$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8b84a7c-05f4-33bf-98f3-e09f08552387.roa File: a8b84a7c-05f4-33bf-98f3-e09f08552387.roa (raw, json) Hash identifier: kCTesKLHqJTGDUmQGDk6w3p9teWKWkSpes21cwZJ9VM= Subject key identifier: B4:17:94:57:36:5C:84:29:2B:47:A0:F7:F0:0B:96:89:6D:6A:81:4B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24B75036BEE2AA78BF6840 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8b84a7c-05f4-33bf-98f3-e09f08552387.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 45566 IP address blocks: 104.135.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b7:50:36:be:e2:aa:78:bf:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=50df64bc-285b-45db-89bf-41a60a7f9b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:cb:a1:c4:ae:d3:92:ce:d2:eb:31:b8:c5: 49:a3:f5:a0:a1:8b:02:d6:ea:30:0e:54:89:c0:20: 75:e5:9a:ae:b7:0a:31:0b:bf:70:93:84:10:80:d7: 8a:2b:ca:a6:1f:9d:33:b7:66:43:9d:ac:49:ff:ea: 78:71:bf:4e:25:04:4e:87:2d:94:09:32:dc:22:0f: 7a:66:9c:3e:cd:d8:ed:dd:d9:d4:38:f3:2e:e4:1b: 8b:e5:4c:04:43:1f:fc:f4:31:41:6e:91:4f:93:37: 90:15:3f:7a:0d:55:9b:f4:59:77:9b:12:d7:30:d9: 6a:49:54:36:cb:92:c8:e6:20:5d:b4:88:9e:7b:8b: 9a:e1:3d:02:98:64:98:69:7b:01:6b:8c:ab:a2:07: 43:ed:e6:f6:06:0d:c7:42:61:49:e5:6c:97:34:cd: 66:c3:97:ae:51:5f:4d:4e:7f:d4:11:07:db:77:51: 0b:2f:55:24:6d:44:c2:bd:c5:5f:ee:65:59:24:45: 90:c0:39:b2:ac:74:57:63:46:dd:6e:c8:1c:b5:c7: 4c:1b:59:74:29:1e:b7:f3:15:23:09:03:41:3b:8a: 34:76:86:41:4d:75:f3:23:63:87:23:aa:e8:18:e5: 9e:dd:94:de:ff:a9:80:f0:ce:fa:6a:ed:b8:30:2b: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:17:94:57:36:5C:84:29:2B:47:A0:F7:F0:0B:96:89:6D:6A:81:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8b84a7c-05f4-33bf-98f3-e09f08552387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7d:a9:40:07:ac:f1:cb:0d:9b:f9:50:5f:f8:a1:78:95:ae: 7d:14:57:d9:2f:6c:01:9f:64:81:4a:5d:f1:bb:11:01:0d:ad: 83:65:d7:b9:b8:3d:bd:19:49:73:99:44:b6:a7:89:29:42:80: a4:87:3f:66:35:fa:9a:b1:dd:e7:17:72:5b:0a:07:a5:ad:f3: 2e:de:a5:95:21:41:31:cf:a2:53:7d:ff:9b:62:8d:6f:da:34: e9:8a:6c:5c:f6:14:91:9e:2f:49:58:2b:bc:a1:86:db:78:1e: 0f:1b:ec:46:30:1c:2b:9d:8e:13:12:8d:fa:1c:69:c8:e7:fd: bf:32:26:4e:c0:bc:56:eb:0d:eb:52:39:d7:1a:41:c0:2c:ae: 34:2a:c8:53:8f:57:87:08:b5:72:cf:de:1b:7a:b7:5f:52:e9: 5e:b1:13:29:e5:cb:28:5c:6e:cf:33:70:5a:33:19:b2:0a:94: 41:ea:6a:f5:e6:cd:ef:05:cc:fd:0c:4d:3a:bc:ad:2e:64:6c: 47:bd:51:24:0e:59:d2:42:24:3f:cb:a9:02:71:56:12:e5:6b: de:b7:ae:19:c8:1c:65:fc:2a:6f:27:7a:2c:5c:a9:35:ae:87: 5e:de:d1:59:fe:21:c5:fb:04:ad:62:7c:ea:30:0c:c7:2b:29: d7:68:6c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLdQNr7iqni/aEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTBkZjY0YmMtMjg1Yi00NWRiLTg5YmYtNDFhNjBhN2Y5YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxTLocSu05LO0usxuMVJo/WgoYsC1uowDlSJ wCB15ZqutwoxC79wk4QQgNeKK8qmH50zt2ZDnaxJ/+p4cb9OJQROhy2UCTLcIg96 Zpw+zdjt3dnUOPMu5BuL5UwEQx/89DFBbpFPkzeQFT96DVWb9Fl3mxLXMNlqSVQ2 y5LI5iBdtIiee4ua4T0CmGSYaXsBa4yrogdD7eb2Bg3HQmFJ5WyXNM1mw5euUV9N Tn/UEQfbd1ELL1UkbUTCvcVf7mVZJEWQwDmyrHRXY0bdbsgctcdMG1l0KR638xUj CQNBO4o0doZBTXXzI2OHI6roGOWe3ZTe/6mA8M76au24MCtjfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQXlFc2XIQpK0eg9/ALloltaoFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYThiODRhN2MtMDVmNC0z M2JmLTk4ZjMtZTA5ZjA4NTUyMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIf9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ9qUAHrPHLDZv5UF/4oXiVrn0UV9kvbAGfZIFKXfG7EQENrYNl17m4 Pb0ZSXOZRLaniSlCgKSHP2Y1+pqx3ecXclsKB6Wt8y7epZUhQTHPolN9/5tijW/a NOmKbFz2FJGeL0lYK7yhhtt4Hg8b7EYwHCudjhMSjfocacjn/b8yJk7AvFbrDetS OdcaQcAsrjQqyFOPV4cItXLP3ht6t19S6V6xEynlyyhcbs8zcFozGbIKlEHqavXm ze8FzP0MTTq8rS5kbEe9USQOWdJCJD/LqQJxVhLla963rhnIHGX8Km8neixcqTWu h17e0Vn+IcX7BK1ifOowDMcrKddobFQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:38 2025 by rpki-client