$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9485a2a9-524a-384a-bf9b-895381d0355c.roa File: 9485a2a9-524a-384a-bf9b-895381d0355c.roa (raw, json) Hash identifier: 6XhYFRZU9IBmIW40CbGKAuiY0Qx+RKvBEFM5TITNh88= Subject key identifier: AC:A4:57:02:AC:57:4B:35:76:81:BA:EC:AE:03:D4:D3:2A:F3:6A:27 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F551680E41EB7F1B04DC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9485a2a9-524a-384a-bf9b-895381d0355c.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:55:16:80:e4:1e:b7:f1:b0:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=3b49047a-20a7-4dfa-83db-42235f29111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:dc:2d:23:ba:a6:f5:a5:d9:74:4e:e6:40: bb:6b:7c:76:54:f0:b2:4d:b9:85:e7:5a:6d:a3:d9: 4c:db:5c:8a:1c:f0:3f:3c:10:fa:00:d9:42:4c:46: c0:b7:7f:07:42:84:13:b2:40:47:5e:5f:81:15:2a: 10:11:21:d2:f8:90:91:9a:5a:4a:a1:c2:2f:fd:0d: 64:b9:8c:09:78:05:aa:a8:37:c4:4a:1b:4d:cb:16: 73:5b:cf:52:c7:27:6d:cb:bf:ed:ee:37:76:2e:be: e7:fa:59:39:10:7e:f2:e8:5c:92:85:70:5e:15:5a: f2:5d:87:78:55:79:b0:51:41:23:00:e4:f6:ec:ac: af:e6:81:d0:04:d3:93:fc:13:d0:50:6d:b4:b9:c3: 8d:53:5b:df:6c:d1:77:51:46:21:4c:38:46:78:92: e7:be:17:d2:84:8d:ec:e0:60:87:60:bb:7c:38:f1: 3b:1c:66:71:94:a4:42:71:0a:31:6f:f6:21:f0:f7: e3:7a:05:97:30:6b:0a:b8:1e:5b:3a:40:43:88:c0: 1b:ad:f9:c7:dd:47:2c:49:a7:34:e8:33:a3:5b:84: dd:8d:75:2f:77:55:0b:b6:c4:78:c8:25:18:2c:95: d5:81:f8:96:3b:8f:aa:45:68:6c:fa:50:15:9c:33: 38:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A4:57:02:AC:57:4B:35:76:81:BA:EC:AE:03:D4:D3:2A:F3:6A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9485a2a9-524a-384a-bf9b-895381d0355c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ad:24:81:4e:c8:81:63:64:42:cf:e3:c2:85:2e:8e:1d:52: 64:36:f1:fe:30:ac:ef:3c:e7:86:18:2d:e4:fa:c2:9f:94:ae: c9:e8:db:cf:b9:69:84:dc:bd:da:5a:6f:20:36:87:d9:0b:ef: e9:7f:ea:45:3e:b2:c2:9d:c6:be:95:1f:0a:96:21:0d:34:69: f5:66:05:9a:75:02:82:51:e5:70:21:4a:72:41:33:01:e9:64: 54:07:07:b7:f2:0a:27:cc:db:40:48:20:65:69:90:6f:73:b8: b2:1c:3c:8a:6e:07:ca:32:3c:53:51:c1:4a:38:63:b4:11:bd: cf:e0:c1:e1:17:f6:91:97:95:e1:87:6d:05:fd:99:64:9f:a0: 03:30:14:88:88:f4:3d:ce:56:a4:4c:1c:c9:f4:df:f9:0b:28: 40:79:fd:fd:5e:a1:3b:60:ac:11:f9:93:7a:0e:59:89:ed:98: ab:42:cf:a1:ff:f9:19:5c:44:95:49:34:3f:30:67:f3:eb:90: 65:45:76:e7:2a:84:82:75:34:44:20:71:01:2b:57:ec:af:1a: 2c:9b:a4:4e:4f:60:83:aa:9b:cd:7e:ea:b4:fd:c5:d3:5a:00: f7:62:4c:ac:ad:7f:01:51:c2:36:60:db:3a:41:9a:10:57:71: 9f:4b:46:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1UWgOQet/GwTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk M2I0OTA0N2EtMjBhNy00ZGZhLTgzZGItNDIyMzVmMjkxMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj7cLSO6pvWl2XRO5kC7a3x2VPCyTbmF51pt o9lM21yKHPA/PBD6ANlCTEbAt38HQoQTskBHXl+BFSoQESHS+JCRmlpKocIv/Q1k uYwJeAWqqDfEShtNyxZzW89Sxydty7/t7jd2Lr7n+lk5EH7y6FyShXBeFVryXYd4 VXmwUUEjAOT27Kyv5oHQBNOT/BPQUG20ucONU1vfbNF3UUYhTDhGeJLnvhfShI3s 4GCHYLt8OPE7HGZxlKRCcQoxb/Yh8PfjegWXMGsKuB5bOkBDiMAbrfnH3UcsSac0 6DOjW4TdjXUvd1ULtsR4yCUYLJXVgfiWO4+qRWhs+lAVnDM4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKykVwKsV0s1doG67K4D1NMq82onMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTQ4NWEyYTktNTI0YS0z ODRhLWJmOWItODk1MzgxZDAzNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOtJIFOyIFjZELP48KFLo4dUmQ28f4wrO8854YYLeT6wp+Ursno28+5 aYTcvdpabyA2h9kL7+l/6kU+ssKdxr6VHwqWIQ00afVmBZp1AoJR5XAhSnJBMwHp ZFQHB7fyCifM20BIIGVpkG9zuLIcPIpuB8oyPFNRwUo4Y7QRvc/gweEX9pGXleGH bQX9mWSfoAMwFIiI9D3OVqRMHMn03/kLKEB5/f1eoTtgrBH5k3oOWYntmKtCz6H/ +RlcRJVJND8wZ/PrkGVFducqhIJ1NEQgcQErV+yvGiybpE5PYIOqm81+6rT9xdNa APdiTKytfwFRwjZg2zpBmhBXcZ9LRkA= -----END CERTIFICATE-----Generated at Sun Apr 27 23:08:39 2025 by rpki-client