$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8510ce25-870e-3733-b590-5f17ce8a7559.roa File: 8510ce25-870e-3733-b590-5f17ce8a7559.roa (raw, json) Hash identifier: jQN0mjJ/L30Oa+BLRyYVa1liDREX/Pk8urrsPkipY6I= Subject key identifier: 64:5C:24:A7:AF:EA:C0:83:D1:31:83:3F:8F:A5:11:BD:EC:02:B8:6A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA082279EC7DE06A1CBCC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8510ce25-870e-3733-b590-5f17ce8a7559.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:08:22:79:ec:7d:e0:6a:1c:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=6d9f114a-0690-4eb1-8cef-cdf92188a798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:87:56:4a:f4:d5:7e:fb:a0:e3:7b:c7:19: 65:e1:93:3c:af:c5:d5:76:fd:b6:10:9d:52:c2:9f: 84:e0:43:56:b1:a7:39:90:a8:c3:5a:56:46:ce:db: 8c:33:6c:0e:94:a5:e0:54:af:66:b4:28:6f:dc:c0: 36:37:8a:77:a7:26:8c:b3:13:e8:31:03:eb:10:a8: 06:9a:83:35:20:bb:8b:16:bf:03:b0:7a:d3:f9:1a: 9b:97:37:ed:cd:21:8e:85:91:27:c8:6e:59:c4:77: 5c:8c:be:52:d0:fa:39:2a:9f:e1:b3:1c:6b:31:36: 3c:45:08:a7:9c:dd:9b:7d:8c:56:4e:ea:93:26:4c: 5f:f5:d5:68:81:b1:da:19:5d:08:f5:ec:4a:70:1a: 89:47:69:14:c6:b8:3e:e8:4c:7b:af:12:b4:f4:9a: 31:df:84:7e:43:4b:0a:f8:5c:bb:4f:3b:5e:30:a3: bd:85:60:58:85:85:b6:64:ec:86:13:b0:ab:56:95: da:82:60:66:c5:22:87:4c:1d:59:4e:4d:ed:51:ac: 52:6b:82:f9:27:74:01:0f:ac:61:fa:75:71:68:26: 21:00:e1:4d:28:1e:78:7d:ca:37:17:58:43:86:94: 36:21:11:a4:4b:ac:3c:71:91:b3:61:77:6d:3f:5e: 0c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5C:24:A7:AF:EA:C0:83:D1:31:83:3F:8F:A5:11:BD:EC:02:B8:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8510ce25-870e-3733-b590-5f17ce8a7559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0f:0b:ae:cc:f5:7d:93:29:00:5e:10:61:57:d3:df:4a:40: 1f:d2:89:12:b2:a0:f4:d3:1c:72:23:62:9f:b8:b4:3a:1d:61: 09:90:5a:ec:5b:cd:ba:01:69:11:ea:a8:14:23:7d:ef:92:f7: a9:d2:1d:ef:80:f8:2a:ca:94:bc:8e:59:52:81:64:53:27:09: 69:5a:da:8f:93:f0:0a:e8:da:02:e6:66:6b:7f:4b:5d:fe:04: 67:dd:1a:e1:8e:b7:89:12:ab:1a:4f:c3:13:10:c3:a7:d8:87: bf:bc:24:af:4d:82:10:87:45:14:73:bd:7c:47:df:da:ca:bc: 26:aa:06:4d:f9:47:30:34:9c:d3:7d:52:cf:86:ae:fc:92:cc: ae:f4:68:f2:ed:76:19:5f:e4:ae:51:52:57:a9:c4:a0:be:80: 59:cc:29:e1:c4:26:e5:1b:c8:56:d1:9b:c2:e8:ff:4d:bc:9c: d3:7f:92:af:cb:46:70:a2:fb:64:c2:84:b1:87:f2:fa:3b:1a: bb:0a:0d:d4:1b:2a:1c:17:1d:e8:20:75:9d:c2:d4:06:3e:8e: 17:8b:a7:4d:73:79:3d:97:7c:86:85:c1:da:46:2c:eb:70:78: fe:9d:2f:9a:9a:c3:b3:b6:13:37:ae:ec:db:f7:a2:39:f1:30: 15:ce:78:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+ggieex94GocvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NmQ5ZjExNGEtMDY5MC00ZWIxLThjZWYtY2RmOTIxODhhNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliSHVkr01X77oON7xxll4ZM8r8XVdv22EJ1S wp+E4ENWsac5kKjDWlZGztuMM2wOlKXgVK9mtChv3MA2N4p3pyaMsxPoMQPrEKgG moM1ILuLFr8DsHrT+RqblzftzSGOhZEnyG5ZxHdcjL5S0Po5Kp/hsxxrMTY8RQin nN2bfYxWTuqTJkxf9dVogbHaGV0I9exKcBqJR2kUxrg+6Ex7rxK09Jox34R+Q0sK +Fy7TzteMKO9hWBYhYW2ZOyGE7CrVpXagmBmxSKHTB1ZTk3tUaxSa4L5J3QBD6xh +nVxaCYhAOFNKB54fco3F1hDhpQ2IRGkS6w8cZGzYXdtP14M3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRcJKev6sCD0TGDP4+lEb3sArhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODUxMGNlMjUtODcwZS0z NzMzLWI1OTAtNWYxN2NlOGE3NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcPC67M9X2TKQBeEGFX099KQB/SiRKyoPTTHHIjYp+4tDodYQmQWuxb zboBaRHqqBQjfe+S96nSHe+A+CrKlLyOWVKBZFMnCWla2o+T8Aro2gLmZmt/S13+ BGfdGuGOt4kSqxpPwxMQw6fYh7+8JK9NghCHRRRzvXxH39rKvCaqBk35RzA0nNN9 Us+GrvySzK70aPLtdhlf5K5RUlepxKC+gFnMKeHEJuUbyFbRm8Lo/028nNN/kq/L RnCi+2TChLGH8vo7GrsKDdQbKhwXHeggdZ3C1AY+jheLp01zeT2XfIaFwdpGLOtw eP6dL5qaw7O2Ezeu7Nv3ojnxMBXOeGo= -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:37 2025 by rpki-client