$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/97a8c11b-b46a-367d-9012-07ffbfadfaae.roa File: 97a8c11b-b46a-367d-9012-07ffbfadfaae.roa (raw, json) Hash identifier: cFX6/MiO8p8MUCjueNuHeFnqFQjUyhheEoWDtieLFks= Subject key identifier: A6:44:4E:A6:1E:B5:1F:5B:61:82:EE:10:01:7C:D7:2D:6D:94:62:44 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F792B8BEC0E070A52980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/97a8c11b-b46a-367d-9012-07ffbfadfaae.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f7:92:b8:be:c0:e0:70:a5:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=529fd06f-bbdb-43f4-84a6-4f04615aec58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:49:5b:bf:88:80:ba:4d:03:69:ce:c3:60: 12:4e:9f:44:34:a3:f1:94:37:00:8a:e7:bf:80:fd: 6d:a7:02:24:6c:03:63:b9:60:d2:8f:de:93:a2:b2: 17:14:60:7f:10:17:b4:42:8e:62:af:f3:f4:8b:19: 44:ee:11:32:84:f0:0e:fa:de:52:02:53:88:be:83: cc:bf:36:fa:70:6b:aa:0c:b5:f6:7a:4c:1f:0c:51: 11:55:60:c5:d2:b8:b4:c7:85:a3:a3:8f:03:1a:3c: 8a:82:70:10:67:df:86:63:4c:f4:ee:c7:42:4c:0d: 72:29:4f:37:cd:17:20:38:ea:e6:99:25:29:00:ed: 7d:fa:db:74:76:05:0b:ce:31:29:92:2d:fa:90:7c: 25:71:1b:e5:66:c6:7c:ce:5d:7a:4f:7e:b1:a1:98: 7e:11:d8:39:8b:38:0a:f6:d2:a4:bf:43:f1:61:dc: bb:47:8c:2e:f5:40:c0:b8:6c:80:6c:6c:12:c3:c6: a0:6c:d6:0b:18:9b:99:c7:22:73:46:bb:ea:99:04: b4:aa:f4:31:fd:aa:ab:f7:80:74:fa:8d:4f:15:a3: 5c:c8:0b:ef:e6:e8:73:00:1a:1f:ba:71:77:dd:a4: 94:44:6a:6f:cc:fa:20:53:4e:bc:34:7a:9e:c2:41: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:4E:A6:1E:B5:1F:5B:61:82:EE:10:01:7C:D7:2D:6D:94:62:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/97a8c11b-b46a-367d-9012-07ffbfadfaae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7d:70:cd:ac:ec:e9:18:51:67:8d:59:8f:23:1c:ec:6c:60: 1e:21:f2:35:95:48:6a:f6:b7:1a:46:bb:82:bc:6f:44:b0:ee: f3:e9:49:bd:fe:d9:45:80:27:de:06:ac:d1:4c:11:7e:5c:dc: fd:2f:4a:75:9d:aa:a5:b3:b6:87:5c:18:b0:5a:cc:b5:bd:11: cc:67:55:a2:ee:0a:71:02:3d:90:46:40:c0:c3:8e:92:19:6f: b9:1f:59:4d:f9:98:d2:15:85:20:af:cd:b0:66:eb:2e:77:af: 5b:60:7c:16:bb:96:a6:9b:17:1d:86:35:02:a4:d9:fa:5d:99: 79:a0:94:68:7c:e8:1e:19:de:7b:18:f2:16:69:24:48:0a:7d: 85:14:fe:56:54:0f:1e:a0:9b:4d:87:5e:be:5e:f9:fd:63:bf: 08:64:86:c6:8d:a3:42:4e:27:45:52:d8:b0:70:17:05:74:1c: 0f:fe:58:a4:28:02:10:29:a7:3a:f7:56:be:14:b9:70:4d:81: 5b:a1:ce:b9:92:db:b5:cd:88:e1:8f:42:ad:48:d1:54:a4:e1: ba:3a:e7:9b:1b:f4:87:ea:4b:a1:04:dd:e2:c8:02:ae:6c:a9: fa:50:d7:45:3f:ba:71:13:42:c6:ec:7d:c8:fc:29:24:31:5b: c5:54:7f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+feSuL7A4HClKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NTI5ZmQwNmYtYmJkYi00M2Y0LTg0YTYtNGYwNDYxNWFlYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzNJW7+IgLpNA2nOw2ASTp9ENKPxlDcAiue/ gP1tpwIkbANjuWDSj96TorIXFGB/EBe0Qo5ir/P0ixlE7hEyhPAO+t5SAlOIvoPM vzb6cGuqDLX2ekwfDFERVWDF0ri0x4Wjo48DGjyKgnAQZ9+GY0z07sdCTA1yKU83 zRcgOOrmmSUpAO19+tt0dgULzjEpki36kHwlcRvlZsZ8zl16T36xoZh+Edg5izgK 9tKkv0PxYdy7R4wu9UDAuGyAbGwSw8agbNYLGJuZxyJzRrvqmQS0qvQx/aqr94B0 +o1PFaNcyAvv5uhzABofunF33aSURGpvzPogU068NHqewkGX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZETqYetR9bYYLuEAF81y1tlGJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTdhOGMxMWItYjQ2YS0z NjdkLTkwMTItMDdmZmJmYWRmYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt9cM2s7OkYUWeNWY8jHOxsYB4h8jWVSGr2txpGu4K8b0Sw7vPpSb3+ 2UWAJ94GrNFMEX5c3P0vSnWdqqWztodcGLBazLW9EcxnVaLuCnECPZBGQMDDjpIZ b7kfWU35mNIVhSCvzbBm6y53r1tgfBa7lqabFx2GNQKk2fpdmXmglGh86B4Z3nsY 8hZpJEgKfYUU/lZUDx6gm02HXr5e+f1jvwhkhsaNo0JOJ0VS2LBwFwV0HA/+WKQo AhAppzr3Vr4UuXBNgVuhzrmS27XNiOGPQq1I0VSk4bo655sb9IfqS6EE3eLIAq5s qfpQ10U/unETQsbsfcj8KSQxW8VUf2M= -----END CERTIFICATE-----Generated at Mon Apr 28 02:15:40 2025 by rpki-client