$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/865d1c5b-c929-3798-b082-9af8c561194a.roa File: 865d1c5b-c929-3798-b082-9af8c561194a.roa (raw, json) Hash identifier: xYLIOZ2bTWN9whvqywrGF9bXt+QnkjbTqSDoIeH+6tM= Subject key identifier: E6:F9:81:69:43:E9:86:E9:37:48:B1:8C:6E:F4:81:00:8D:97:13:85 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F467C2BB3E91354609A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/865d1c5b-c929-3798-b082-9af8c561194a.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.133.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:46:7c:2b:b3:e9:13:54:60:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=5268637c-4b6f-43b0-bb34-c6dff2887e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:07:a8:4d:47:7c:38:78:e2:37:0e:13:49: 0c:0a:6e:3b:fa:eb:37:8e:85:29:bf:7a:da:fb:2e: f9:8a:e2:b0:4e:2b:90:51:89:6e:37:4d:2e:7f:50: 44:cd:68:61:f1:71:70:17:f8:af:eb:88:b1:b3:19: ec:a5:5c:5c:8e:64:f0:8c:0f:43:06:30:50:50:a1: ac:0c:ed:40:ef:8e:79:c8:48:ab:a4:00:a7:5c:9d: 4d:1a:d6:e3:3f:1a:1f:35:00:cc:86:06:db:bd:8f: 0c:99:cf:b7:8c:36:49:85:bf:94:e8:53:cd:db:3d: 7f:37:89:52:c0:a0:5c:50:03:57:00:3c:ac:57:ab: 0f:c8:1b:4c:bb:52:c5:1a:ed:56:77:2c:08:fe:77: 67:f6:1c:3b:49:f0:1e:65:41:da:31:b1:78:0a:99: 4b:83:77:82:57:44:d6:e2:11:58:4e:03:0a:15:77: f3:22:a1:4b:be:57:61:a4:5b:72:c4:81:09:b8:48: 61:a6:43:40:ee:8f:14:f7:a7:d4:41:ec:9a:bc:c8: 84:ea:ed:27:90:cd:42:e8:da:f5:91:36:e5:ac:48: 27:02:54:9e:3c:b9:09:51:dd:95:09:23:98:48:82: 4f:f2:1b:d6:44:12:d3:5d:fa:82:d4:1f:51:8d:76: 4b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F9:81:69:43:E9:86:E9:37:48:B1:8C:6E:F4:81:00:8D:97:13:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/865d1c5b-c929-3798-b082-9af8c561194a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:21:ae:d9:81:da:d4:53:ae:d6:f5:21:93:91:76:74:0b:45: 63:13:73:76:85:87:a6:40:d3:02:79:4c:b5:73:26:21:07:68: b9:4e:ca:48:ef:b7:b2:be:a3:df:bb:37:90:90:36:23:6e:e9: ec:e5:b7:77:1c:f4:bc:e7:c7:38:04:0b:86:01:80:21:0b:c8: fd:73:6c:53:eb:9e:aa:66:5b:d4:21:f5:30:8e:74:64:44:02: 92:9e:67:38:e8:7c:47:4c:19:ab:a1:10:2f:6f:e7:90:65:2a: b8:f9:39:29:2c:44:fa:1c:e2:35:a7:fa:54:36:ab:36:34:eb: f1:65:01:57:80:14:15:ea:2f:21:07:ce:57:39:15:9d:56:4d: de:7f:15:41:7b:3f:c3:bd:a2:d3:85:e2:5e:6f:09:77:a3:1d: c9:ec:63:e6:c3:c3:6a:89:36:81:76:6f:d8:a7:ac:3a:d9:d7: 47:34:72:bf:43:a5:52:f5:be:7f:ee:6b:ce:dc:69:05:39:a4: b8:81:a1:59:fe:6c:4f:df:09:6b:97:c5:18:c6:7f:a8:38:d5: 23:c1:7e:83:14:82:15:b4:42:f4:b4:68:40:e9:d3:4f:8e:f6: 67:24:1a:e4:46:0f:54:6d:40:a7:cc:2c:fc:9f:b5:44:e4:0b: b3:9e:72:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0Z8K7PpE1RgmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NTI2ODYzN2MtNGI2Zi00M2IwLWJiMzQtYzZkZmYyODg3ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1QHqE1HfDh44jcOE0kMCm47+us3joUpv3ra +y75iuKwTiuQUYluN00uf1BEzWhh8XFwF/iv64ixsxnspVxcjmTwjA9DBjBQUKGs DO1A7455yEirpACnXJ1NGtbjPxofNQDMhgbbvY8Mmc+3jDZJhb+U6FPN2z1/N4lS wKBcUANXADysV6sPyBtMu1LFGu1WdywI/ndn9hw7SfAeZUHaMbF4CplLg3eCV0TW 4hFYTgMKFXfzIqFLvldhpFtyxIEJuEhhpkNA7o8U96fUQeyavMiE6u0nkM1C6Nr1 kTblrEgnAlSePLkJUd2VCSOYSIJP8hvWRBLTXfqC1B9RjXZLoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb5gWlD6YbpN0ixjG70gQCNlxOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODY1ZDFjNWItYzkyOS0z Nzk4LWIwODItOWFmOGM1NjExOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKohrtmB2tRTrtb1IZORdnQLRWMTc3aFh6ZA0wJ5TLVzJiEHaLlOykjv t7K+o9+7N5CQNiNu6ezlt3cc9LznxzgEC4YBgCELyP1zbFPrnqpmW9Qh9TCOdGRE ApKeZzjofEdMGauhEC9v55BlKrj5OSksRPoc4jWn+lQ2qzY06/FlAVeAFBXqLyEH zlc5FZ1WTd5/FUF7P8O9otOF4l5vCXejHcnsY+bDw2qJNoF2b9inrDrZ10c0cr9D pVL1vn/ua87caQU5pLiBoVn+bE/fCWuXxRjGf6g41SPBfoMUghW0QvS0aEDp00+O 9mckGuRGD1RtQKfMLPyftUTkC7OecnQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:07:02 2025 by rpki-client