$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa File: 94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa (raw, json) Hash identifier: Tijh86e9r2nTC1ItQ1w+AjiLbHfJcFhDBp3JCuKHzVs= Subject key identifier: 41:0E:C5:7F:BC:D6:BA:A4:EE:2C:6A:9C:5F:61:EF:88:D2:40:E3:36 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F6DF4B5C3C03CE7C2F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f6:df:4b:5c:3c:03:ce:7c:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=bd89fc7d-8fc8-48ad-a676-fc04b679fe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:88:5d:d4:c5:dc:6f:02:30:31:e9:e4:2b: 7b:73:7d:c1:f4:74:ab:11:49:89:2a:5d:51:ab:48: 0e:1d:ed:0d:cf:5c:3b:0b:96:a9:8d:71:95:5c:15: a7:c5:b5:dd:4d:0e:7f:0b:30:98:52:8a:9e:b2:72: 1d:96:a8:6d:95:a1:ac:df:a4:af:5c:04:58:2d:85: b8:de:92:fa:4c:73:eb:b1:85:37:3d:ee:e3:cb:32: 40:24:50:79:5c:1a:a8:68:82:dc:73:57:3a:a7:05: ab:6c:87:87:74:19:af:c4:71:47:cb:50:60:58:c0: 6c:33:9e:43:40:cb:05:b2:97:01:a6:00:a1:a9:a1: f6:58:b1:d8:83:26:50:3b:61:8b:c1:3b:c1:a3:9b: 04:68:67:13:2e:81:f5:7e:73:de:04:51:5a:c9:af: f4:9b:d4:0d:bf:e6:8f:0b:71:be:92:2b:8f:79:78: b9:7d:5d:0c:8c:51:f9:0d:b6:11:ea:3c:63:37:7a: a1:d2:b9:d2:8d:ca:7e:dc:3c:eb:64:f0:17:4a:5d: b6:7d:88:39:be:d8:4a:b8:5a:96:52:e6:44:71:7e: a8:a0:7b:75:2b:36:d1:99:93:2f:0c:97:a4:23:52: 93:be:93:4d:e3:c3:22:fd:02:1c:38:c8:2f:2d:6f: 09:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0E:C5:7F:BC:D6:BA:A4:EE:2C:6A:9C:5F:61:EF:88:D2:40:E3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:91:a6:3e:80:74:89:dd:e6:b0:df:53:94:65:5c:10:0f:4c: 95:7c:9f:b1:bc:5e:18:75:27:c6:33:8d:b2:f3:8a:87:95:08: b4:40:3e:f3:9a:4d:72:e9:68:3f:1e:62:90:5e:d4:84:0f:a6: ff:c8:de:e0:d8:f9:ea:45:67:10:a2:3f:79:37:b0:c4:a0:e5: b6:86:23:cd:e3:ab:bf:b6:f9:be:9f:58:0f:4f:39:b2:ed:83: 54:db:f9:e6:b2:6e:8e:60:ec:84:3b:5a:94:63:24:1a:93:ea: 90:9f:63:90:b9:35:7a:f8:04:4b:a0:86:d5:03:4b:a6:5d:d9: 56:c4:ef:25:be:ce:fb:d7:a4:aa:5d:38:5b:ba:4e:1a:71:a4: 9a:1f:b7:dd:c8:05:ed:98:1b:07:bb:f3:bb:b6:07:8e:cc:13: f5:c6:b2:83:10:d8:aa:10:a3:ca:e0:9a:61:07:10:6e:c0:20: f0:26:06:a0:c6:cd:98:43:85:a1:3c:0a:85:2b:57:e9:fe:38: 57:8e:5b:7e:3f:46:18:48:07:eb:3f:b9:f4:df:a5:a7:db:60: 6f:a4:80:96:30:29:71:33:fa:2d:e1:3e:65:33:cc:1e:c4:87: 33:4c:9c:fe:3d:c2:5a:70:50:c3:77:33:3d:24:91:f1:17:7c: e3:b2:78:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fbfS1w8A858LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YmQ4OWZjN2QtOGZjOC00OGFkLWE2NzYtZmMwNGI2NzlmZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlqIXdTF3G8CMDHp5Ct7c33B9HSrEUmJKl1R q0gOHe0Nz1w7C5apjXGVXBWnxbXdTQ5/CzCYUoqesnIdlqhtlaGs36SvXARYLYW4 3pL6THPrsYU3Pe7jyzJAJFB5XBqoaILcc1c6pwWrbIeHdBmvxHFHy1BgWMBsM55D QMsFspcBpgChqaH2WLHYgyZQO2GLwTvBo5sEaGcTLoH1fnPeBFFaya/0m9QNv+aP C3G+kiuPeXi5fV0MjFH5DbYR6jxjN3qh0rnSjcp+3DzrZPAXSl22fYg5vthKuFqW UuZEcX6ooHt1KzbRmZMvDJekI1KTvpNN48Mi/QIcOMgvLW8J7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEOxX+81rqk7ixqnF9h74jSQOM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTRkYjIyY2QtMzg4ZC0z YmI3LWE3YzYtYTM0ZDNkMTE1NTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Rpj6AdInd5rDfU5RlXBAPTJV8n7G8Xhh1J8YzjbLzioeVCLRAPvOa TXLpaD8eYpBe1IQPpv/I3uDY+epFZxCiP3k3sMSg5baGI83jq7+2+b6fWA9PObLt g1Tb+eaybo5g7IQ7WpRjJBqT6pCfY5C5NXr4BEughtUDS6Zd2VbE7yW+zvvXpKpd OFu6ThpxpJoft93IBe2YGwe787u2B47ME/XGsoMQ2KoQo8rgmmEHEG7AIPAmBqDG zZhDhaE8CoUrV+n+OFeOW34/RhhIB+s/ufTfpafbYG+kgJYwKXEz+i3hPmUzzB7E hzNMnP49wlpwUMN3Mz0kkfEXfOOyeP4= -----END CERTIFICATE-----Generated at Sun Apr 27 17:36:16 2025 by rpki-client