$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa File: 7085ed56-08ec-3dff-bfb2-c0a402571d39.roa (raw, json) Hash identifier: /e0t3DrsVBw3rK6ekZZ/XdKlGYKOU/nSHuEBFwl6NG4= Subject key identifier: 00:B1:99:F3:7C:97:94:1E:BB:DF:1E:EE:72:1B:E3:F9:D2:26:0F:66 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EEECC2D3B8E37D9422C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ee:ec:c2:d3:b8:e3:7d:94:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=110f9d38-7cde-4485-be01-a3e6348cae18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:40:6b:d3:c2:c9:c5:59:27:ec:3a:aa:86: fd:9d:19:00:29:ff:e9:39:4e:5a:2f:41:d9:70:ce: a7:04:c7:af:59:e5:14:cb:50:02:6e:31:36:2c:11: 94:81:fd:66:fb:c2:0d:99:e2:d9:15:db:6b:d0:1d: 5e:71:37:5e:4b:58:db:51:7e:ed:1f:fb:10:df:b7: 62:7f:ae:9a:46:8f:c9:95:99:f4:27:b1:e6:59:c0: 60:12:ee:24:e7:9c:0c:6a:a0:26:0e:ad:a3:ba:45: a9:5e:35:46:51:48:5e:a2:43:b7:e4:c8:23:03:ba: 37:f5:d0:35:1a:4e:66:bb:3f:a0:e5:d6:e3:dc:66: 33:e5:22:46:20:09:1f:da:cb:e0:49:ed:7f:79:ac: 43:ad:fc:78:80:83:40:cf:45:b3:09:91:c3:37:bd: 2a:d7:32:a9:d8:8b:61:b1:fc:27:9a:a8:b8:8c:dd: 13:1d:14:a5:62:c2:4a:86:af:34:c2:13:06:e7:ee: bc:fb:63:24:53:f1:42:21:ff:f6:a2:c3:4e:58:e7: f1:03:4f:ff:16:b9:b6:e3:17:5a:d5:0f:b7:2c:ba: b0:c9:b8:90:dc:29:26:80:2d:43:80:c5:97:79:88: 2e:b6:d4:d2:88:3d:7c:07:ea:bd:a9:64:6d:e4:00: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B1:99:F3:7C:97:94:1E:BB:DF:1E:EE:72:1B:E3:F9:D2:26:0F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:de:68:67:7d:99:a2:cd:83:43:bd:1c:66:e9:bc:18:a7:62: bc:4a:1a:3c:04:47:54:9c:d9:e6:7b:11:4d:bd:68:1d:19:0b: 6b:bc:75:11:9d:c8:cd:9c:78:62:92:21:dd:69:b7:36:fa:10: 67:36:e5:62:09:01:ce:43:c2:b5:6b:53:56:02:1a:83:bd:e5: dc:90:db:35:a1:bb:45:c4:23:04:ae:24:37:fc:dd:59:50:a4: cd:94:7c:b5:a7:6a:fd:40:ba:ac:d6:1f:7c:45:da:4b:6b:e0: 67:ea:3d:b2:ae:de:1b:6f:10:79:11:12:13:b1:1e:aa:21:d6: db:ac:34:e6:1c:8f:18:22:63:96:80:e1:a9:23:56:83:d9:e6: 5f:5a:ca:ee:89:ad:a7:70:02:dc:78:6d:f4:d8:1d:da:56:a6: 4c:c9:72:29:7c:04:27:06:48:53:89:5a:4f:d6:4c:1a:c3:c2: d5:40:3b:35:9d:fe:df:dd:e1:e8:82:97:ed:97:2c:27:93:89: 67:fb:ac:6f:e1:c6:73:55:5a:e4:cd:29:85:cf:88:d0:d9:07: 78:f7:55:56:b1:7f:24:88:9d:2a:c6:b7:fa:db:44:27:c5:cd: 8f:47:98:85:f5:c4:4f:5c:c6:22:e6:8e:02:6b:79:0e:59:73: 27:ab:a4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e7swtO4432UIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MTEwZjlkMzgtN2NkZS00NDg1LWJlMDEtYTNlNjM0OGNhZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZVAa9PCycVZJ+w6qob9nRkAKf/pOU5aL0HZ cM6nBMevWeUUy1ACbjE2LBGUgf1m+8INmeLZFdtr0B1ecTdeS1jbUX7tH/sQ37di f66aRo/JlZn0J7HmWcBgEu4k55wMaqAmDq2jukWpXjVGUUheokO35MgjA7o39dA1 Gk5muz+g5dbj3GYz5SJGIAkf2svgSe1/eaxDrfx4gINAz0WzCZHDN70q1zKp2Ith sfwnmqi4jN0THRSlYsJKhq80whMG5+68+2MkU/FCIf/2osNOWOfxA0//Frm24xda 1Q+3LLqwybiQ3CkmgC1DgMWXeYguttTSiD18B+q9qWRt5ABJUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACxmfN8l5Qeu98e7nIb4/nSJg9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzA4NWVkNTYtMDhlYy0z ZGZmLWJmYjItYzBhNDAyNTcxZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELeaGd9maLNg0O9HGbpvBinYrxKGjwER1Sc2eZ7EU29aB0ZC2u8dRGd yM2ceGKSId1ptzb6EGc25WIJAc5DwrVrU1YCGoO95dyQ2zWhu0XEIwSuJDf83VlQ pM2UfLWnav1AuqzWH3xF2ktr4GfqPbKu3htvEHkREhOxHqoh1tusNOYcjxgiY5aA 4akjVoPZ5l9ayu6JradwAtx4bfTYHdpWpkzJcil8BCcGSFOJWk/WTBrDwtVAOzWd /t/d4eiCl+2XLCeTiWf7rG/hxnNVWuTNKYXPiNDZB3j3VVaxfySInSrGt/rbRCfF zY9HmIX1xE9cxiLmjgJreQ5ZcyerpFM= -----END CERTIFICATE-----Generated at Sun Apr 27 21:38:49 2025 by rpki-client