$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6d23f4c-db5b-38a6-9889-5bd3765abc4a.roa File: a6d23f4c-db5b-38a6-9889-5bd3765abc4a.roa (raw, json) Hash identifier: sg0i5tWytwnRTId0h1xBQeONZZLMAtH2lLYk+yDHDi0= Subject key identifier: 88:56:05:9E:0A:06:CA:FE:F9:8E:90:85:47:D1:80:B0:AD:CC:38:5D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D7EEB882A46DFBFF2C20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6d23f4c-db5b-38a6-9889-5bd3765abc4a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36411 IP address blocks: 104.135.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d7:ee:b8:82:a4:6d:fb:ff:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=787821aa-c89a-4202-89f9-be2027fe2968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:e6:d6:c5:68:02:6b:ca:b2:9e:3d:26:42: 1f:92:8e:10:99:bb:d9:ca:7b:63:b0:6a:61:53:89: 5b:cc:ef:5b:46:f1:65:4b:91:43:38:ed:7e:74:6d: 5d:db:f0:a1:aa:b8:fa:2b:05:8e:f2:27:13:b4:e9: 79:8a:dc:4f:a2:ab:99:b7:a8:f9:2c:44:85:81:2d: ce:a1:61:75:04:e3:76:f5:11:46:cd:e3:59:05:c3: 09:d8:b9:d8:75:f4:7b:e0:81:3a:b4:d3:e1:18:e0: 31:a3:ab:6e:18:ba:79:ae:7f:37:03:d5:b7:a4:69: ba:a8:8e:13:9d:dd:75:a8:a7:29:16:f9:81:4c:e0: d3:69:2d:30:af:28:4b:55:0a:a0:b6:b5:03:e1:13: ba:24:bd:84:e8:8e:aa:d8:22:eb:ac:55:a6:15:3c: 71:60:58:17:ee:72:18:1d:f6:9f:70:e8:76:c3:8f: 3c:e5:b5:17:47:65:74:72:7d:81:cd:c2:bd:d8:fa: af:54:2a:47:fe:4a:2b:4a:49:ad:e6:e9:46:2a:72: 6e:ce:99:d2:25:9a:28:6d:42:7d:9a:c7:1a:71:68: 83:a4:08:36:f2:a5:ab:f0:31:ac:09:d0:ce:47:76: e6:a1:71:38:e5:fd:d6:43:af:c5:30:ab:b9:b7:49: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:05:9E:0A:06:CA:FE:F9:8E:90:85:47:D1:80:B0:AD:CC:38:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6d23f4c-db5b-38a6-9889-5bd3765abc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7a:3b:fc:13:de:f2:f3:75:a2:18:0c:a4:3f:b4:8d:87:21: 38:94:48:8a:bb:70:1f:f4:c8:fc:88:bb:af:ba:9d:00:56:85: bf:eb:23:43:02:0f:6c:41:d2:77:da:69:10:ee:67:18:af:1f: 5d:f6:71:36:cd:d2:5a:58:0a:68:65:17:93:a0:d9:31:57:1e: 2a:c6:9c:8c:36:cc:1f:62:e2:df:8c:e3:75:0a:f5:5a:c5:59: 72:f2:93:4e:7b:0c:b7:14:88:46:61:75:13:0d:8f:82:19:48: 9c:b9:bd:9f:44:cc:fb:4b:66:80:f1:06:ba:3b:24:02:61:f9: 4d:36:c1:06:db:19:d5:3e:8e:df:84:e6:f2:2f:cb:e4:e4:76: ea:b0:15:c0:5c:bb:9f:30:4f:f7:b6:d9:a2:da:ce:25:29:25: da:c4:95:bc:52:a7:79:11:ce:22:15:86:89:e2:8c:da:87:10: 86:e5:40:b2:cd:49:33:33:64:aa:70:dd:de:dd:8c:b2:de:5f: e2:3d:3c:1b:7d:e6:ed:de:fc:5b:82:16:8a:75:82:6b:25:ac: aa:dd:8f:b1:ad:53:0c:79:dd:8a:ba:fc:9f:08:48:eb:fc:f0: 63:40:a5:e8:55:e0:ce:39:04:4a:7a:fb:55:75:7d:e6:c2:ad: 2d:a5:84:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNfuuIKkbfv/LCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk Nzg3ODIxYWEtYzg5YS00MjAyLTg5ZjktYmUyMDI3ZmUyOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCTm1sVoAmvKsp49JkIfko4QmbvZyntjsGph U4lbzO9bRvFlS5FDOO1+dG1d2/Chqrj6KwWO8icTtOl5itxPoquZt6j5LESFgS3O oWF1BON29RFGzeNZBcMJ2LnYdfR74IE6tNPhGOAxo6tuGLp5rn83A9W3pGm6qI4T nd11qKcpFvmBTODTaS0wryhLVQqgtrUD4RO6JL2E6I6q2CLrrFWmFTxxYFgX7nIY HfafcOh2w4885bUXR2V0cn2BzcK92PqvVCpH/korSkmt5ulGKnJuzpnSJZoobUJ9 mscacWiDpAg28qWr8DGsCdDOR3bmoXE45f3WQ6/FMKu5t0noUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhWBZ4KBsr++Y6QhUfRgLCtzDhdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTZkMjNmNGMtZGI1Yi0z OGE2LTk4ODktNWJkMzc2NWFiYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx6O/wT3vLzdaIYDKQ/tI2HITiUSIq7cB/0yPyIu6+6nQBWhb/rI0MC D2xB0nfaaRDuZxivH132cTbN0lpYCmhlF5Og2TFXHirGnIw2zB9i4t+M43UK9VrF WXLyk057DLcUiEZhdRMNj4IZSJy5vZ9EzPtLZoDxBro7JAJh+U02wQbbGdU+jt+E 5vIvy+TkduqwFcBcu58wT/e22aLaziUpJdrElbxSp3kRziIVhonijNqHEIblQLLN STMzZKpw3d7djLLeX+I9PBt95u3e/FuCFop1gmslrKrdj7GtUwx53Yq6/J8ISOv8 8GNApehV4M45BEp6+1V1febCrS2lhNQ= -----END CERTIFICATE-----Generated at Sun Apr 27 23:45:20 2025 by rpki-client