$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8537adcc-68a5-369d-9096-25add04ae4cc.roa File: 8537adcc-68a5-369d-9096-25add04ae4cc.roa (raw, json) Hash identifier: YsdF9yUd1RlV0gQMzh0692Ke8AfrrcuFKBJ9ESjlo7c= Subject key identifier: 76:F8:04:C1:7A:51:C0:9F:CC:2D:ED:D0:C8:06:86:B0:CC:58:B9:37 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F3075F5B3244F6B29780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8537adcc-68a5-369d-9096-25add04ae4cc.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f3:07:5f:5b:32:44:f6:b2:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=22c3637f-657e-411f-901a-d62fafda4ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:c9:36:e9:ca:e8:2c:20:77:7c:a3:1f:1f: 48:9d:de:c9:ec:c5:fb:76:60:c8:6d:be:1a:c8:8b: 25:56:12:6c:de:58:56:dc:31:c8:1e:4a:0c:27:df: 83:30:f9:c5:a3:12:56:8d:02:f3:4f:0d:92:0c:56: 1c:73:f7:db:07:23:34:f9:46:1c:a2:30:aa:1c:92: a0:78:f1:e1:c9:d3:de:74:3c:bc:35:a3:a9:8c:e7: 21:4e:40:fd:fe:02:ce:07:9b:32:67:2d:67:29:2d: 99:40:bb:b4:b9:fc:dd:68:ed:c1:de:26:12:19:e8: 26:b0:ce:d7:e5:f8:ee:d5:3f:84:72:9f:36:65:ca: eb:93:4e:b3:b0:71:5a:85:42:ef:7e:78:32:78:b4: a1:fc:f1:2e:32:ed:4f:13:19:ce:f2:f7:5c:d2:c8: d8:55:8b:27:1b:8d:9d:8f:2b:91:8f:e5:4e:47:7b: cc:59:b6:5c:45:41:01:f5:a5:11:5d:0d:f2:a4:b8: b0:a8:c2:6e:f9:61:26:33:9e:e3:69:95:2a:fb:ef: 2b:6a:ba:f1:a3:41:32:f4:90:72:6c:44:a0:78:ca: 29:55:2d:d4:b0:bd:37:4d:27:66:46:47:d5:24:b3: e1:24:a1:88:6e:0f:39:c4:45:29:34:55:11:5b:10: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:04:C1:7A:51:C0:9F:CC:2D:ED:D0:C8:06:86:B0:CC:58:B9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8537adcc-68a5-369d-9096-25add04ae4cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:34:aa:c7:cf:68:6a:48:fe:3e:a4:b6:31:81:c9:07:c0:7c: 2a:51:9e:5e:6b:c1:7f:90:92:40:c6:32:c4:9f:10:b0:08:a0: e4:56:fe:69:2c:cb:d0:19:d5:d4:34:d5:a2:d6:23:c8:49:29: 8e:1e:31:17:64:0a:a8:b1:58:2d:fd:3b:04:bb:c9:09:b7:c8: 26:99:8e:c3:ab:f5:73:1f:73:b7:96:1a:7f:1b:a6:21:89:c7: 58:c9:c7:e8:28:77:ab:db:33:1f:ef:3c:8e:6f:38:54:3b:58: 26:14:2f:a5:83:79:58:f3:df:03:00:1b:7d:0a:9f:e3:6a:32: a4:12:8b:8f:d6:c8:ed:9c:67:e4:c3:52:87:c6:8c:25:44:ca: af:38:14:d0:34:b5:f2:f6:fc:18:f9:5f:fb:ba:9d:6f:f7:ac: 01:fa:fe:4e:91:f9:99:c2:b0:56:04:df:78:1c:57:ce:59:46: 19:a0:75:30:2a:42:9a:ad:9f:dd:bf:19:54:46:b7:81:79:54: 44:61:54:bc:a8:08:bf:61:3c:7e:ca:7a:de:85:e6:88:a5:d8: 7c:73:26:16:14:ff:44:b8:c1:e0:e0:eb:ba:e8:d5:ac:e2:5b: 6a:50:26:75:4c:c6:18:0c:62:58:ea:14:04:14:25:7a:7f:97: 81:91:a4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fMHX1syRPayl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MjJjMzYzN2YtNjU3ZS00MTFmLTkwMWEtZDYyZmFmZGE0YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyHJNunK6Cwgd3yjHx9Ind7J7MX7dmDIbb4a yIslVhJs3lhW3DHIHkoMJ9+DMPnFoxJWjQLzTw2SDFYcc/fbByM0+UYcojCqHJKg ePHhydPedDy8NaOpjOchTkD9/gLOB5syZy1nKS2ZQLu0ufzdaO3B3iYSGegmsM7X 5fju1T+Ecp82Zcrrk06zsHFahULvfngyeLSh/PEuMu1PExnO8vdc0sjYVYsnG42d jyuRj+VOR3vMWbZcRUEB9aURXQ3ypLiwqMJu+WEmM57jaZUq++8rarrxo0Ey9JBy bESgeMopVS3UsL03TSdmRkfVJLPhJKGIbg85xEUpNFURWxCVzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb4BMF6UcCfzC3t0MgGhrDMWLk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODUzN2FkY2MtNjhhNS0z NjlkLTkwOTYtMjVhZGQwNGFlNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ0qsfPaGpI/j6ktjGByQfAfCpRnl5rwX+QkkDGMsSfELAIoORW/mks y9AZ1dQ01aLWI8hJKY4eMRdkCqixWC39OwS7yQm3yCaZjsOr9XMfc7eWGn8bpiGJ x1jJx+god6vbMx/vPI5vOFQ7WCYUL6WDeVjz3wMAG30Kn+NqMqQSi4/WyO2cZ+TD UofGjCVEyq84FNA0tfL2/Bj5X/u6nW/3rAH6/k6R+ZnCsFYE33gcV85ZRhmgdTAq Qpqtn92/GVRGt4F5VERhVLyoCL9hPH7Ket6F5oil2HxzJhYU/0S4weDg67ro1azi W2pQJnVMxhgMYljqFAQUJXp/l4GRpJ8= -----END CERTIFICATE-----Generated at Mon Apr 28 03:54:32 2025 by rpki-client