$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa File: b7dceef0-fb5b-30fc-b174-4960a9daa448.roa (raw, json) Hash identifier: IEsJ7kc8zHSU5jrSYZXUHmpK9GaL5K5Jxp9qpUNYxkY= Subject key identifier: B3:97:15:04:72:EC:B2:0F:7E:C2:CF:C0:41:B1:5A:96:BB:30:90:02 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F9F5B0A896377FA19C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f9:f5:b0:a8:96:37:7f:a1:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=0ef37276-8406-4b6b-aae0-215e5588afab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:79:e0:b1:ee:d2:52:51:58:7c:b5:d3:60: 51:ec:46:43:e3:39:d6:9e:71:93:cc:dd:75:ea:1d: c6:72:03:85:42:93:08:59:8c:c8:fb:5c:1c:84:2c: 5f:f1:14:79:4a:93:ef:f7:c2:22:c5:ae:9f:26:81: d6:0f:4d:84:e0:86:06:f7:6f:b8:f3:2a:a2:1b:f2: 90:d1:9a:17:09:f7:26:49:a8:d1:59:dd:f1:16:80: a4:0a:a9:21:ff:d9:d6:58:8c:85:a4:e7:39:f5:3e: 8c:21:b7:93:cf:20:d5:84:c3:f8:2d:f6:02:0a:19: c6:4f:e0:03:53:95:be:96:89:0b:73:5a:6b:80:c8: d2:e1:20:48:9d:10:e4:42:37:33:0e:fe:f9:33:fd: bb:5b:d9:35:1d:39:cd:96:36:32:50:06:ce:36:8e: de:0f:b7:d7:0e:c1:35:50:a4:7c:de:13:d6:f8:66: 92:bb:a5:ae:54:a3:e1:b6:44:bc:12:11:0a:e6:0d: 8d:57:f8:3d:11:ac:7e:5f:31:4a:ee:30:ae:1c:18: a3:20:87:d8:99:ff:28:69:69:75:bf:b2:3c:59:8f: bc:a9:10:71:45:fc:6d:10:fa:f9:fb:84:ee:be:a9: 62:41:87:7d:22:04:3b:74:b4:a4:e8:ba:14:88:7d: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:97:15:04:72:EC:B2:0F:7E:C2:CF:C0:41:B1:5A:96:BB:30:90:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:70:3d:11:de:14:37:84:d0:70:2e:58:18:0a:cb:72:5b:40: 67:9b:19:bd:7f:8c:95:6c:fa:2b:f2:cc:24:38:0c:37:24:e7: ed:12:d5:35:a4:8e:9d:1f:68:bf:c1:0b:f7:b6:4d:25:fc:38: b0:db:6f:bf:f4:ed:61:b0:83:30:f7:87:98:33:4b:59:cb:dc: 18:63:95:b2:1f:5d:8d:15:3d:42:ff:ce:14:bb:4e:0f:d7:b2: f7:e6:c8:e8:e6:61:da:85:5a:50:74:7c:63:83:ac:bb:01:ed: 4c:a8:a6:8f:5a:fe:b3:70:8c:4b:08:48:4e:a0:f7:fa:d3:6b: b2:52:fd:fe:c8:ef:79:31:d8:e8:00:99:8c:f1:67:48:ba:95: 87:e1:1c:c4:bd:72:3c:bc:d0:92:e0:e1:a1:2f:bc:77:a9:41: e6:9a:8f:97:2e:6e:cb:5e:27:64:bc:cb:c7:45:9e:36:ed:b2: ad:49:f8:a6:4e:74:8b:c4:48:21:63:76:2f:33:c4:21:1f:e6: 7c:cd:cc:31:16:ec:63:0c:7e:05:b8:84:13:e7:12:19:6d:a0: 1a:fb:b6:85:47:20:66:56:2d:5a:ca:f1:17:a7:68:d8:35:b4: 11:a3:91:0f:4b:ad:67:7c:1a:7b:06:39:c2:5d:f7:42:b3:c0: a9:db:a2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fn1sKiWN3+hnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MGVmMzcyNzYtODQwNi00YjZiLWFhZTAtMjE1ZTU1ODhhZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobl54LHu0lJRWHy102BR7EZD4znWnnGTzN11 6h3GcgOFQpMIWYzI+1wchCxf8RR5SpPv98Iixa6fJoHWD02E4IYG92+48yqiG/KQ 0ZoXCfcmSajRWd3xFoCkCqkh/9nWWIyFpOc59T6MIbeTzyDVhMP4LfYCChnGT+AD U5W+lokLc1prgMjS4SBInRDkQjczDv75M/27W9k1HTnNljYyUAbONo7eD7fXDsE1 UKR83hPW+GaSu6WuVKPhtkS8EhEK5g2NV/g9Eax+XzFK7jCuHBijIIfYmf8oaWl1 v7I8WY+8qRBxRfxtEPr5+4TuvqliQYd9IgQ7dLSk6LoUiH2u1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOXFQRy7LIPfsLPwEGxWpa7MJACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjdkY2VlZjAtZmI1Yi0z MGZjLWIxNzQtNDk2MGE5ZGFhNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9wPRHeFDeE0HAuWBgKy3JbQGebGb1/jJVs+ivyzCQ4DDck5+0S1TWk jp0faL/BC/e2TSX8OLDbb7/07WGwgzD3h5gzS1nL3BhjlbIfXY0VPUL/zhS7Tg/X svfmyOjmYdqFWlB0fGODrLsB7Uyopo9a/rNwjEsISE6g9/rTa7JS/f7I73kx2OgA mYzxZ0i6lYfhHMS9cjy80JLg4aEvvHepQeaaj5cubsteJ2S8y8dFnjbtsq1J+KZO dIvESCFjdi8zxCEf5nzNzDEW7GMMfgW4hBPnEhltoBr7toVHIGZWLVrK8RenaNg1 tBGjkQ9LrWd8GnsGOcJd90KzwKnbov8= -----END CERTIFICATE-----Generated at Mon Apr 28 01:11:04 2025 by rpki-client