$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa File: 91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa (raw, json) Hash identifier: 51TvK3mM/jR4wyKWS7CkMCWHvpEQe1Em141XFqDyuP8= Subject key identifier: 70:E9:ED:D0:93:6C:00:80:EA:A6:9C:7C:83:31:46:93:1E:00:06:1A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F54028DC9CF212CBD1F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:54:02:8d:c9:cf:21:2c:bd:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=d33d8bed-baee-4252-9047-29ae1a414b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:25:d3:ff:63:93:8c:7f:44:90:73:cb:f2: 94:07:5a:10:1c:6a:86:34:51:bb:0c:c8:f2:00:04: 12:cc:57:fe:ed:b6:a1:fe:1d:f5:c4:ac:13:5f:a1: 27:97:d5:0d:e2:80:44:d5:de:23:3b:9b:71:8a:63: 79:41:31:df:5a:77:12:6d:fd:d2:96:4f:ac:e0:18: 34:da:0f:4c:ad:df:59:c0:50:24:be:67:b3:20:95: a5:cf:0c:93:f1:3d:88:81:cd:da:f3:d9:91:7a:8d: b9:f9:29:43:64:0d:40:17:56:fb:10:e9:71:b0:f5: 56:9b:14:b5:7d:67:87:52:6e:d9:38:1b:9b:96:12: c3:16:da:74:49:83:47:15:9b:5a:e5:0a:53:9a:1f: fb:2b:53:2d:c8:d3:f7:be:92:58:a1:0a:95:13:da: a9:27:cf:37:8b:86:9c:c1:25:39:5d:59:13:b2:e2: dc:59:ab:23:1a:17:96:43:0d:3a:1a:b8:6a:ef:14: d3:cc:94:5d:de:d1:5e:7d:b0:2d:78:0c:d1:a2:f4: be:a6:19:3e:90:d9:c9:a3:87:11:91:2a:bb:db:8f: 4b:a7:be:3f:b0:6d:9e:fd:50:a0:31:b4:29:b3:ec: 6a:a9:c9:72:4b:cb:a2:fc:c2:3c:18:25:3e:01:58: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:ED:D0:93:6C:00:80:EA:A6:9C:7C:83:31:46:93:1E:00:06:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c6:4b:f3:4f:63:e2:68:4c:1a:09:11:6a:55:4c:7b:21:fb: b7:52:b7:32:67:95:31:47:31:64:f6:76:91:26:32:b4:0e:f2: aa:a3:50:2f:c9:9a:2f:bb:3f:a0:05:72:74:2e:07:fe:91:df: 2c:9b:50:94:dd:8d:35:e0:8e:03:0f:0a:e3:6e:47:0a:fd:d5: 84:50:e2:8d:b3:bd:a3:c2:f3:1d:f1:28:31:36:a3:24:c1:86: 34:4f:c2:d7:02:21:b1:44:c9:d0:4d:d1:5d:85:da:c8:71:1e: 14:f2:8a:ef:8f:65:b6:74:f4:4e:8c:7e:e5:ee:cc:23:85:28: 59:5f:eb:ca:09:1c:bb:f5:a5:89:7c:5e:09:84:53:21:ee:c3: 88:d9:5c:80:9e:d9:fd:bd:85:c0:53:ff:ae:ad:28:03:30:2c: a3:e9:d5:e1:4e:cf:ca:96:8a:d2:2e:57:0e:91:a8:c3:a7:b1: e3:cb:9b:f8:48:24:fe:f7:02:54:38:af:90:f2:80:d2:ac:f6: 90:20:55:9d:fd:da:04:f1:2c:70:e9:b3:cd:0b:10:83:92:8a: e0:e2:27:60:2c:ce:f5:ae:9c:3b:38:a6:4e:95:27:5c:48:ac: cc:91:03:e8:5f:cf:fa:8d:28:aa:e8:1e:4a:68:9d:e2:a4:41: 3b:eb:07:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1QCjcnPISy9HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZDMzZDhiZWQtYmFlZS00MjUyLTkwNDctMjlhZTFhNDE0YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTQl0/9jk4x/RJBzy/KUB1oQHGqGNFG7DMjy AAQSzFf+7bah/h31xKwTX6Enl9UN4oBE1d4jO5tximN5QTHfWncSbf3Slk+s4Bg0 2g9Mrd9ZwFAkvmezIJWlzwyT8T2Igc3a89mReo25+SlDZA1AF1b7EOlxsPVWmxS1 fWeHUm7ZOBublhLDFtp0SYNHFZta5QpTmh/7K1MtyNP3vpJYoQqVE9qpJ883i4ac wSU5XVkTsuLcWasjGheWQw06Grhq7xTTzJRd3tFefbAteAzRovS+phk+kNnJo4cR kSq7249Lp74/sG2e/VCgMbQps+xqqclyS8ui/MI8GCU+AVg+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDp7dCTbACA6qacfIMxRpMeAAYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTFhNmY5NDctYWE2My0z OGI4LThmYTQtMGY3NjQyNWZjYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXGS/NPY+JoTBoJEWpVTHsh+7dStzJnlTFHMWT2dpEmMrQO8qqjUC/J mi+7P6AFcnQuB/6R3yybUJTdjTXgjgMPCuNuRwr91YRQ4o2zvaPC8x3xKDE2oyTB hjRPwtcCIbFEydBN0V2F2shxHhTyiu+PZbZ09E6MfuXuzCOFKFlf68oJHLv1pYl8 XgmEUyHuw4jZXICe2f29hcBT/66tKAMwLKPp1eFOz8qWitIuVw6RqMOnsePLm/hI JP73AlQ4r5DygNKs9pAgVZ392gTxLHDps80LEIOSiuDiJ2AszvWunDs4pk6VJ1xI rMyRA+hfz/qNKKroHkponeKkQTvrBzg= -----END CERTIFICATE-----Generated at Mon Apr 28 12:49:53 2025 by rpki-client