$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa File: 823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa (raw, json) Hash identifier: LNZHt7+H6284L1yLEYUk8Qm0I6EINzz18G/aOMx+mP0= Subject key identifier: E7:F0:C7:51:B0:F7:28:E4:78:70:FB:01:C1:8E:51:22:53:63:86:F1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B3BC47BA395A1AB71A68 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b3:bc:47:ba:39:5a:1a:b7:1a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=4d2d86dc-f59d-48e8-ab7c-c00c100ac357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:9f:75:2b:40:41:6c:16:56:dc:d9:c6:21: 4e:64:c4:5c:c0:2b:1b:53:e8:cf:23:34:3b:04:3c: bc:17:8d:a3:02:c1:d5:29:55:1e:51:75:db:7d:b9: 9d:de:ce:e3:37:50:21:a4:72:be:bf:34:15:27:92: e4:70:f5:da:8f:b1:b2:12:45:84:45:51:de:f3:c6: 01:4a:43:85:2b:44:cb:07:57:bd:8f:83:a6:09:bd: 1f:06:eb:f7:92:65:07:c4:8e:b6:b6:08:71:4c:ba: 93:70:7a:90:b2:36:28:1d:6c:66:19:b0:f6:db:1c: 44:d4:40:c7:88:82:37:9f:d1:7f:c7:4d:e1:e6:72: 55:d7:9e:e4:8d:de:60:e7:63:7f:64:71:dd:84:ae: 8f:4d:ae:a9:58:43:bd:8b:a8:09:0b:9f:d3:7e:48: 9f:98:3c:a0:bb:63:85:26:a1:49:23:42:3a:e4:13: ef:6a:12:d6:53:9b:de:3d:41:f8:90:dd:34:c7:bf: b4:15:ae:20:c8:fe:a5:63:6d:b1:15:1c:16:3e:b9: 13:09:4a:e8:2e:ab:9f:9c:f6:69:67:fb:51:6e:d1: d3:2e:cb:4d:28:d7:02:00:ab:52:3b:a4:91:ee:38: 74:57:d6:f3:4c:ac:5c:6e:5c:08:eb:ef:90:d5:08: 62:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F0:C7:51:B0:F7:28:E4:78:70:FB:01:C1:8E:51:22:53:63:86:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b8:82:ef:3a:64:65:ee:db:4c:f6:33:6a:89:76:62:6a:f0: 09:ff:0d:68:54:1b:87:98:80:b0:34:e2:98:a8:cb:9e:37:f4: 20:eb:55:5c:57:2b:ee:05:dd:f0:74:7a:4b:e0:77:44:17:e4: 9d:f2:d1:c0:de:fd:2d:0f:06:6b:5c:f4:b6:88:10:7d:29:32: de:45:36:cf:59:7a:56:b4:99:84:c6:c1:63:61:84:53:71:6f: df:77:e1:ec:20:0f:2b:fb:d2:65:2a:25:14:60:c1:fb:3d:44: 89:f9:9c:77:9a:15:04:b6:e1:5c:ee:d0:8b:1b:1f:db:2d:79: e7:dd:ad:d8:19:b4:ed:97:be:9f:0c:78:eb:c0:b5:bc:0a:7a: 1f:dd:ab:c1:3a:3c:39:99:c7:c8:19:c5:66:43:31:9b:84:e3: 74:5f:8a:ef:0d:3a:fd:43:f4:78:52:d6:a3:ac:06:d2:61:21: 15:93:28:2f:a8:82:ff:8b:d7:66:b4:7e:14:24:44:23:9b:d8: 12:83:7f:56:ad:51:a0:76:29:08:4c:1e:f8:b8:5c:be:82:60: 2a:c3:87:67:74:dd:65:c9:1f:c6:40:01:48:9e:50:57:96:b5: 29:c4:9a:3f:a1:fe:6a:6d:ec:5f:b1:14:64:67:90:22:aa:db: d5:cc:61:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLO8R7o5Whq3GmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NGQyZDg2ZGMtZjU5ZC00OGU4LWFiN2MtYzAwYzEwMGFjMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyCfdStAQWwWVtzZxiFOZMRcwCsbU+jPIzQ7 BDy8F42jAsHVKVUeUXXbfbmd3s7jN1AhpHK+vzQVJ5LkcPXaj7GyEkWERVHe88YB SkOFK0TLB1e9j4OmCb0fBuv3kmUHxI62tghxTLqTcHqQsjYoHWxmGbD22xxE1EDH iII3n9F/x03h5nJV157kjd5g52N/ZHHdhK6PTa6pWEO9i6gJC5/TfkifmDygu2OF JqFJI0I65BPvahLWU5vePUH4kN00x7+0Fa4gyP6lY22xFRwWPrkTCUroLqufnPZp Z/tRbtHTLstNKNcCAKtSO6SR7jh0V9bzTKxcblwI6++Q1QhiOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfwx1Gw9yjkeHD7AcGOUSJTY4bxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODIzYWZjMjAtYTY2OS0z ZDhhLWE5OGMtZGZmZjFhMGU1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIS1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm4gu86ZGXu20z2M2qJdmJq8An/DWhUG4eYgLA04pioy5439CDrVVxX K+4F3fB0ekvgd0QX5J3y0cDe/S0PBmtc9LaIEH0pMt5FNs9Zela0mYTGwWNhhFNx b9934ewgDyv70mUqJRRgwfs9RIn5nHeaFQS24Vzu0IsbH9steefdrdgZtO2Xvp8M eOvAtbwKeh/dq8E6PDmZx8gZxWZDMZuE43Rfiu8NOv1D9HhS1qOsBtJhIRWTKC+o gv+L12a0fhQkRCOb2BKDf1atUaB2KQhMHvi4XL6CYCrDh2d03WXJH8ZAAUieUFeW tSnEmj+h/mpt7F+xFGRnkCKq29XMYQQ= -----END CERTIFICATE-----Generated at Mon Apr 28 13:22:47 2025 by rpki-client