$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa File: ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa (raw, json) Hash identifier: HMNJr2diNLn1DnRGAk4IozoKAExlzU/UeDVX5i43kU8= Subject key identifier: 1B:DF:A5:91:93:E1:D2:21:6D:9A:48:C3:5C:9A:FB:39:7D:FA:C8:52 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F424109F6EE1774D12A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.133.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:42:41:09:f6:ee:17:74:d1:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=0e20ab3d-3b41-4c17-a80c-1f6f34ed84fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:c9:97:d7:25:9e:19:65:5a:18:55:61:d2: 57:c6:a3:41:c9:53:43:c7:ac:29:1e:bb:a5:9b:13: aa:86:90:fd:a5:f6:f5:75:7b:6f:e8:a5:90:55:8f: cf:32:31:6c:65:94:0b:e0:c9:c1:dc:01:27:ef:e6: 7d:43:7d:5e:38:45:f6:10:a9:57:e8:a6:b6:33:8a: e3:34:b0:39:ee:59:d8:88:22:4b:e5:9c:ae:96:ac: 9f:55:bd:67:f3:5f:2e:6a:d6:a9:bc:8a:c4:60:a6: 39:01:81:2a:f5:b7:76:c4:19:c7:d5:ab:73:45:dd: be:3d:34:23:e3:da:78:f5:40:60:f2:8a:f5:7b:a2: 12:80:6f:f7:87:8f:51:ec:47:3c:77:74:75:57:19: 32:59:df:00:bb:dd:05:e7:e1:21:af:25:5a:4e:ba: 16:ae:81:20:44:05:24:6f:8b:6b:1c:32:5a:32:c2: 7b:25:c5:4c:e1:8f:87:a4:d9:77:6a:fe:34:9a:db: 05:26:a8:db:99:5b:eb:5a:e6:24:82:b1:aa:c4:45: c4:89:46:83:f6:97:06:f5:ce:f3:6f:fb:65:62:6c: 8e:db:df:5c:e3:9d:ba:68:b1:58:58:a9:8d:3c:07: 23:f3:57:35:91:46:b9:1c:a1:22:0f:10:de:fd:46: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DF:A5:91:93:E1:D2:21:6D:9A:48:C3:5C:9A:FB:39:7D:FA:C8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:32:4e:7c:84:60:9b:4c:c5:d4:0c:75:85:c2:5b:84:a2: c9:06:34:0f:52:d3:ac:18:cb:a4:6f:ce:12:a3:eb:be:f6:dd: ce:7a:25:96:ef:b1:f1:84:1f:76:b9:57:70:85:bd:09:b8:8e: e9:6d:19:3c:62:9c:d1:b9:5d:6e:f8:cb:45:1f:77:db:db:a8: 3e:33:e4:75:b8:eb:94:77:27:ac:f1:a3:6b:63:42:c1:06:3f: 70:6c:e2:01:db:30:ea:54:4a:e5:69:b4:64:91:f7:d5:0f:40: 70:3c:7b:5c:e5:65:65:49:79:e2:16:71:9a:44:c6:b2:cb:1e: e7:dd:ba:20:4c:13:df:1b:c0:c3:5b:70:5b:08:6b:9d:9e:70: a7:24:10:45:a1:b0:94:a2:cf:23:1f:9e:ca:6b:b4:e8:57:f4: 47:42:80:39:2f:53:39:c1:48:ac:4f:fd:ac:b9:3a:57:2d:f6: 51:a4:a3:12:e4:06:cb:2a:ae:4e:f4:96:dd:bc:67:ab:ce:ec: f2:f0:9b:57:82:f2:24:f2:f0:40:b8:b2:54:ec:ec:10:6a:25: e3:60:f7:14:7d:59:c9:55:e2:b8:1e:c5:2c:1c:17:9b:70:82: f7:95:cd:7d:8f:99:c2:87:85:09:92:b5:2d:a8:e4:9a:ed:59: 4a:46:4d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0JBCfbuF3TRKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MGUyMGFiM2QtM2I0MS00YzE3LWE4MGMtMWY2ZjM0ZWQ4NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/LJl9clnhllWhhVYdJXxqNByVNDx6wpHrul mxOqhpD9pfb1dXtv6KWQVY/PMjFsZZQL4MnB3AEn7+Z9Q31eOEX2EKlX6Ka2M4rj NLA57lnYiCJL5ZyulqyfVb1n818uatapvIrEYKY5AYEq9bd2xBnH1atzRd2+PTQj 49p49UBg8or1e6ISgG/3h49R7Ec8d3R1VxkyWd8Au90F5+EhryVaTroWroEgRAUk b4trHDJaMsJ7JcVM4Y+HpNl3av40mtsFJqjbmVvrWuYkgrGqxEXEiUaD9pcG9c7z b/tlYmyO299c4526aLFYWKmNPAcj81c1kUa5HKEiDxDe/UYN9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvfpZGT4dIhbZpIw1ya+zl9+shSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmEwNmM5YjctNTdkZC0z ODI4LThkNDEtYzk3ZjA0NDBkNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACllMk58hGCbTMXUDHWFwluEoskGNA9S06wYy6RvzhKj67723c56JZbv sfGEH3a5V3CFvQm4jultGTxinNG5XW74y0Ufd9vbqD4z5HW465R3J6zxo2tjQsEG P3Bs4gHbMOpUSuVptGSR99UPQHA8e1zlZWVJeeIWcZpExrLLHufduiBME98bwMNb cFsIa52ecKckEEWhsJSizyMfnsprtOhX9EdCgDkvUznBSKxP/ay5Olct9lGkoxLk Bssqrk70lt28Z6vO7PLwm1eC8iTy8EC4slTs7BBqJeNg9xR9WclV4rgexSwcF5tw gveVzX2PmcKHhQmStS2o5JrtWUpGTR8= -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:36 2025 by rpki-client