$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/820d3b27-1676-363d-b7f6-ac8fc4197543.roa File: 820d3b27-1676-363d-b7f6-ac8fc4197543.roa (raw, json) Hash identifier: T/lgT+VCqdmORzXnk7LX9r8l0DwmpthXVDkRoi6+rdQ= Subject key identifier: 74:31:A0:1B:87:58:6E:B7:F2:7E:DE:4A:BE:FE:8D:CC:C1:A1:84:6A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA06526FC112D1DEBD39E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/820d3b27-1676-363d-b7f6-ac8fc4197543.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:06:52:6f:c1:12:d1:de:bd:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=bdde9b9c-7f7f-4090-ba28-a5b87af14296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:1a:be:53:59:22:ec:cb:c2:4b:94:29:07: e0:f3:6b:d2:71:0f:31:f6:e6:b1:36:df:2c:b4:7a: 20:85:44:f7:0d:0c:01:d1:d5:3a:22:a1:0e:7f:81: e3:b1:32:54:1e:a5:dc:04:7f:bd:53:d4:b4:cd:05: af:d5:65:f4:dc:ce:59:64:54:3d:81:89:3b:49:b5: 16:b3:f4:19:c1:7c:bf:a6:cf:01:00:13:cc:b0:ee: 82:8c:03:05:bb:56:0a:94:e2:92:ef:e6:43:2f:ef: 54:83:ba:c0:64:f9:e6:54:6a:6c:01:de:a0:6f:16: 82:18:db:93:d8:39:13:ae:8f:2c:95:ff:ea:7c:b8: cd:3a:3b:d5:51:fe:da:1c:5c:a3:c8:a4:ad:ca:32: 17:b7:45:15:eb:4c:71:40:66:20:2d:87:18:ab:ed: b2:76:99:b1:e8:0e:7e:36:09:54:a0:4f:85:14:8c: 45:2d:78:81:a3:c8:eb:17:99:77:75:3f:75:da:7f: 3d:61:c7:b0:34:8f:9f:54:7d:89:4d:f6:7f:31:d7: 3a:1d:26:6a:32:dd:8c:43:32:95:fd:df:15:7d:0f: f1:11:45:77:c3:37:6d:53:a6:e9:70:17:3b:bd:13: 42:53:eb:9e:77:2e:fc:99:dc:a4:7c:bb:a8:71:52: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:A0:1B:87:58:6E:B7:F2:7E:DE:4A:BE:FE:8D:CC:C1:A1:84:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/820d3b27-1676-363d-b7f6-ac8fc4197543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8a:6a:c6:05:d5:3b:b9:5c:e5:8f:85:b9:2f:ae:c9:1c:2a: 64:bb:39:6b:92:87:88:73:c9:5a:c2:9e:9e:0c:6b:e6:e7:8a: 85:be:30:d2:96:f9:ac:c2:76:bf:c7:cc:51:e5:88:e5:15:fa: 77:5d:f4:9f:69:5c:55:20:de:31:31:8e:c4:4b:50:72:06:65: b9:26:94:b0:e9:47:43:79:c7:0f:f8:d7:3c:84:e9:3e:d1:d8: 41:de:3b:d5:d6:ba:ff:9d:c7:e5:7b:1d:5b:e1:f4:63:a7:71: eb:37:e0:0e:c4:d7:58:5c:74:49:18:70:ca:80:f3:6a:ee:3b: b8:3a:f7:51:7b:af:2c:65:00:d1:39:82:ee:a2:a1:e7:01:4d: 1a:8c:09:84:93:6d:5f:ea:3a:21:8f:35:27:3d:ff:6a:85:c6: 2e:9b:b3:86:37:65:ec:b2:43:37:4e:b7:02:f3:a5:15:4a:50: 21:ed:c2:1f:29:03:2d:e6:b8:fd:bf:5c:25:f0:ec:38:f1:c7: bc:4d:38:3d:70:4f:0d:12:3b:14:49:0b:d4:22:a9:80:1c:59: 98:28:ef:8b:e2:22:8b:9b:33:c4:31:ab:17:f1:31:7b:e3:ed: a1:82:2b:07:c7:4d:09:c4:5c:30:a0:4c:63:8b:2f:ae:49:48: d2:d3:e5:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gZSb8ES0d69OeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YmRkZTliOWMtN2Y3Zi00MDkwLWJhMjgtYTViODdhZjE0Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN0avlNZIuzLwkuUKQfg82vScQ8x9uaxNt8s tHoghUT3DQwB0dU6IqEOf4HjsTJUHqXcBH+9U9S0zQWv1WX03M5ZZFQ9gYk7SbUW s/QZwXy/ps8BABPMsO6CjAMFu1YKlOKS7+ZDL+9Ug7rAZPnmVGpsAd6gbxaCGNuT 2DkTro8slf/qfLjNOjvVUf7aHFyjyKStyjIXt0UV60xxQGYgLYcYq+2ydpmx6A5+ NglUoE+FFIxFLXiBo8jrF5l3dT912n89YcewNI+fVH2JTfZ/Mdc6HSZqMt2MQzKV /d8VfQ/xEUV3wzdtU6bpcBc7vRNCU+uedy78mdykfLuocVLw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQxoBuHWG638n7eSr7+jczBoYRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODIwZDNiMjctMTY3Ni0z NjNkLWI3ZjYtYWM4ZmM0MTk3NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKKasYF1Tu5XOWPhbkvrskcKmS7OWuSh4hzyVrCnp4Ma+bnioW+MNKW +azCdr/HzFHliOUV+ndd9J9pXFUg3jExjsRLUHIGZbkmlLDpR0N5xw/41zyE6T7R 2EHeO9XWuv+dx+V7HVvh9GOnces34A7E11hcdEkYcMqA82ruO7g691F7ryxlANE5 gu6ioecBTRqMCYSTbV/qOiGPNSc9/2qFxi6bs4Y3ZeyyQzdOtwLzpRVKUCHtwh8p Ay3muP2/XCXw7Djxx7xNOD1wTw0SOxRJC9QiqYAcWZgo74viIoubM8QxqxfxMXvj 7aGCKwfHTQnEXDCgTGOLL65JSNLT5as= -----END CERTIFICATE-----Generated at Sun Apr 27 16:27:44 2025 by rpki-client