$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa File: 999a42e4-ba2d-3d5a-93e9-51dad185705a.roa (raw, json) Hash identifier: Dg7Oprn8wHdqwCQYaZlGoL0L3U8BJ3F2mr1hh4PEXSY= Subject key identifier: C7:B5:70:FF:CB:BD:20:F7:A0:C4:F3:31:6A:5F:06:F9:3A:BB:11:2D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24A7C642903A33AF553060 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a7:c6:42:90:3a:33:af:55:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=04fa27cf-bb62-4cf2-9421-a2cd35b08f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:7d:ba:ef:9c:db:bd:63:c4:7d:89:b4:cf: 9a:c8:00:a9:90:ca:67:9d:fa:aa:21:ab:9a:1f:6e: 79:69:e2:94:54:fa:08:a5:9a:2b:dc:d6:77:c7:e2: 6b:57:01:35:4d:43:13:db:bd:f6:16:6b:c4:71:21: ba:b3:c7:5e:26:d4:44:f0:7c:df:bf:1f:e6:d5:a4: 0c:7d:06:05:49:4c:de:eb:a4:19:44:e5:59:12:62: 0d:a1:c1:96:cd:b5:bb:7e:ed:33:01:b6:7c:39:8d: bf:9f:ab:af:9f:7a:e0:ad:c7:a7:e6:79:9a:0a:bb: 5d:07:6e:19:d8:36:1c:b9:d4:7e:f1:eb:02:e0:97: 93:90:27:1d:78:ff:80:6c:bd:73:84:13:39:20:a7: 3f:2e:26:8c:5e:f0:2b:67:dd:59:be:9d:30:f0:6e: 2d:b1:e7:67:1d:cb:c5:09:77:07:60:f3:aa:54:38: f9:3c:a2:5c:7e:b8:60:2e:af:91:6a:c9:c1:d3:14: 38:3c:87:f2:cf:50:23:78:e2:f1:06:b5:06:c8:af: e4:c9:0f:42:5c:80:41:e5:f4:89:ec:a6:47:84:99: 40:87:dd:2e:80:0a:85:b2:4e:f3:f5:7b:72:ba:26: bc:8d:66:de:c2:09:27:5c:64:a2:1e:e0:ca:2a:f1: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:70:FF:CB:BD:20:F7:A0:C4:F3:31:6A:5F:06:F9:3A:BB:11:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/999a42e4-ba2d-3d5a-93e9-51dad185705a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:32:07:10:b7:52:59:41:4c:88:72:5c:fa:52:a6:8b:79:0b: 7e:f8:2c:15:39:35:26:a9:ee:77:ba:10:30:8b:53:a3:87:3d: 17:e4:86:be:8b:ca:3d:13:cc:4b:bb:ae:b5:d6:76:35:31:ae: d0:ac:61:b3:e9:20:f0:c5:a7:ff:2e:f9:bc:3a:ba:3e:ff:30: 4a:4e:58:56:e0:76:f1:ac:4c:d8:24:fc:e9:b5:e0:37:9e:e8: c0:d5:2c:f2:e3:a4:c5:de:90:a7:0b:ea:bb:6a:f7:f6:a2:36: 0b:1a:bc:b1:66:b6:2e:4c:a9:56:f4:a8:e7:9b:14:58:a0:a2: ba:fe:e9:50:63:a8:1f:4c:a2:18:b6:b5:59:f7:ed:2f:1b:3c: 9a:88:57:5d:1f:e3:db:f1:9b:02:dd:ea:72:d7:70:7e:96:58: cc:d7:c7:cf:57:8b:67:27:41:a7:33:ae:3e:d4:08:d2:dc:1b: ba:2f:28:a3:a1:43:a0:6c:c6:31:e8:65:93:f2:c3:65:fe:c3: 97:a7:72:e2:6c:76:db:52:b0:f9:64:0e:e0:4c:74:18:90:1c: c5:92:ef:69:5b:95:76:72:e1:97:5d:3f:3e:7d:ce:48:48:7e: 65:b3:71:c0:16:75:9b:a5:de:ab:2f:1b:f7:4a:b8:f6:f7:3f: 10:2c:63:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKfGQpA6M69VMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MDRmYTI3Y2YtYmI2Mi00Y2YyLTk0MjEtYTJjZDM1YjA4ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBF9uu+c271jxH2JtM+ayACpkMpnnfqqIaua H255aeKUVPoIpZor3NZ3x+JrVwE1TUMT2732FmvEcSG6s8deJtRE8Hzfvx/m1aQM fQYFSUze66QZROVZEmINocGWzbW7fu0zAbZ8OY2/n6uvn3rgrcen5nmaCrtdB24Z 2DYcudR+8esC4JeTkCcdeP+AbL1zhBM5IKc/LiaMXvArZ91Zvp0w8G4tsednHcvF CXcHYPOqVDj5PKJcfrhgLq+RasnB0xQ4PIfyz1AjeOLxBrUGyK/kyQ9CXIBB5fSJ 7KZHhJlAh90ugAqFsk7z9Xtyuia8jWbewgknXGSiHuDKKvFXOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe1cP/LvSD3oMTzMWpfBvk6uxEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk5YTQyZTQtYmEyZC0z ZDVhLTkzZTktNTFkYWQxODU3MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEyBxC3UllBTIhyXPpSpot5C374LBU5NSap7ne6EDCLU6OHPRfkhr6L yj0TzEu7rrXWdjUxrtCsYbPpIPDFp/8u+bw6uj7/MEpOWFbgdvGsTNgk/Om14Dee 6MDVLPLjpMXekKcL6rtq9/aiNgsavLFmti5MqVb0qOebFFigorr+6VBjqB9Mohi2 tVn37S8bPJqIV10f49vxmwLd6nLXcH6WWMzXx89Xi2cnQaczrj7UCNLcG7ovKKOh Q6BsxjHoZZPyw2X+w5encuJsdttSsPlkDuBMdBiQHMWS72lblXZy4ZddPz59zkhI fmWzccAWdZul3qsvG/dKuPb3PxAsY38= -----END CERTIFICATE-----Generated at Mon Apr 28 08:35:28 2025 by rpki-client