$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa File: c0e51fd8-4af4-3173-9d20-0258717a076b.roa (raw, json) Hash identifier: tz5oT3pwA1pq6NdJQAlTkB2NxzHNpcXmu9AlRLYCYY4= Subject key identifier: B3:D7:16:9B:40:7F:62:04:CB:71:A5:AA:44:0B:C0:67:1F:37:1B:D9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F4421E5917525ABE43940 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:44:21:e5:91:75:25:ab:e4:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=0b03b5b6-b182-4794-a643-361facb2f959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:eb:f0:65:88:20:3a:ba:2f:c0:43:d4:46: f4:e0:ca:67:69:87:e9:87:c1:66:41:f2:b8:af:e3: e2:f3:b9:bf:9f:13:24:58:09:da:9f:ce:17:fd:74: 8a:86:da:96:33:5c:af:a2:a6:ca:4b:46:9c:de:e9: f8:05:82:0e:a1:dd:d8:cf:eb:ee:67:f9:da:f6:01: cd:a7:53:02:5d:1e:3b:7a:8c:7a:a8:83:b7:88:67: f7:87:41:cc:9b:94:b7:9f:71:3d:f7:ac:e3:f7:b1: bd:b7:cd:7b:ad:62:50:e8:82:12:b9:3f:d7:14:c5: 4f:e8:34:f6:38:db:3b:40:d3:72:28:50:78:e9:3e: 1b:10:dc:07:a6:4c:16:de:3a:47:72:f9:ff:81:5e: 0c:44:8a:4b:f7:31:cc:02:21:3f:dd:cc:ea:b9:32: b7:21:4f:59:3b:3f:24:3e:89:9e:99:80:f2:02:cc: 07:48:6b:bf:1b:13:9f:90:f6:f1:85:97:65:90:fb: da:f5:2f:1c:25:55:3f:26:e7:8e:35:75:c5:fb:71: 18:05:d1:fc:07:5e:91:f5:d7:9e:ae:64:ea:91:5e: ba:1c:95:a4:d6:cf:ad:54:b0:68:3c:1a:4d:70:48: b7:f8:a8:7b:11:04:c9:c7:7f:47:f4:d4:a8:a8:3e: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D7:16:9B:40:7F:62:04:CB:71:A5:AA:44:0B:C0:67:1F:37:1B:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c0e51fd8-4af4-3173-9d20-0258717a076b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:21:f8:80:14:bb:8c:b4:77:58:1b:ae:8a:df:04:06:f8:27: d2:e9:89:51:c5:c5:7a:7f:0d:f0:60:e2:a6:5f:93:20:55:d0: cc:d3:82:67:01:47:05:81:05:ba:81:2e:98:a4:3c:98:c0:20: 71:72:63:a6:18:e0:ba:ee:7e:c6:7c:76:41:a9:70:20:4f:f2: e6:27:a3:55:5d:36:df:27:23:81:f2:c8:c4:38:63:95:f0:69: 8b:b8:f4:d6:8f:e7:14:f6:a9:e1:d4:ca:0a:39:2d:1d:b1:2a: b6:b3:cb:e3:f9:05:26:55:03:b5:57:b4:da:76:8e:45:4b:10: 7d:87:7d:29:88:96:95:51:c9:1c:ab:f0:0c:dc:b8:eb:f9:7d: 02:79:e4:54:c3:49:ab:31:7f:34:23:0f:94:00:fd:f2:04:6e: 60:1a:39:b2:80:88:a9:61:27:7e:ea:85:cb:46:c1:f5:a7:65: 4e:bb:ab:34:c7:10:0c:3b:92:07:2b:5f:48:28:d1:c6:0c:89: de:36:9e:f4:c4:7b:ab:a7:d5:7b:f7:b3:0f:64:db:0e:27:77: d1:3f:14:74:41:e7:05:34:a5:e7:94:a0:a7:be:8f:ca:1e:0d: 59:f1:ef:5a:df:a6:1a:c6:e7:47:dc:6a:0e:8a:d9:47:8a:3c: e4:0c:06:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0Qh5ZF1JavkOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MGIwM2I1YjYtYjE4Mi00Nzk0LWE2NDMtMzYxZmFjYjJmOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM7r8GWIIDq6L8BD1Eb04MpnaYfph8FmQfK4 r+Pi87m/nxMkWAnan84X/XSKhtqWM1yvoqbKS0ac3un4BYIOod3Yz+vuZ/na9gHN p1MCXR47eox6qIO3iGf3h0HMm5S3n3E996zj97G9t817rWJQ6IISuT/XFMVP6DT2 ONs7QNNyKFB46T4bENwHpkwW3jpHcvn/gV4MRIpL9zHMAiE/3czquTK3IU9ZOz8k PomemYDyAswHSGu/GxOfkPbxhZdlkPva9S8cJVU/JueONXXF+3EYBdH8B16R9dee rmTqkV66HJWk1s+tVLBoPBpNcEi3+Kh7EQTJx39H9NSoqD6KmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPXFptAf2IEy3GlqkQLwGcfNxvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzBlNTFmZDgtNGFmNC0z MTczLTlkMjAtMDI1ODcxN2EwNzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsh+IAUu4y0d1gbrorfBAb4J9LpiVHFxXp/DfBg4qZfkyBV0MzTgmcB RwWBBbqBLpikPJjAIHFyY6YY4LrufsZ8dkGpcCBP8uYno1VdNt8nI4HyyMQ4Y5Xw aYu49NaP5xT2qeHUygo5LR2xKrazy+P5BSZVA7VXtNp2jkVLEH2HfSmIlpVRyRyr 8AzcuOv5fQJ55FTDSasxfzQjD5QA/fIEbmAaObKAiKlhJ37qhctGwfWnZU67qzTH EAw7kgcrX0go0cYMid42nvTEe6un1Xv3sw9k2w4nd9E/FHRB5wU0peeUoKe+j8oe DVnx71rfphrG50fcag6K2UeKPOQMBg4= -----END CERTIFICATE-----Generated at Mon Apr 28 15:09:11 2025 by rpki-client