$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/706b9760-9e1e-3e77-b949-9e0f0fa16d95.roa File: 706b9760-9e1e-3e77-b949-9e0f0fa16d95.roa (raw, json) Hash identifier: N6HBOQamGbo9obFOM8uZQY1t+aIuBoP+8oZkN/X/L7Y= Subject key identifier: B6:05:0B:0F:4A:35:C8:0D:A8:2B:19:76:CA:30:49:BA:2A:6E:FB:CA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F465A9375A12DC2A8F300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/706b9760-9e1e-3e77-b949-9e0f0fa16d95.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:46:5a:93:75:a1:2d:c2:a8:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=6d8a396f-debe-4118-8fdf-0ded9f7ecea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d0:8e:1c:33:66:3c:48:0a:6f:28:be:b4:07: 49:ab:14:50:36:8d:4e:74:98:06:e6:56:91:78:91: 76:90:f8:76:dc:b4:14:a9:03:64:32:88:f2:44:a5: d6:1c:87:cc:53:f5:0f:dd:89:44:c8:c1:6d:d2:65: 3c:8b:57:fd:6a:3a:72:c6:a7:8f:c1:ed:1c:47:1e: 78:1a:16:dc:cc:48:5b:8c:11:a3:de:da:6d:e2:64: 9f:1d:a3:a4:79:f6:14:72:67:a4:a4:8d:55:23:39: a1:f4:62:b5:aa:f1:c9:7c:d3:7b:84:8d:39:24:a0: ea:84:94:b7:30:dd:be:40:bd:33:3c:f2:45:7a:4a: fb:3f:0a:28:d8:28:37:11:9a:dd:24:e5:74:82:a1: 9d:df:79:92:22:b8:81:6e:fc:11:19:bc:92:af:af: 67:e5:09:96:87:7c:cc:49:3a:f6:27:a1:bd:71:0b: fc:c7:e4:af:f6:8a:35:28:1a:96:1f:c7:8f:0f:5b: 6a:1e:d6:7b:61:37:d6:09:ff:c5:b1:fb:7d:c1:f0: a3:2e:35:d6:66:c3:2f:49:31:c0:d1:19:e3:36:e9: 7e:8c:bb:ab:e5:b7:f0:a5:08:42:ed:8d:d7:2f:ad: 77:ed:d1:06:7c:44:d3:12:ee:7e:62:07:83:44:f8: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:05:0B:0F:4A:35:C8:0D:A8:2B:19:76:CA:30:49:BA:2A:6E:FB:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/706b9760-9e1e-3e77-b949-9e0f0fa16d95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:68:24:9d:35:7b:e1:39:92:21:37:20:ca:a3:23:82:f1:85: 56:62:4c:94:e3:43:be:66:5c:c7:26:62:3a:52:72:28:4e:60: 21:3f:38:d7:a1:0d:ad:1a:ea:6d:72:dc:10:f0:67:f2:9b:46: 4a:d7:da:d6:80:99:3a:cf:f3:ac:bd:0a:f7:0e:7e:db:c6:ee: 3b:99:81:56:94:19:85:da:e3:31:18:d8:06:83:06:bf:c3:65: 08:2f:82:45:4d:66:ef:be:5b:da:be:d8:a4:4a:1f:1e:33:2a: 41:5e:27:a9:d8:93:8c:52:05:8f:fe:e9:cb:b3:14:b4:53:7c: ed:48:42:6e:ea:18:20:07:4c:34:bc:b9:03:2d:ea:9e:44:1d: 62:9f:6f:10:f7:6b:87:3c:45:e6:47:af:57:b5:ab:2a:60:c7: bf:dc:e1:16:60:69:88:01:8a:ce:30:95:16:4d:04:fc:ed:a3: cf:86:56:83:82:97:8b:ae:f7:1d:46:86:49:08:23:95:6a:3d: b7:0b:79:d7:da:42:44:e5:67:12:1e:49:94:b4:79:38:ad:af: f5:00:a4:cc:72:a2:49:10:c7:ea:ba:2b:1e:21:44:cd:32:5a: d6:b3:4a:e0:b8:08:6b:12:1c:94:bf:2d:b3:c3:a9:81:34:10: d2:04:57:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0Zak3WhLcKo8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NmQ4YTM5NmYtZGViZS00MTE4LThmZGYtMGRlZDlmN2VjZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptCOHDNmPEgKbyi+tAdJqxRQNo1OdJgG5laR eJF2kPh23LQUqQNkMojyRKXWHIfMU/UP3YlEyMFt0mU8i1f9ajpyxqePwe0cRx54 GhbczEhbjBGj3tpt4mSfHaOkefYUcmekpI1VIzmh9GK1qvHJfNN7hI05JKDqhJS3 MN2+QL0zPPJFekr7Pwoo2Cg3EZrdJOV0gqGd33mSIriBbvwRGbySr69n5QmWh3zM STr2J6G9cQv8x+Sv9oo1KBqWH8ePD1tqHtZ7YTfWCf/Fsft9wfCjLjXWZsMvSTHA 0RnjNul+jLur5bfwpQhC7Y3XL6137dEGfETTEu5+YgeDRPhKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYFCw9KNcgNqCsZdsowSboqbvvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzA2Yjk3NjAtOWUxZS0z ZTc3LWI5NDktOWUwZjBmYTE2ZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9oJJ01e+E5kiE3IMqjI4LxhVZiTJTjQ75mXMcmYjpScihOYCE/ONeh Da0a6m1y3BDwZ/KbRkrX2taAmTrP86y9CvcOftvG7juZgVaUGYXa4zEY2AaDBr/D ZQgvgkVNZu++W9q+2KRKHx4zKkFeJ6nYk4xSBY/+6cuzFLRTfO1IQm7qGCAHTDS8 uQMt6p5EHWKfbxD3a4c8ReZHr1e1qypgx7/c4RZgaYgBis4wlRZNBPzto8+GVoOC l4uu9x1GhkkII5VqPbcLedfaQkTlZxIeSZS0eTitr/UApMxyokkQx+q6Kx4hRM0y WtazSuC4CGsSHJS/LbPDqYE0ENIEVxw= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:55 2025 by rpki-client