$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ad966e9-a654-354e-92fe-2662861bb069.roa File: 6ad966e9-a654-354e-92fe-2662861bb069.roa (raw, json) Hash identifier: MwHLzH49tODMfe+JBlyxFJ0f3jZctoyZnrA4MRQ6hwo= Subject key identifier: 1D:2A:20:5C:FE:61:7A:3F:5A:4A:E7:1B:5B:83:63:AF:DB:40:76:D8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0B477DF27D8118A7D940 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ad966e9-a654-354e-92fe-2662861bb069.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0b:47:7d:f2:7d:81:18:a7:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=0c3b14aa-ef34-42e6-85ef-d7a1aa1f861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:04:8f:b8:ba:fe:0c:68:35:04:94:c7:de: 52:21:6b:c4:93:7e:e1:83:91:a0:bb:e3:b1:2d:8e: 23:6b:2a:9d:d7:d5:db:0b:32:76:3a:dc:89:1a:0e: 64:b8:2c:47:7d:07:c5:60:61:9e:40:01:f6:6d:8e: 62:fe:a6:c5:8c:05:6d:6b:e1:81:9a:b4:99:b9:8b: 31:6e:f4:20:88:4d:cc:15:36:a8:d8:9f:0a:e2:b7: cc:6c:07:b1:29:38:d9:74:b0:fd:5e:53:6b:c9:4a: b7:29:b3:a8:ce:82:78:3a:3f:99:06:fd:11:ad:24: fc:76:ac:06:14:19:84:cd:d4:59:48:c3:cb:36:3a: 89:c2:f7:af:a3:38:08:1f:5f:6c:1a:7a:f3:7c:00: f9:98:66:e2:2a:0d:64:ad:ed:7a:5f:e9:0f:c6:92: 3b:a9:35:d2:14:ac:d0:ab:94:92:88:51:53:b8:98: 32:b5:9b:3f:57:68:15:d6:9d:ee:c6:69:8a:41:ca: da:21:78:8d:23:04:f1:ee:be:c7:39:a7:ef:e7:a5: 0d:47:ef:86:6d:81:57:01:96:f1:aa:71:77:1b:11: cd:fd:7b:e5:46:3f:98:6d:3e:83:f4:83:4a:d6:32: 07:55:e2:30:18:d2:bf:a3:d3:2e:44:6b:a6:81:36: 16:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:20:5C:FE:61:7A:3F:5A:4A:E7:1B:5B:83:63:AF:DB:40:76:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6ad966e9-a654-354e-92fe-2662861bb069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f3:a0:38:e5:cb:98:c1:8d:1b:08:48:ec:73:6f:5f:c2:eb: c2:59:d6:eb:b9:28:ab:80:f2:28:f6:4c:db:fc:2e:21:0e:e9: e4:ae:c1:12:7d:cc:3b:ed:15:a3:0a:c8:e2:e3:2b:af:b8:7a: 44:f9:7e:2c:a4:f5:1c:38:5c:a5:56:3c:1c:c3:51:51:8b:1b: eb:e2:f8:30:9c:8c:9e:39:75:9a:7d:76:ea:a7:57:e8:55:dc: af:17:15:33:d5:bf:3d:26:d7:8d:63:20:23:79:be:44:78:95: 7f:ba:a2:af:24:d0:9f:f4:dd:a2:af:f3:86:2a:c8:a0:28:86: f3:94:5c:50:3d:e3:06:f1:09:2a:33:41:15:d4:e8:14:91:95: 9b:1c:82:d8:bf:99:34:47:01:02:ad:58:05:fa:d4:9a:4c:97: a5:a1:41:f6:ef:87:08:9c:f4:23:ca:ec:8a:ef:b5:f4:d1:8f: 2e:0f:b4:91:fc:aa:20:93:69:d7:71:9c:76:f0:96:b8:e8:18: 4c:42:d6:24:21:8b:66:61:b5:43:2f:ca:b0:78:be:bb:d9:3a: a8:bc:47:2d:78:72:61:b2:4e:17:ea:aa:1e:1b:1d:fa:0d:52: 2e:2c:42:27:02:55:4f:1a:75:2b:6b:13:32:fa:34:37:31:8d: cc:62:a2:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gtHffJ9gRin2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MGMzYjE0YWEtZWYzNC00MmU2LTg1ZWYtZDdhMWFhMWY4NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEYEj7i6/gxoNQSUx95SIWvEk37hg5Ggu+Ox LY4jayqd19XbCzJ2OtyJGg5kuCxHfQfFYGGeQAH2bY5i/qbFjAVta+GBmrSZuYsx bvQgiE3MFTao2J8K4rfMbAexKTjZdLD9XlNryUq3KbOozoJ4Oj+ZBv0RrST8dqwG FBmEzdRZSMPLNjqJwvevozgIH19sGnrzfAD5mGbiKg1kre16X+kPxpI7qTXSFKzQ q5SSiFFTuJgytZs/V2gV1p3uxmmKQcraIXiNIwTx7r7HOafv56UNR++GbYFXAZbx qnF3GxHN/XvlRj+YbT6D9INK1jIHVeIwGNK/o9MuRGumgTYW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0qIFz+YXo/WkrnG1uDY6/bQHbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmFkOTY2ZTktYTY1NC0z NTRlLTkyZmUtMjY2Mjg2MWJiMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLzoDjly5jBjRsISOxzb1/C68JZ1uu5KKuA8ij2TNv8LiEO6eSuwRJ9 zDvtFaMKyOLjK6+4ekT5fiyk9Rw4XKVWPBzDUVGLG+vi+DCcjJ45dZp9duqnV+hV 3K8XFTPVvz0m141jICN5vkR4lX+6oq8k0J/03aKv84YqyKAohvOUXFA94wbxCSoz QRXU6BSRlZscgti/mTRHAQKtWAX61JpMl6WhQfbvhwic9CPK7IrvtfTRjy4PtJH8 qiCTaddxnHbwlrjoGExC1iQhi2ZhtUMvyrB4vrvZOqi8Ry14cmGyThfqqh4bHfoN Ui4sQicCVU8adStrEzL6NDcxjcxiomg= -----END CERTIFICATE-----Generated at Sun Apr 27 22:58:06 2025 by rpki-client