$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a5c98c8-bf9c-3590-88fc-1138d493fd30.roa File: 8a5c98c8-bf9c-3590-88fc-1138d493fd30.roa (raw, json) Hash identifier: SNnvtmSsQCr3ZdcfqcJ3GYgvd/q3szftN5up2xRLDgQ= Subject key identifier: 89:9E:05:5B:3C:9C:FE:A9:12:2D:98:14:89:05:59:57:F8:E6:6B:1D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24B19B455CC9C905FD3880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a5c98c8-bf9c-3590-88fc-1138d493fd30.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b1:9b:45:5c:c9:c9:05:fd:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=219ea6a1-fd94-46b7-a380-d357b525b343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:68:02:cc:aa:56:f4:b7:9a:65:81:f3:a8: fe:77:a6:4e:60:0a:23:e6:65:22:95:ec:0a:ea:90: 2b:3e:d6:a6:13:53:a0:86:79:5c:82:c4:35:6b:86: 7d:3c:da:36:73:1e:84:97:63:ef:98:15:9d:70:01: 03:80:94:f6:41:f2:9a:20:70:3c:37:5a:d5:54:45: 32:24:99:cc:ce:c7:fd:20:52:d2:cb:89:f3:7a:b4: 1e:18:5e:42:f4:43:c2:f6:42:26:8c:f6:65:08:24: a6:9c:89:fd:4c:e8:cb:d0:a8:90:b4:ba:e6:e2:bf: 53:be:e3:05:d1:17:78:09:69:2f:2b:02:6d:26:ef: 12:25:49:85:34:95:fd:aa:00:62:c7:c4:3f:a5:87: d8:b2:59:7b:5d:50:38:1d:14:cf:ef:f9:a2:bb:ec: 7e:ad:ad:14:e0:74:16:52:93:cd:65:e0:f7:72:f6: c1:97:4b:13:74:3c:f7:df:5c:eb:5d:d3:d5:04:0c: ce:22:f8:a4:df:fa:03:ea:fa:4f:22:84:20:42:f4: 62:f5:3a:f9:61:0b:ed:18:ed:53:b7:f8:21:e0:3b: ce:72:ed:6e:46:08:21:ac:37:79:9d:f9:09:9c:35: 60:59:35:5c:b8:50:ff:48:55:e5:f5:19:f6:c3:40: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:05:5B:3C:9C:FE:A9:12:2D:98:14:89:05:59:57:F8:E6:6B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a5c98c8-bf9c-3590-88fc-1138d493fd30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:fd:ee:a9:f7:e4:8f:41:09:9e:82:f4:cf:25:fd:3a:87:d4: db:29:4d:fe:09:f8:75:0b:8b:55:fd:11:c5:88:f6:2c:c5:59: e9:d6:a0:ce:c2:f4:f3:b5:43:fe:cc:ac:dc:19:84:0f:f9:cb: 53:48:84:2c:b9:5c:d0:75:35:cb:2a:af:fd:95:cf:94:8c:ae: 6b:7c:2c:ad:28:78:e7:70:36:68:7a:4a:17:2b:1a:0d:07:4b: 3e:8e:5b:b7:64:ff:0a:28:04:47:54:a1:69:65:2d:26:7d:5f: d2:00:30:8a:32:20:f1:42:04:e8:1e:5d:42:5d:59:80:2f:5d: c9:39:84:45:ac:ac:51:70:a6:d2:92:8c:0d:ee:08:ba:b4:63: 72:f6:cc:26:92:0a:f4:73:c9:ac:e4:27:ba:ca:a2:03:66:d6: 99:f9:f4:d2:58:79:cc:76:94:a6:fb:a4:5b:56:c9:a4:c5:38: d8:2f:54:45:82:eb:3b:c3:a6:66:8f:41:dd:c2:42:df:21:51: ed:3e:8a:cf:0f:f7:c7:dd:b6:2e:4e:3d:d7:d3:f4:25:52:91: 74:79:5e:35:6e:a0:01:6f:12:5b:e7:3a:4c:f9:be:cc:cd:d2: 29:9c:a8:8a:a0:9a:ec:6b:10:99:7a:b5:24:60:ac:df:27:35: 93:6f:a8:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLGbRVzJyQX9OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MjE5ZWE2YTEtZmQ5NC00NmI3LWEzODAtZDM1N2I1MjViMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2VoAsyqVvS3mmWB86j+d6ZOYAoj5mUilewK 6pArPtamE1OghnlcgsQ1a4Z9PNo2cx6El2PvmBWdcAEDgJT2QfKaIHA8N1rVVEUy JJnMzsf9IFLSy4nzerQeGF5C9EPC9kImjPZlCCSmnIn9TOjL0KiQtLrm4r9TvuMF 0Rd4CWkvKwJtJu8SJUmFNJX9qgBix8Q/pYfYsll7XVA4HRTP7/miu+x+ra0U4HQW UpPNZeD3cvbBl0sTdDz331zrXdPVBAzOIvik3/oD6vpPIoQgQvRi9Tr5YQvtGO1T t/gh4DvOcu1uRgghrDd5nfkJnDVgWTVcuFD/SFXl9Rn2w0BQtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImeBVs8nP6pEi2YFIkFWVf45msdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGE1Yzk4YzgtYmY5Yy0z NTkwLTg4ZmMtMTEzOGQ0OTNmZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC797qn35I9BCZ6C9M8l/TqH1NspTf4J+HULi1X9EcWI9izFWenWoM7C 9PO1Q/7MrNwZhA/5y1NIhCy5XNB1Ncsqr/2Vz5SMrmt8LK0oeOdwNmh6ShcrGg0H Sz6OW7dk/wooBEdUoWllLSZ9X9IAMIoyIPFCBOgeXUJdWYAvXck5hEWsrFFwptKS jA3uCLq0Y3L2zCaSCvRzyazkJ7rKogNm1pn59NJYecx2lKb7pFtWyaTFONgvVEWC 6zvDpmaPQd3CQt8hUe0+is8P98fdti5OPdfT9CVSkXR5XjVuoAFvElvnOkz5vszN 0imcqIqgmuxrEJl6tSRgrN8nNZNvqMk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:07 2025 by rpki-client