$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa File: 918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa (raw, json) Hash identifier: QPtZsWJqcP7fzFT/iCNIiJc9/p4UMSerunBPVjKFpZ0= Subject key identifier: 3B:0A:60:C4:B8:97:42:55:9B:3D:57:14:A2:9D:16:88:54:1C:38:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F910E8D072C8DB5BDD00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f9:10:e8:d0:72:c8:db:5b:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=bffc0f6a-896c-4f74-9fa7-5330326f32f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:2d:88:31:8c:8b:9f:2c:3f:c3:6f:25:9c: c1:9a:41:e3:30:41:29:2d:01:0f:e4:4f:8c:64:45: 0c:df:33:3c:1f:f2:f8:30:b5:43:7a:f0:10:9c:bc: af:dc:60:b4:f4:9e:ea:97:53:3f:8c:5c:56:93:d5: d4:46:17:7c:04:0e:53:e0:df:30:6c:5d:f2:58:64: 43:fd:d5:61:17:fa:0b:b9:5e:06:62:26:ec:bb:0d: 86:b0:6c:db:f1:11:22:c0:a8:38:fa:5b:02:a9:5a: 9a:c6:f1:e5:31:4d:57:e5:f1:d1:e3:7a:25:f2:3a: 4a:33:15:81:61:79:57:d1:6a:d2:86:8f:4e:e5:05: 4f:8a:37:32:e0:f7:32:7e:0a:4e:40:65:46:9f:61: c9:5d:5e:4e:81:57:b2:c0:c8:17:06:20:f7:8c:d7: 52:2f:84:0b:59:f8:3f:6e:87:72:36:31:5c:ec:57: 9e:59:86:75:fa:b7:c3:a6:48:a3:a3:f0:aa:89:22: 4a:51:fe:e6:24:c5:ed:c2:d9:43:62:a9:5c:ad:ff: 19:40:3e:b6:11:b5:b8:d2:8f:07:41:ed:7f:34:1e: 0e:0e:f4:fe:99:06:66:ec:8b:c6:39:28:90:e1:6a: cd:aa:2f:f2:aa:ab:a1:e7:56:11:56:e6:c2:12:de: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:60:C4:B8:97:42:55:9B:3D:57:14:A2:9D:16:88:54:1C:38:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b5:74:a1:f1:08:10:25:3f:11:b0:5c:66:ed:45:75:44:de: 0b:07:5a:1b:ea:07:79:32:b7:d5:e4:12:e5:2c:cb:2b:67:6e: 2a:6d:70:70:4a:bf:8f:e9:06:43:66:ce:09:5b:18:71:37:8e: 9d:45:9b:9b:84:b1:35:bb:b6:e8:75:7f:c0:45:bc:0f:cd:37: cf:98:18:12:26:5e:c1:3d:06:15:31:1a:f4:1c:1f:b0:de:d5: 64:f0:15:f7:42:2e:1c:bf:ad:65:6b:7a:d5:40:db:43:96:05: e9:19:8f:2e:e0:31:f7:c8:e8:f8:ff:88:90:b4:29:41:39:d6: 8c:23:ed:bf:82:6f:d1:8a:e7:05:c8:8d:58:39:6b:e1:8f:c2: 2a:58:ad:ec:8f:3a:28:1b:84:53:42:69:79:8f:56:7c:1a:e8: c7:09:a9:5c:31:65:cc:13:50:61:01:56:ae:11:b9:e1:ff:28: 5d:e4:03:7c:60:dc:30:f8:0c:46:cd:5c:96:5f:5e:4a:5a:fd: 28:08:6f:bd:76:9e:34:a8:34:7d:74:9f:e0:d6:7d:63:9a:d6: eb:38:e5:26:d2:4b:3e:95:23:58:7f:51:00:9f:83:ba:f2:81: a5:c5:de:e0:0a:c4:09:96:57:02:ea:ca:88:05:53:10:b7:e5: fd:69:48:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fkQ6NByyNtb3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YmZmYzBmNmEtODk2Yy00Zjc0LTlmYTctNTMzMDMyNmYzMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEstiDGMi58sP8NvJZzBmkHjMEEpLQEP5E+M ZEUM3zM8H/L4MLVDevAQnLyv3GC09J7ql1M/jFxWk9XURhd8BA5T4N8wbF3yWGRD /dVhF/oLuV4GYibsuw2GsGzb8REiwKg4+lsCqVqaxvHlMU1X5fHR43ol8jpKMxWB YXlX0WrSho9O5QVPijcy4PcyfgpOQGVGn2HJXV5OgVeywMgXBiD3jNdSL4QLWfg/ bodyNjFc7FeeWYZ1+rfDpkijo/CqiSJKUf7mJMXtwtlDYqlcrf8ZQD62EbW40o8H Qe1/NB4ODvT+mQZm7IvGOSiQ4WrNqi/yqquh51YRVubCEt5bFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsKYMS4l0JVmz1XFKKdFohUHDhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTE4Y2E2N2UtM2YyMy0z MGNmLWI5ODAtYTlkMWNmOTVkMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu1dKHxCBAlPxGwXGbtRXVE3gsHWhvqB3kyt9XkEuUsyytnbiptcHBK v4/pBkNmzglbGHE3jp1Fm5uEsTW7tuh1f8BFvA/NN8+YGBImXsE9BhUxGvQcH7De 1WTwFfdCLhy/rWVretVA20OWBekZjy7gMffI6Pj/iJC0KUE51owj7b+Cb9GK5wXI jVg5a+GPwipYreyPOigbhFNCaXmPVnwa6McJqVwxZcwTUGEBVq4RueH/KF3kA3xg 3DD4DEbNXJZfXkpa/SgIb712njSoNH10n+DWfWOa1us45SbSSz6VI1h/UQCfg7ry gaXF3uAKxAmWVwLqyogFUxC35f1pSL0= -----END CERTIFICATE-----Generated at Sun Apr 27 23:57:11 2025 by rpki-client