$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa File: ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa (raw, json) Hash identifier: O3OnywRA/qcu+H5hsrtVHc8/FEJkE2GjvFl+UebTLO8= Subject key identifier: 90:08:C9:58:25:84:42:39:2D:94:31:19:6C:EE:3F:8F:E0:21:58:CD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F1C4D4B3864A42000B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f1:c4:d4:b3:86:4a:42:00:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=e70a47e7-e86d-4156-a893-4150c22ea4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:6e:a8:07:ba:5c:b7:8f:5d:03:2d:c4:1f: 6c:78:2b:fb:c2:2f:c0:a0:64:3a:7e:fe:16:f0:34: db:57:f7:4d:43:3a:00:1a:b8:3b:07:82:5c:5f:d6: b5:2d:54:46:71:3e:16:9c:08:24:3f:c1:05:d2:b5: f1:56:d7:fb:9c:79:20:0b:c6:00:08:60:c6:cc:ff: db:74:a7:da:88:40:fb:c7:c3:3b:d4:7d:2b:7b:c4: fa:17:4d:e4:1c:de:45:fc:cb:44:c1:45:6b:2b:ae: a3:82:57:9b:f0:a7:f7:53:12:cb:ec:fb:ce:90:95: 5a:99:9c:fe:b8:85:42:e9:d1:02:20:c7:51:20:01: 82:1c:60:d6:0a:e0:56:73:3c:47:8c:00:35:38:cc: 18:14:bd:ef:61:c8:f9:ea:fb:fd:76:f6:87:df:64: 62:09:0b:46:83:cd:36:e5:fd:09:5e:52:58:71:2b: 02:9f:35:67:aa:25:fc:f3:7b:c0:46:83:23:45:6b: 13:01:24:a5:29:18:35:3d:32:fa:8b:d2:2b:86:34: 6d:fb:b6:62:94:ab:a0:98:37:61:63:cc:6d:c0:3c: 17:a0:11:95:d3:5d:d9:db:a0:d4:06:48:e8:25:13: fa:3e:37:43:4e:45:39:6d:6a:4b:2b:9a:5c:8a:af: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:08:C9:58:25:84:42:39:2D:94:31:19:6C:EE:3F:8F:E0:21:58:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae9d480d-7684-3cc9-bf20-47c43abb0dd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:12:54:08:c3:35:59:a4:2c:e8:50:ef:ae:cf:9a:6e:e8:ef: 25:90:36:1c:0b:a8:3d:94:06:c0:44:8d:e7:20:a3:20:8d:d3: 67:79:9a:df:aa:ba:2c:cc:03:c3:5e:14:b4:b5:7e:87:7b:b1: 50:17:32:c3:a8:ab:d5:fc:33:95:a3:f1:3b:d4:8d:63:41:e8: 3f:ea:93:64:9b:23:3a:da:af:65:62:de:8a:bf:73:06:76:73: f1:85:28:46:1a:d1:83:45:9f:8f:14:e6:8a:19:7f:a7:c4:be: 04:65:7f:aa:3b:74:6b:99:8c:8a:72:b8:c8:ad:0b:72:e9:da: fa:32:18:76:74:83:3c:72:a4:9d:46:68:70:dc:98:a2:6c:a6: 3e:ea:be:c1:89:a6:9b:cc:b1:f4:d8:b5:38:e4:de:b6:1b:c2: 99:12:cd:ed:e3:f4:e3:a1:4c:4f:b4:07:60:71:f4:35:56:76: f7:70:5b:c0:e8:c4:16:f5:6f:6b:4e:62:91:60:1c:5d:03:1c: 96:e5:fa:20:e2:8a:08:d7:b4:07:33:da:d6:a8:6b:fc:2a:d4: 03:db:84:b9:93:3c:f5:a7:11:55:c1:0c:36:7f:cd:b4:85:a4: 80:39:31:3e:d7:0d:5d:02:89:04:01:80:39:56:29:ef:e3:af: 5b:c8:9f:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fHE1LOGSkIACwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZTcwYTQ3ZTctZTg2ZC00MTU2LWE4OTMtNDE1MGMyMmVhNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMVuqAe6XLePXQMtxB9seCv7wi/AoGQ6fv4W 8DTbV/dNQzoAGrg7B4JcX9a1LVRGcT4WnAgkP8EF0rXxVtf7nHkgC8YACGDGzP/b dKfaiED7x8M71H0re8T6F03kHN5F/MtEwUVrK66jgleb8Kf3UxLL7PvOkJVamZz+ uIVC6dECIMdRIAGCHGDWCuBWczxHjAA1OMwYFL3vYcj56vv9dvaH32RiCQtGg802 5f0JXlJYcSsCnzVnqiX883vARoMjRWsTASSlKRg1PTL6i9IrhjRt+7ZilKugmDdh Y8xtwDwXoBGV013Z26DUBkjoJRP6PjdDTkU5bWpLK5pciq8eoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAIyVglhEI5LZQxGWzuP4/gIVjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWU5ZDQ4MGQtNzY4NC0z Y2M5LWJmMjAtNDdjNDNhYmIwZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUSVAjDNVmkLOhQ767Pmm7o7yWQNhwLqD2UBsBEjecgoyCN02d5mt+q uizMA8NeFLS1fod7sVAXMsOoq9X8M5Wj8TvUjWNB6D/qk2SbIzrar2Vi3oq/cwZ2 c/GFKEYa0YNFn48U5ooZf6fEvgRlf6o7dGuZjIpyuMitC3Lp2voyGHZ0gzxypJ1G aHDcmKJspj7qvsGJppvMsfTYtTjk3rYbwpkSze3j9OOhTE+0B2Bx9DVWdvdwW8Do xBb1b2tOYpFgHF0DHJbl+iDiigjXtAcz2taoa/wq1APbhLmTPPWnEVXBDDZ/zbSF pIA5MT7XDV0CiQQBgDlWKe/jr1vIn8g= -----END CERTIFICATE-----Generated at Mon Apr 28 06:09:49 2025 by rpki-client