$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa File: 66b275d0-8075-3aac-897b-e4e1aa843cae.roa (raw, json) Hash identifier: JIkDw+WMDzBjHH79KwjCFBl5HbCFzEB2whQCrc6+m2M= Subject key identifier: B8:06:B5:1E:8C:A7:E4:3F:B0:20:D1:D2:EA:55:EA:07:D9:41:28:83 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA09DB3672951690AAF1C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:09:db:36:72:95:16:90:aa:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=574c37e1-2e94-413d-b294-f3024dd50a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:92:bb:e8:7b:06:fd:8f:da:c3:eb:4c:af:ce: 6e:09:12:e5:43:47:15:bf:1c:c4:57:f5:55:43:55: 1a:d2:13:61:ec:a3:16:a6:14:5b:a1:5c:2d:4b:fc: 24:45:2d:f1:6e:25:f6:2c:37:d5:cd:b6:b1:b7:e0: 84:c1:49:85:42:75:ab:ac:1b:7b:7d:76:83:56:7b: 58:86:68:fd:b2:47:9f:ab:82:e7:8f:4f:7b:53:c7: 42:65:6e:9a:1e:3e:b1:73:e3:c3:b8:cf:e4:96:93: 79:5f:ae:b3:bb:a4:8e:23:21:66:d2:cd:02:3d:09: 2d:e8:40:36:ee:90:13:bc:17:b6:d9:c3:44:05:00: ac:45:b9:8a:ed:f0:90:37:dc:b3:bd:39:86:37:f6: 70:c7:1e:f1:67:55:f2:c6:b6:72:3a:ed:a0:ee:8e: 03:93:d9:4a:6a:90:8c:82:69:cc:f1:c1:f0:29:fb: 1a:b5:54:e3:3b:8f:4e:db:44:a0:50:57:33:5a:e9: f7:53:c9:c4:e8:df:21:b3:df:dc:12:58:e5:57:33: f0:e3:1c:89:53:0e:58:ec:ee:89:8d:0b:7a:d0:8b: 18:e1:88:f9:f7:fd:d7:13:79:85:0d:ed:89:40:a4: 30:4a:11:22:3f:8c:99:87:1e:65:30:e3:91:86:ad: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:06:B5:1E:8C:A7:E4:3F:B0:20:D1:D2:EA:55:EA:07:D9:41:28:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0d:9a:ac:94:c5:57:c9:31:31:68:de:28:08:6d:fa:ce:11: 03:bb:27:82:c2:c1:a7:b6:24:71:4b:43:de:a8:84:75:d0:c7: be:14:a1:9f:38:c4:b8:2a:87:cc:e6:93:2c:87:f8:b2:e0:dc: 83:e3:44:6c:bd:9d:8a:cd:05:7b:bd:86:a7:d6:d9:2c:47:68: 57:7c:7f:6c:48:70:04:78:81:ac:60:f6:31:3d:a4:7b:62:f7: 68:2f:ba:b3:60:eb:81:0e:bd:ca:e8:c5:44:4f:6e:60:b1:93: c0:be:1c:0d:51:a6:bb:be:07:21:cf:4e:11:58:2b:d8:a7:7b: 34:c4:83:fe:0c:cd:9c:ae:4d:68:4f:42:33:7b:cb:53:79:35: f7:14:cf:fc:52:f5:66:be:4e:70:51:59:78:18:03:55:4d:ea: 1a:58:2b:24:bf:ae:1c:6f:82:b2:8f:3b:b2:0e:2b:68:e5:26: 8a:ab:40:75:cc:70:c1:62:e3:84:2b:20:c7:8e:cc:99:3d:6e: db:96:49:b0:ca:b7:6b:50:c6:24:c6:3f:61:55:61:f2:67:2c: 96:ce:1d:2e:37:56:78:e9:4d:c8:a0:67:cb:f0:71:07:f5:9e: fb:29:c6:e4:63:79:af:11:c7:42:87:5d:2b:65:3b:de:0c:55: 46:d5:56:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gnbNnKVFpCq8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NTc0YzM3ZTEtMmU5NC00MTNkLWIyOTQtZjMwMjRkZDUwYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpK76HsG/Y/aw+tMr85uCRLlQ0cVvxzEV/VV Q1Ua0hNh7KMWphRboVwtS/wkRS3xbiX2LDfVzbaxt+CEwUmFQnWrrBt7fXaDVntY hmj9skefq4Lnj097U8dCZW6aHj6xc+PDuM/klpN5X66zu6SOIyFm0s0CPQkt6EA2 7pATvBe22cNEBQCsRbmK7fCQN9yzvTmGN/Zwxx7xZ1XyxrZyOu2g7o4Dk9lKapCM gmnM8cHwKfsatVTjO49O20SgUFczWun3U8nE6N8hs9/cEljlVzPw4xyJUw5Y7O6J jQt60IsY4Yj59/3XE3mFDe2JQKQwShEiP4yZhx5lMOORhq2RiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgGtR6Mp+Q/sCDR0upV6gfZQSiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjZiMjc1ZDAtODA3NS0z YWFjLTg5N2ItZTRlMWFhODQzY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgNmqyUxVfJMTFo3igIbfrOEQO7J4LCwae2JHFLQ96ohHXQx74UoZ84 xLgqh8zmkyyH+LLg3IPjRGy9nYrNBXu9hqfW2SxHaFd8f2xIcAR4gaxg9jE9pHti 92gvurNg64EOvcroxURPbmCxk8C+HA1Rpru+ByHPThFYK9inezTEg/4MzZyuTWhP QjN7y1N5NfcUz/xS9Wa+TnBRWXgYA1VN6hpYKyS/rhxvgrKPO7IOK2jlJoqrQHXM cMFi44QrIMeOzJk9btuWSbDKt2tQxiTGP2FVYfJnLJbOHS43VnjpTcigZ8vwcQf1 nvspxuRjea8Rx0KHXStlO94MVUbVVsw= -----END CERTIFICATE-----Generated at Sun Apr 27 22:06:01 2025 by rpki-client