$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7c68b4b-1856-392e-ac08-a7fe1099d246.roa File: b7c68b4b-1856-392e-ac08-a7fe1099d246.roa (raw, json) Hash identifier: rVplPP3a9AoCMHst87REA8tNHbgVLEkcJSm9fdObKoA= Subject key identifier: 10:8F:F1:8E:10:1C:EE:9B:18:AA:CC:13:64:9F:EE:53:A2:70:B3:14 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F46FC1DB05F759A187680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7c68b4b-1856-392e-ac08-a7fe1099d246.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:46:fc:1d:b0:5f:75:9a:18:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=b19a9770-9895-43a2-9673-ddc0681c38bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:56:a4:10:b7:ae:97:a5:1f:eb:da:f0:3d: 48:56:f3:d8:16:77:a4:4f:44:f2:a5:a6:0e:9f:69: ea:e9:e6:d8:28:94:4b:96:44:ae:40:91:a4:df:8d: c8:b5:a1:07:d2:f7:03:22:f2:f9:94:9d:ae:b5:77: 92:26:95:ab:64:a6:6d:de:90:2f:f7:69:d8:f7:10: 06:e7:a8:b2:e6:62:e4:e4:fa:62:a6:53:45:c6:d5: eb:f3:1e:5a:f5:57:27:a6:c4:19:9f:c7:06:6a:68: 33:fc:fe:e1:d4:fb:f5:59:76:c8:da:ff:88:ad:b4: 53:0e:ee:7c:a4:26:d0:b0:a8:8b:a4:aa:78:f2:ff: 0e:7c:d4:e5:c6:f5:75:72:75:ac:4a:58:e8:6c:c0: 84:b4:0f:5c:a0:17:29:26:a9:04:6b:b9:e1:7e:2e: 9d:de:84:9e:57:1b:eb:9f:ea:34:ea:05:bc:87:01: 4c:3e:4f:13:c3:d9:80:e7:bb:15:86:eb:dc:a2:d5: b8:09:ce:9a:e2:c7:b9:79:f2:a8:ea:1c:58:aa:9e: 49:bc:a3:69:52:93:8d:b3:09:eb:b2:a1:68:27:f3: 9b:f2:c0:b9:89:7e:a9:e9:97:0c:05:00:9f:3d:4f: c9:4c:52:85:39:e5:5f:e5:78:aa:e7:3c:83:25:c4: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:F1:8E:10:1C:EE:9B:18:AA:CC:13:64:9F:EE:53:A2:70:B3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7c68b4b-1856-392e-ac08-a7fe1099d246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:14:e0:87:3f:e6:70:b2:1d:43:51:52:36:e2:f2:89:b9:26: f0:29:3f:78:5c:18:57:68:26:1f:93:04:77:f9:6d:6f:51:b6: 9a:f5:76:02:9a:1e:bc:76:a5:31:7e:10:71:70:e9:e7:f0:9f: 81:2b:60:eb:52:4b:17:09:54:fe:4f:bc:08:db:78:06:5e:6d: 2e:d8:b8:71:99:a9:09:65:15:2a:df:33:14:b8:cd:95:a6:13: 01:86:20:79:0b:b9:26:9f:3b:ec:a3:e7:8a:d8:5e:c5:0b:14: 2c:d6:12:b9:c6:f0:45:ff:88:cc:47:c5:9c:94:3b:57:26:25: fc:8a:fb:b7:85:f7:ba:92:b7:89:97:7b:b1:f5:70:b7:c9:df: 4d:f7:5f:f5:4d:70:ee:28:0a:ca:41:c5:b4:c5:9b:1c:9a:d7: ad:d2:bb:28:02:d4:88:f6:78:e1:1a:01:96:60:63:8d:63:62: 76:51:ab:ef:49:96:be:56:80:a9:be:b8:40:83:1b:4b:90:be: 0c:0b:05:9b:8b:da:19:ec:ad:23:27:70:c2:d5:6b:88:e2:e4: e6:e3:13:7c:3f:20:57:67:32:b2:d8:f6:58:60:f3:9b:ea:74: df:8a:be:9f:ef:f3:f0:fd:a3:78:c7:00:86:f6:f2:bb:fa:1d: 31:5b:31:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0b8HbBfdZoYdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YjE5YTk3NzAtOTg5NS00M2EyLTk2NzMtZGRjMDY4MWMzOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtNWpBC3rpelH+va8D1IVvPYFnekT0TypaYO n2nq6ebYKJRLlkSuQJGk343ItaEH0vcDIvL5lJ2utXeSJpWrZKZt3pAv92nY9xAG 56iy5mLk5PpiplNFxtXr8x5a9VcnpsQZn8cGamgz/P7h1Pv1WXbI2v+IrbRTDu58 pCbQsKiLpKp48v8OfNTlxvV1cnWsSljobMCEtA9coBcpJqkEa7nhfi6d3oSeVxvr n+o06gW8hwFMPk8Tw9mA57sVhuvcotW4Cc6a4se5efKo6hxYqp5JvKNpUpONswnr sqFoJ/Ob8sC5iX6p6ZcMBQCfPU/JTFKFOeVf5Xiq5zyDJcT2nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCP8Y4QHO6bGKrME2Sf7lOicLMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjdjNjhiNGItMTg1Ni0z OTJlLWFjMDgtYTdmZTEwOTlkMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAU4Ic/5nCyHUNRUjbi8om5JvApP3hcGFdoJh+TBHf5bW9Rtpr1dgKa Hrx2pTF+EHFw6efwn4ErYOtSSxcJVP5PvAjbeAZebS7YuHGZqQllFSrfMxS4zZWm EwGGIHkLuSafO+yj54rYXsULFCzWErnG8EX/iMxHxZyUO1cmJfyK+7eF97qSt4mX e7H1cLfJ3033X/VNcO4oCspBxbTFmxya163SuygC1Ij2eOEaAZZgY41jYnZRq+9J lr5WgKm+uECDG0uQvgwLBZuL2hnsrSMncMLVa4ji5ObjE3w/IFdnMrLY9lhg85vq dN+Kvp/v8/D9o3jHAIb28rv6HTFbMRc= -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:16 2025 by rpki-client