$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73739ed6-f23e-3f60-9f04-373e95c50fdf.roa File: 73739ed6-f23e-3f60-9f04-373e95c50fdf.roa (raw, json) Hash identifier: Qjtjlk5MaJ6uxKF3Kz0Hv0AS62A78HCV9s0M0WgVMJ4= Subject key identifier: C1:E2:58:DE:B4:8A:D6:70:81:69:62:0D:BB:81:E5:B3:D1:4F:5D:E8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D51856D6BA116BC3B780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73739ed6-f23e-3f60-9f04-373e95c50fdf.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 41264 IP address blocks: 104.134.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d5:18:56:d6:ba:11:6b:c3:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3d1bd0d2-61c0-4c6e-875c-a86e82c38c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:c1:5e:4a:9d:28:ae:2d:ad:e2:ee:61:c2: 24:3c:8d:06:3e:f9:32:a6:69:c5:59:f2:d7:b6:95: c4:dd:f2:a3:d6:40:b3:b9:8f:28:05:40:4a:09:17: 48:ad:ce:c1:fd:03:d7:e6:e4:7a:05:0c:52:b9:9a: cd:8f:fa:58:b4:1b:5e:b5:11:2f:06:a0:14:0a:3d: 46:0f:08:70:37:85:02:c4:2b:52:16:e3:b2:3f:5a: 8b:ed:e7:fd:78:57:e1:0d:2f:1a:44:92:cd:4f:c1: 9d:54:ef:b5:07:88:4e:97:1b:2b:b9:07:9b:2a:44: 35:a3:32:c7:0e:73:c4:0a:48:0e:2c:4b:1d:29:09: 97:5f:ea:59:af:87:9f:66:73:0c:ec:1d:bc:b9:ef: ab:f3:57:c3:0e:64:1c:91:1e:d4:ac:13:55:c4:9f: 3f:98:d4:47:dd:e6:fb:71:2f:2f:72:68:48:46:e6: 84:53:10:7a:e2:04:a0:6c:ec:15:94:e5:c6:de:78: 3f:10:b8:61:5c:d5:92:96:02:fb:94:dc:88:38:43: 7f:27:41:5b:ee:7c:f8:c2:fc:95:bb:79:13:10:69: 52:87:c7:dd:f8:f0:30:72:33:4f:3b:b1:79:00:9f: 25:c4:ba:48:bd:59:ad:24:2b:a4:aa:6a:e4:44:15: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:58:DE:B4:8A:D6:70:81:69:62:0D:BB:81:E5:B3:D1:4F:5D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73739ed6-f23e-3f60-9f04-373e95c50fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:56:0f:76:4a:4b:f4:4d:d2:28:7f:94:d3:98:48:ee:23:2d: 67:d0:89:b8:e0:db:3f:9b:ae:9b:f6:bb:85:e3:59:a9:09:0a: 6d:24:a2:fb:22:40:12:9e:38:9f:8c:20:e6:61:ad:9d:22:fd: d8:5e:d9:cf:72:17:e8:7c:63:50:0c:25:0e:87:8b:49:cd:7f: 83:50:74:43:b2:53:8e:b1:96:97:8b:7f:e2:20:b9:7a:d5:6d: 5f:78:90:4e:62:83:1d:ce:b5:4e:60:f8:4e:5f:24:59:ec:81: 1f:f8:c9:fb:6b:47:90:ae:95:7d:08:bc:a4:cd:25:9f:f7:56: 88:a6:ed:24:8a:3b:09:6b:08:bf:c5:c6:f7:13:47:d1:ab:4a: b6:fe:ea:54:5c:77:69:fc:aa:08:5a:7e:ba:0e:83:fe:a0:20: 79:4e:01:ee:8b:9d:32:f2:84:4c:ea:af:65:33:18:78:a8:a6: 9a:e3:2b:98:90:1b:7b:2b:12:c9:81:18:6b:e1:a1:5f:0a:ae: 5a:50:06:52:fe:ad:b2:06:53:ec:9a:f3:dc:d9:c5:05:ff:f4: 93:f2:a9:b4:ec:ca:2f:46:62:cb:7c:ca:d7:b1:a8:d7:2b:76: dc:ba:9f:19:6e:79:2a:50:36:5e:6e:c4:6f:12:22:ca:ef:b1: 5f:04:9e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNUYVta6EWvDt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2QxYmQwZDItNjFjMC00YzZlLTg3NWMtYTg2ZTgyYzM4YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvrBXkqdKK4treLuYcIkPI0GPvkypmnFWfLX tpXE3fKj1kCzuY8oBUBKCRdIrc7B/QPX5uR6BQxSuZrNj/pYtBtetREvBqAUCj1G DwhwN4UCxCtSFuOyP1qL7ef9eFfhDS8aRJLNT8GdVO+1B4hOlxsruQebKkQ1ozLH DnPECkgOLEsdKQmXX+pZr4efZnMM7B28ue+r81fDDmQckR7UrBNVxJ8/mNRH3eb7 cS8vcmhIRuaEUxB64gSgbOwVlOXG3ng/ELhhXNWSlgL7lNyIOEN/J0Fb7nz4wvyV u3kTEGlSh8fd+PAwcjNPO7F5AJ8lxLpIvVmtJCukqmrkRBXiiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHiWN60itZwgWliDbuB5bPRT13oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzM3MzllZDYtZjIzZS0z ZjYwLTlmMDQtMzczZTk1YzUwZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFWD3ZKS/RN0ih/lNOYSO4jLWfQibjg2z+brpv2u4XjWakJCm0kovsi QBKeOJ+MIOZhrZ0i/dhe2c9yF+h8Y1AMJQ6Hi0nNf4NQdEOyU46xlpeLf+IguXrV bV94kE5igx3OtU5g+E5fJFnsgR/4yftrR5CulX0IvKTNJZ/3Voim7SSKOwlrCL/F xvcTR9GrSrb+6lRcd2n8qghafroOg/6gIHlOAe6LnTLyhEzqr2UzGHiopprjK5iQ G3srEsmBGGvhoV8KrlpQBlL+rbIGU+ya89zZxQX/9JPyqbTsyi9GYst8ytexqNcr dty6nxlueSpQNl5uxG8SIsrvsV8EnnY= -----END CERTIFICATE-----Generated at Sun Apr 27 17:45:46 2025 by rpki-client