ea:ca:21:65:73:ce:f8:7e:e2:70:b0:2f:b3:fe:3a:7a: 0a:a5:9b:87:db:e6:04:7e:86:b3:6c:3b:52:90:21:86:1b:2c: 35:c1:75:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e9StXj7s1Sn2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZjlhNWFkM2ItMzk1NS00NzM1LThhN2MtMTU0NDc2ZTMwYjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz213COx3XRhuQuzhtHISLNYdkyNQETtSc10z Olv+JlHBarIrQopoPfcKlJChaX7GxR2eMrUpl0WwUOcDGqfSmhQ/629jWySYrP6L M4t1wrv+t6HyoZ/yTPIRCIgnflHuoLFC7T5Ebp/z5qQihbYHN+uZwF6U4S6LTrfV 4NFx/6euC0VcGk7wL/CyArTp8c6QsKFk9r0R2uBzKobpMuKchorW+TB9DszlM2xp SlI6tFVfE00eePVQ7EmmvveuVW7a9ammOibOlLPWJzySud5CrbsNVNyZgJra04G/ zfcuZBiKYB3YoTuuNFijrFBip2s5M5okM9KyyTbNvB2JYO/OTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuXof1RU3h1xwPDTcSbFY+Q4OIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjViM2E0OWEtYjRhNS0z NzIxLTk4ODktZGRjMTQ4OGI0YjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZRGkEpyuG2aKJVPgoJDvgT79K6e5U+XEpCXuPZOKy8EhNnGpedU0v7 cvwArO+97KqaXXLW43R6JP1pBYUkb5tjuFQGwBx8OZcWISUIg3Qnlsztb8R1Mrot Q4fEcMsq2jFR0cxIVQdkDpaumvZITY8OxQ6rsvOCaKZAPnED0A0m/kVAIXC/22+I M6ee6Qf0UmlL5GLkHrl3XkCjPj8sqWJmHoUHkA+FLeQrNAwICx1E4MZZTVMe8DB/ wLF1HiQqjVxflmQMnWa6F08wRoDXZR6Ah4aB5Nkh/lQ76sohZXPO+H7icLAvs/46 egqlm4fb5gR+hrNsO1KQIYYbLDXBdbg= -----END CERTIFICATE-----Generated at Sun Apr 27 22:57:15 2025 by rpki-client