$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf60eb5b-e987-38bd-982f-f8db4f80691b.roa File: bf60eb5b-e987-38bd-982f-f8db4f80691b.roa (raw, json) Hash identifier: QZ96zxxQ0mwzDG2lLNCEtORXqoZMsy98FD0ZnPrPgmQ= Subject key identifier: CE:C7:49:14:89:38:98:56:37:45:56:EC:E5:AA:05:DD:B6:9A:20:DE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B36EC6754CA4D15A0140 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf60eb5b-e987-38bd-982f-f8db4f80691b.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b3:6e:c6:75:4c:a4:d1:5a:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=9dd2c62a-1fbf-4c68-a23b-cc4f8483d463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:9a:99:16:75:62:4d:50:e9:be:53:a8:ff: d8:1c:cd:09:fa:97:24:89:23:33:39:1e:cb:28:42: 08:c9:84:e7:f8:e4:7f:f9:ec:b2:52:cf:cc:1d:dd: af:e3:a3:78:7e:e7:33:a1:56:cd:e2:48:3f:70:53: 1e:15:93:8c:ed:24:76:fc:d1:41:8e:dd:1c:93:43: fb:13:81:81:6a:ab:fe:c6:f9:8b:00:24:9a:d3:d4: 73:ab:41:cf:c8:e5:02:13:22:c0:c3:4d:a2:95:d3: d9:0a:43:8d:0f:70:7c:c1:bd:e7:db:8b:9c:76:1d: 25:f8:50:6e:ba:fa:cc:e6:2a:a9:2e:83:52:d8:da: 67:53:12:b5:a8:57:d7:ec:d2:f5:36:bc:e6:01:b6: 1d:0d:52:c0:60:c0:ec:67:ce:81:01:ec:8f:f4:d0: 35:63:0d:70:7c:4d:20:6a:48:55:a8:9e:c5:0a:69: 36:d0:70:fd:d1:b2:62:b8:fe:36:93:36:ce:8e:4d: 7e:8a:ab:ac:f8:c5:72:0c:de:c6:28:1a:97:fe:ef: 85:a9:18:c4:63:eb:f7:2e:26:e2:c0:81:f4:ec:95: 7c:a5:c8:b8:c3:9d:43:1f:3f:99:37:33:f0:91:88: e9:52:ac:37:12:30:d3:19:9b:f1:18:6b:d8:f1:9f: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C7:49:14:89:38:98:56:37:45:56:EC:E5:AA:05:DD:B6:9A:20:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf60eb5b-e987-38bd-982f-f8db4f80691b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:51:fd:07:45:1a:6b:9b:99:62:5b:fc:a6:d0:ff:e4:51:5b: d4:c5:fe:32:73:61:2c:f9:04:dd:c4:25:99:a7:3a:56:ff:4a: 5e:3d:25:8f:25:2d:08:15:9e:c4:c2:7d:26:8d:5b:d0:7a:26: 68:7c:a2:8f:6b:d7:9d:21:51:f6:d7:17:21:ec:c6:3f:b6:75: 7d:15:4c:a5:fb:73:33:fe:63:1c:63:42:0c:6a:2f:f0:50:66: fc:88:44:f8:c1:3f:d9:74:87:62:86:e9:0c:06:e3:84:9e:f7: 8d:b3:2c:16:d9:5c:93:01:4a:76:b1:23:33:66:64:c2:54:fb: 9e:49:7f:58:0f:3b:2b:23:60:72:04:ba:99:dc:19:a9:f8:a2: 94:e0:95:a4:90:e7:b1:b8:8b:4d:7d:01:12:03:95:24:60:4a: dc:e4:d2:7b:c5:43:92:f4:2d:ad:07:60:69:8b:42:df:3b:1d: ab:11:96:ce:66:4d:df:b2:01:9b:0e:42:3e:34:ce:ee:50:ec: a4:15:20:e9:43:db:c2:e8:ca:56:93:dc:62:ce:73:86:77:06: 79:2b:c2:f5:f1:cd:7a:85:46:5d:08:02:56:cd:bb:54:33:27: 17:21:16:d9:a5:f6:7a:79:a9:6b:fb:36:30:e2:d4:f3:4f:ac: 10:58:1c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLNuxnVMpNFaAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OWRkMmM2MmEtMWZiZi00YzY4LWEyM2ItY2M0Zjg0ODNkNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz2amRZ1Yk1Q6b5TqP/YHM0J+pckiSMzOR7L KEIIyYTn+OR/+eyyUs/MHd2v46N4fuczoVbN4kg/cFMeFZOM7SR2/NFBjt0ck0P7 E4GBaqv+xvmLACSa09Rzq0HPyOUCEyLAw02ildPZCkOND3B8wb3n24ucdh0l+FBu uvrM5iqpLoNS2NpnUxK1qFfX7NL1NrzmAbYdDVLAYMDsZ86BAeyP9NA1Yw1wfE0g akhVqJ7FCmk20HD90bJiuP42kzbOjk1+iqus+MVyDN7GKBqX/u+FqRjEY+v3Libi wIH07JV8pci4w51DHz+ZNzPwkYjpUqw3EjDTGZvxGGvY8Z994QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7HSRSJOJhWN0VW7OWqBd22miDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmY2MGViNWItZTk4Ny0z OGJkLTk4MmYtZjhkYjRmODA2OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVR/QdFGmubmWJb/KbQ/+RRW9TF/jJzYSz5BN3EJZmnOlb/Sl49JY8l LQgVnsTCfSaNW9B6Jmh8oo9r150hUfbXFyHsxj+2dX0VTKX7czP+YxxjQgxqL/BQ ZvyIRPjBP9l0h2KG6QwG44Se942zLBbZXJMBSnaxIzNmZMJU+55Jf1gPOysjYHIE upncGan4opTglaSQ57G4i019ARIDlSRgStzk0nvFQ5L0La0HYGmLQt87HasRls5m Td+yAZsOQj40zu5Q7KQVIOlD28LoylaT3GLOc4Z3BnkrwvXxzXqFRl0IAlbNu1Qz JxchFtml9np5qWv7NjDi1PNPrBBYHAo= -----END CERTIFICATE-----Generated at Sun Apr 27 20:12:24 2025 by rpki-client