$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d018fc2-d8c3-3bef-8922-860a17e13999.roa File: 9d018fc2-d8c3-3bef-8922-860a17e13999.roa (raw, json) Hash identifier: u4F3qrWktPICyu9TmCA6xKYnxt5OJUPCGFNSh616n4w= Subject key identifier: DF:86:FA:D5:0A:2A:EE:08:C9:09:67:30:42:11:4E:37:DF:13:46:62 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F5308AD8FCD138838D300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d018fc2-d8c3-3bef-8922-860a17e13999.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:53:08:ad:8f:cd:13:88:38:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=f77ef1c1-aac0-47c2-9d08-c6867e34f99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:a9:da:5e:7d:0a:53:1e:ea:4a:d8:59:0b: 05:73:81:fd:cf:a4:c6:9a:fb:5d:75:b5:bb:22:8e: 6b:a5:c6:1d:5e:77:d4:95:4b:dc:70:dd:ed:c0:13: bd:f8:fb:c7:3f:a1:f2:bc:c9:04:d9:07:27:0d:83: 3f:b4:83:3e:41:c0:5b:ca:05:0e:25:ea:ba:52:70: 86:54:60:e6:da:df:25:9d:9f:92:7b:49:a4:a0:0d: 31:02:61:ce:b3:bb:78:c7:6c:39:6d:cb:2c:10:c7: 72:8c:31:d0:2d:c3:05:35:5e:06:ec:04:be:8c:ff: 29:b4:fd:6c:89:a9:a6:a9:12:49:ac:3d:28:14:6c: 16:80:4b:d5:e1:f4:5d:ee:1c:a7:6a:8b:cc:e2:d6: 2f:c6:f1:3d:19:41:bb:1a:94:73:86:3b:32:f7:9c: a4:3e:b4:d0:20:a7:33:2f:09:60:18:43:35:b3:85: aa:4a:9d:33:b5:c1:c9:04:11:02:13:e0:14:06:04: 74:76:d7:b9:95:2c:f8:65:e1:d9:9a:b9:8c:bd:76: 91:de:2b:0f:d0:fd:25:6f:bb:90:7e:bc:29:16:9b: b4:79:d3:31:e7:2d:55:7e:20:f9:33:15:48:54:44: b9:a0:b2:12:00:e3:36:39:92:03:89:44:99:fc:96: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:FA:D5:0A:2A:EE:08:C9:09:67:30:42:11:4E:37:DF:13:46:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d018fc2-d8c3-3bef-8922-860a17e13999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a9:2b:7f:40:d2:59:0a:3a:3c:e1:05:2c:cc:dc:0a:77:57: 97:0c:c5:97:f2:f6:e5:07:50:9d:6c:a2:41:88:0e:7b:53:7e: be:a9:8c:10:c4:28:08:69:5f:98:1b:dd:af:0c:70:82:1d:84: 5d:61:ff:37:27:af:cc:ae:c8:a9:61:28:b1:a4:5a:34:e1:0c: b7:64:13:73:04:f7:e0:af:89:c9:b0:76:5e:05:b3:7a:1f:a4: 1b:e0:e7:19:11:d8:a7:ca:28:56:9b:d6:65:9a:16:23:1a:7b: 47:1b:82:d0:9b:8c:d0:b7:6b:3e:95:6c:b1:e0:da:8c:d8:f6: 48:40:04:ff:d7:36:45:9e:ac:c4:f2:2c:f6:91:10:54:ff:df: c8:98:f1:e2:c0:31:01:ea:d8:0f:4a:58:87:af:aa:37:e5:e6: 3f:63:79:8e:64:a7:f8:38:34:a3:1f:80:33:9a:d0:10:ad:c6: da:60:56:8e:2d:45:20:fe:69:28:7e:19:a1:8d:e7:3a:f2:df: b2:ed:31:83:e9:51:df:c4:d7:f6:e9:1b:8a:0e:06:81:cc:08: 2f:b6:3a:6f:d7:cf:0a:08:e5:2e:f0:a3:26:c9:92:2c:51:7a: 7d:f4:31:5f:f5:ac:50:6f:32:c7:90:fc:5d:62:b9:09:22:2a: e2:00:23:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1MIrY/NE4g40wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk Zjc3ZWYxYzEtYWFjMC00N2MyLTlkMDgtYzY4NjdlMzRmOTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNap2l59ClMe6krYWQsFc4H9z6TGmvtddbW7 Io5rpcYdXnfUlUvccN3twBO9+PvHP6HyvMkE2QcnDYM/tIM+QcBbygUOJeq6UnCG VGDm2t8lnZ+Se0mkoA0xAmHOs7t4x2w5bcssEMdyjDHQLcMFNV4G7AS+jP8ptP1s iammqRJJrD0oFGwWgEvV4fRd7hynaovM4tYvxvE9GUG7GpRzhjsy95ykPrTQIKcz LwlgGEM1s4WqSp0ztcHJBBECE+AUBgR0dte5lSz4ZeHZmrmMvXaR3isP0P0lb7uQ frwpFpu0edMx5y1VfiD5MxVIVES5oLISAOM2OZIDiUSZ/JaAuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+G+tUKKu4IyQlnMEIRTjffE0ZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWQwMThmYzItZDhjMy0z YmVmLTg5MjItODYwYTE3ZTEzOTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWpK39A0lkKOjzhBSzM3Ap3V5cMxZfy9uUHUJ1sokGIDntTfr6pjBDE KAhpX5gb3a8McIIdhF1h/zcnr8yuyKlhKLGkWjThDLdkE3ME9+Cvicmwdl4Fs3of pBvg5xkR2KfKKFab1mWaFiMae0cbgtCbjNC3az6VbLHg2ozY9khABP/XNkWerMTy LPaREFT/38iY8eLAMQHq2A9KWIevqjfl5j9jeY5kp/g4NKMfgDOa0BCtxtpgVo4t RSD+aSh+GaGN5zry37LtMYPpUd/E1/bpG4oOBoHMCC+2Om/XzwoI5S7woybJkixR en30MV/1rFBvMseQ/F1iuQkiKuIAI9A= -----END CERTIFICATE-----Generated at Sun Apr 27 22:11:59 2025 by rpki-client