$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa File: bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa (raw, json) Hash identifier: SDfBknwTMZQt3AeCr6SAOz6Jbo6EovzcuFdtwciIaVA= Subject key identifier: 55:92:C1:91:67:F4:7F:2D:63:C5:BB:33:30:28:16:44:AC:8C:F5:43 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F43E868A54222E8633FC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.133.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:43:e8:68:a5:42:22:e8:63:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=81fb2a65-53c8-46d1-88f9-29b2d491c8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:2a:b6:51:5e:82:fc:b7:1d:6d:28:c7:be: ed:ae:60:ae:54:85:f8:8e:48:cb:d7:69:fe:d5:0b: aa:bf:e5:a2:a7:38:b1:42:ac:90:c7:ff:1c:fa:f4: 82:60:76:38:17:67:55:ba:62:7d:44:f6:7a:30:90: ff:fc:77:a6:b9:04:aa:9e:9a:dc:c2:bb:7d:0a:b6: ef:95:b9:7b:75:ae:7b:b9:f3:ce:18:8b:97:e3:5c: 26:58:71:c8:ed:83:2b:81:cf:94:ca:ff:51:53:02: fe:3f:74:fb:65:fa:c5:49:56:e0:fb:10:a1:61:b8: 1b:c1:93:f2:dc:cf:1b:ad:3e:d4:99:4f:1e:1e:75: ef:c3:e4:30:8d:c8:69:83:5e:8c:16:b8:70:e8:d5: e6:3a:34:be:92:bc:df:1f:88:f1:24:11:73:02:91: a4:5d:d7:a2:18:b1:e2:bc:05:81:38:42:8d:26:00: d6:91:72:bb:d0:b4:4a:7e:0c:03:d3:45:77:ab:65: 2b:03:75:fb:59:ae:de:db:b9:55:e3:41:a8:51:9b: 9d:e1:1b:02:67:2a:a7:ff:7e:5c:2d:75:48:40:b0: 76:9d:80:14:b3:45:d3:55:dd:18:47:63:7a:c5:96: 13:62:16:38:46:e1:c4:dd:8c:7f:b4:13:a0:be:99: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:92:C1:91:67:F4:7F:2D:63:C5:BB:33:30:28:16:44:AC:8C:F5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f2:56:68:bc:1e:4c:9f:74:bd:02:a5:8e:20:e5:0a:8e:c7: bf:31:cb:6b:ad:35:c7:e7:c7:75:4c:e7:bc:53:c1:86:65:e9: 93:b2:40:91:8a:10:5a:76:8a:b1:98:bf:83:d1:a3:c5:0c:0c: 89:8c:a4:f4:49:88:30:df:ee:ab:d4:9d:d6:7e:57:89:f2:a1: ff:64:e7:83:1c:83:ec:7d:15:26:f6:c7:05:d3:60:4d:25:6f: ba:26:67:b5:50:68:57:b0:49:26:d6:68:88:3f:fc:08:e4:0d: b8:f6:0e:bc:01:7a:b6:11:ad:30:c8:53:8d:2a:e2:1f:86:d0: 4d:e2:b7:ff:86:a3:fd:91:1d:14:87:ef:4a:50:56:fe:b9:ae: d3:54:c4:c4:a3:08:4d:90:8f:61:5a:be:16:e7:2d:d7:bd:10: c3:bf:62:2a:26:5c:b6:b1:cc:59:61:17:51:79:9b:94:14:1d: 5b:cd:13:f6:49:31:bc:0e:2c:69:cc:15:7b:51:d9:2c:b7:00: b8:10:1a:aa:d8:c1:5d:46:a4:0a:59:5d:35:46:fa:84:ea:da: 6a:61:eb:81:4e:75:48:ad:80:0c:26:45:a8:f1:a3:11:87:d8: c1:73:ef:f5:a9:7d:e3:71:97:22:1d:34:90:53:20:da:f6:96: 2a:66:61:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0PoaKVCIuhjP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ODFmYjJhNjUtNTNjOC00NmQxLTg4ZjktMjliMmQ0OTFjOGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVIqtlFegvy3HW0ox77trmCuVIX4jkjL12n+ 1Quqv+WipzixQqyQx/8c+vSCYHY4F2dVumJ9RPZ6MJD//HemuQSqnprcwrt9Crbv lbl7da57ufPOGIuX41wmWHHI7YMrgc+Uyv9RUwL+P3T7ZfrFSVbg+xChYbgbwZPy 3M8brT7UmU8eHnXvw+Qwjchpg16MFrhw6NXmOjS+krzfH4jxJBFzApGkXdeiGLHi vAWBOEKNJgDWkXK70LRKfgwD00V3q2UrA3X7Wa7e27lV40GoUZud4RsCZyqn/35c LXVIQLB2nYAUs0XTVd0YR2N6xZYTYhY4RuHE3Yx/tBOgvpmxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWSwZFn9H8tY8W7MzAoFkSsjPVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmJmMmVkODktY2FjOC0z NjhkLWE2OWItZTNhNDE4YmFjNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/yVmi8HkyfdL0CpY4g5QqOx78xy2utNcfnx3VM57xTwYZl6ZOyQJGK EFp2irGYv4PRo8UMDImMpPRJiDDf7qvUndZ+V4nyof9k54Mcg+x9FSb2xwXTYE0l b7omZ7VQaFewSSbWaIg//AjkDbj2DrwBerYRrTDIU40q4h+G0E3it/+Go/2RHRSH 70pQVv65rtNUxMSjCE2Qj2FavhbnLde9EMO/YiomXLaxzFlhF1F5m5QUHVvNE/ZJ MbwOLGnMFXtR2Sy3ALgQGqrYwV1GpApZXTVG+oTq2mph64FOdUitgAwmRajxoxGH 2MFz7/WpfeNxlyIdNJBTINr2lipmYes= -----END CERTIFICATE-----Generated at Sun Apr 27 15:37:31 2025 by rpki-client