$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fb74576-43c3-3596-9aad-5c8098270379.roa File: 8fb74576-43c3-3596-9aad-5c8098270379.roa (raw, json) Hash identifier: 7r2pJ7UKmhQXncD6rkcAMm0dpJAv1rRysCrlQTR1m/E= Subject key identifier: 86:46:79:32:4A:BB:5A:61:20:1F:16:E7:1A:5F:E9:E5:0D:CF:F1:DC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B49387B8A809EC5ADF00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fb74576-43c3-3596-9aad-5c8098270379.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b4:93:87:b8:a8:09:ec:5a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=ba9d7efe-4562-467e-aea5-375e5a0bb634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:92:32:7a:f1:ce:14:14:c8:28:00:ee:fc: 4d:95:2b:1f:50:82:f0:ba:c8:f9:73:a2:1b:93:a4: 80:ad:26:ca:eb:2e:e3:2d:fa:06:4e:ac:b6:83:c7: 68:5c:79:32:9e:ba:1a:b2:95:de:4c:5f:0c:60:e4: 51:6e:d4:8c:ad:62:1d:30:40:c6:ba:6b:41:44:05: 38:4e:20:ff:2a:2e:ce:47:59:6b:2b:9a:59:5c:88: 11:4c:76:f0:e2:7c:46:d4:10:a9:4e:c7:3a:84:bb: 9c:ab:c0:88:97:8d:17:e7:46:f8:49:72:34:7e:58: cb:11:46:df:85:98:4a:4b:6c:2b:61:a7:d8:eb:1a: bd:ae:49:dc:55:21:52:01:e8:08:6a:f2:eb:74:ed: 53:a4:00:d8:f6:46:ec:56:7a:9c:de:5a:2b:3a:cb: 8e:4f:7f:8a:93:6e:f9:b9:81:a3:31:b3:8b:73:0b: 2a:f6:6a:56:33:cb:68:25:3c:85:32:71:3f:e2:e3: d1:20:d9:f9:4a:d6:a0:5d:10:b6:33:41:15:e0:ba: f2:39:94:3e:4d:b9:f4:82:24:51:cc:ed:f1:5e:2e: 78:65:d6:44:d1:fc:b7:a2:c4:8f:d2:e6:3e:0e:50: 6a:ac:41:24:a3:f9:42:ea:82:80:3d:d7:5a:6f:09: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:46:79:32:4A:BB:5A:61:20:1F:16:E7:1A:5F:E9:E5:0D:CF:F1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fb74576-43c3-3596-9aad-5c8098270379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:32:23:b9:38:fc:70:1e:f7:ab:f3:ae:e7:b4:2c:85:8d:4b: eb:7c:35:15:29:98:c0:4c:ca:cf:b5:67:b1:32:fe:86:35:e0: eb:83:bf:5c:f4:0f:a2:6f:4b:77:9d:ea:88:1f:e1:de:da:1f: ed:66:ef:68:42:f0:af:dc:98:bd:9f:7b:c8:5e:1f:31:54:a8: 73:32:3a:b2:4f:d0:ff:93:26:bf:24:09:9a:2c:f2:3f:ff:d6: c7:ed:c6:0b:15:61:a4:56:89:90:89:a1:b1:6f:14:59:bd:b8: 4c:64:b4:7d:42:64:a1:b3:98:42:ee:a8:c0:dc:eb:5c:e4:36: 6d:7a:08:2b:7e:0b:db:77:1e:26:47:ea:89:d8:a8:77:5c:1b: 56:e2:52:2c:0a:62:f3:36:5b:f4:73:a0:b3:95:0c:0b:55:b0: ed:1c:50:dc:9c:3b:92:b0:2f:83:38:48:ce:89:52:60:09:01: 2b:8c:72:2a:64:a3:2a:a4:99:35:3e:89:63:a8:72:8e:ce:ba: 2f:c2:af:1b:5a:75:cb:2d:1f:44:4b:19:5a:f9:ed:39:c3:db: de:30:de:0f:02:66:bf:3d:fb:1e:22:d2:0f:9f:1b:c0:0b:ee: 5e:ea:88:24:75:b7:7c:1f:24:c3:09:e3:8a:75:55:7f:c6:f7: 09:7c:82:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLSTh7ioCexa3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YmE5ZDdlZmUtNDU2Mi00NjdlLWFlYTUtMzc1ZTVhMGJiNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUqSMnrxzhQUyCgA7vxNlSsfUILwusj5c6Ib k6SArSbK6y7jLfoGTqy2g8doXHkynroaspXeTF8MYORRbtSMrWIdMEDGumtBRAU4 TiD/Ki7OR1lrK5pZXIgRTHbw4nxG1BCpTsc6hLucq8CIl40X50b4SXI0fljLEUbf hZhKS2wrYafY6xq9rkncVSFSAegIavLrdO1TpADY9kbsVnqc3lorOsuOT3+Kk275 uYGjMbOLcwsq9mpWM8toJTyFMnE/4uPRINn5StagXRC2M0EV4LryOZQ+Tbn0giRR zO3xXi54ZdZE0fy3osSP0uY+DlBqrEEko/lC6oKAPddabwk5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZGeTJKu1phIB8W5xpf6eUNz/HcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGZiNzQ1NzYtNDNjMy0z NTk2LTlhYWQtNWM4MDk4MjcwMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUyI7k4/HAe96vzrue0LIWNS+t8NRUpmMBMys+1Z7Ey/oY14OuDv1z0 D6JvS3ed6ogf4d7aH+1m72hC8K/cmL2fe8heHzFUqHMyOrJP0P+TJr8kCZos8j// 1sftxgsVYaRWiZCJobFvFFm9uExktH1CZKGzmELuqMDc61zkNm16CCt+C9t3HiZH 6onYqHdcG1biUiwKYvM2W/RzoLOVDAtVsO0cUNycO5KwL4M4SM6JUmAJASuMcipk oyqkmTU+iWOoco7Oui/CrxtadcstH0RLGVr57TnD294w3g8CZr89+x4i0g+fG8AL 7l7qiCR1t3wfJMMJ44p1VX/G9wl8gpM= -----END CERTIFICATE-----Generated at Tue Apr 29 11:25:32 2025 by rpki-client