$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa File: b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa (raw, json) Hash identifier: D2Mwje2EMUOr0GDzPIaHsmmngZC09kbRj6Q10tRVPsM= Subject key identifier: 54:A2:66:6B:2F:2A:08:74:AC:D8:56:EA:C1:42:A5:53:13:3C:58:20 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0595D123EB77B6A51200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:05:95:d1:23:eb:77:b6:a5:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=8a438d9a-556b-4a13-a862-741b815020f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:68:34:b3:97:be:ea:08:94:a9:7b:16:d6: d8:0d:1a:5e:cc:6f:ed:ea:a8:bb:be:81:bb:f7:76: 30:ab:a2:21:d7:97:dd:f1:e3:33:99:16:95:e8:b3: 9f:95:09:50:76:90:3e:f8:c8:12:7d:ac:80:ec:af: ad:5c:3e:c2:4f:43:b1:3b:a5:98:48:7b:d1:6b:d6: 90:36:a4:4b:57:b3:c7:b7:72:e0:a2:10:0a:88:0b: 64:a2:24:6c:17:fc:cf:bd:1a:9d:ee:f4:2d:48:4d: b0:0f:19:bb:ae:f6:ec:65:12:45:5a:bd:4e:28:c3: dc:ee:50:e3:1b:d7:24:42:36:b2:92:a6:b6:e4:a1: 08:0b:52:f4:03:a5:8c:db:cf:1f:c7:98:24:13:ae: 2d:19:73:d1:a9:e7:4d:f8:00:85:16:96:b0:26:95: e8:d3:f0:75:cc:60:2e:9b:b0:96:46:a8:54:6c:93: ce:46:4e:09:bc:fa:b0:d7:e9:ba:a5:5c:1e:1f:56: a0:ce:e9:3b:73:db:fe:b8:0b:d4:41:09:84:b9:cf: 35:82:dc:b7:08:87:47:d7:74:79:ab:a9:05:5c:fb: 49:65:b1:1b:33:80:6f:f9:f0:18:26:9b:52:c8:d1: 01:b0:10:94:d9:43:7a:17:80:c9:89:20:83:a2:98: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A2:66:6B:2F:2A:08:74:AC:D8:56:EA:C1:42:A5:53:13:3C:58:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b4c39e0a-c7d3-3455-8232-3d7402c13ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:20:93:44:50:c0:6c:d4:f4:5c:65:f1:0c:02:c2:98:74:f2: d0:3c:15:c9:64:5b:7b:78:79:2e:5d:9a:ee:d9:21:fe:75:4c: 4c:2b:b7:07:37:78:fd:44:bb:33:0b:eb:4c:7c:27:16:46:94: d0:d6:09:31:89:a9:0c:7c:45:25:ca:80:f0:09:7c:7a:8c:5a: 6c:44:09:73:f6:4a:7a:a0:26:11:4b:5f:bc:43:07:8c:28:d0: 54:16:ce:e0:8b:ed:02:e9:6d:ae:9f:63:40:63:9a:9b:a8:c0: 74:50:b6:e7:be:fe:a5:69:d4:34:e7:40:fb:01:b1:d9:1e:a4: 0f:be:0a:49:82:a4:62:f4:e5:2c:79:0d:2e:4c:16:26:d5:51: 47:0b:7e:0e:59:b6:ab:bc:c5:59:4e:9b:bc:14:92:8c:10:32: 54:6c:c2:8d:e1:a6:77:96:41:83:ea:1f:58:1a:ce:9b:d8:eb: bb:29:b5:cc:96:f0:13:eb:fe:e9:6e:fc:e1:a9:a1:81:81:1b: 45:42:99:1d:b4:f8:a2:11:a3:3e:37:4e:df:74:f0:09:51:45: 4c:bd:c1:75:62:1e:f7:4b:d6:eb:a4:b2:de:5d:15:d6:59:b9: 2b:99:cb:09:52:69:f3:a5:ac:f1:71:65:a2:72:09:b8:fa:b5: cb:7a:16:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gWV0SPrd7alEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk OGE0MzhkOWEtNTU2Yi00YTEzLWE4NjItNzQxYjgxNTAyMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI1oNLOXvuoIlKl7FtbYDRpezG/t6qi7voG7 93Ywq6Ih15fd8eMzmRaV6LOflQlQdpA++MgSfayA7K+tXD7CT0OxO6WYSHvRa9aQ NqRLV7PHt3LgohAKiAtkoiRsF/zPvRqd7vQtSE2wDxm7rvbsZRJFWr1OKMPc7lDj G9ckQjaykqa25KEIC1L0A6WM288fx5gkE64tGXPRqedN+ACFFpawJpXo0/B1zGAu m7CWRqhUbJPORk4JvPqw1+m6pVweH1agzuk7c9v+uAvUQQmEuc81gty3CIdH13R5 q6kFXPtJZbEbM4Bv+fAYJptSyNEBsBCU2UN6F4DJiSCDopjrpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSiZmsvKgh0rNhW6sFCpVMTPFggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjRjMzllMGEtYzdkMy0z NDU1LTgyMzItM2Q3NDAyYzEzYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0gk0RQwGzU9Fxl8QwCwph08tA8FclkW3t4eS5dmu7ZIf51TEwrtwc3 eP1EuzML60x8JxZGlNDWCTGJqQx8RSXKgPAJfHqMWmxECXP2SnqgJhFLX7xDB4wo 0FQWzuCL7QLpba6fY0BjmpuowHRQtue+/qVp1DTnQPsBsdkepA++CkmCpGL05Sx5 DS5MFibVUUcLfg5Ztqu8xVlOm7wUkowQMlRswo3hpneWQYPqH1gazpvY67sptcyW 8BPr/ulu/OGpoYGBG0VCmR20+KIRoz43Tt908AlRRUy9wXViHvdL1uukst5dFdZZ uSuZywlSafOlrPFxZaJyCbj6tct6FvM= -----END CERTIFICATE-----Generated at Mon Apr 28 17:03:53 2025 by rpki-client