$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa File: c9009554-e10d-3f67-9b1e-0b89a6446c32.roa (raw, json) Hash identifier: 155KUpFBIQchwMl9hlSr+UZ9QM+2PA/YXwjKs36O8R0= Subject key identifier: 2B:EA:31:2F:69:78:2B:DE:F0:61:32:E4:74:7C:91:C5:6D:20:2E:A1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F476A2A0D0ACADE69AE80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:47:6a:2a:0d:0a:ca:de:69:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=2b320ea7-cd74-40a7-a4fd-ce83c5ab5eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:28:25:b5:24:94:17:3c:30:48:7c:69:f7: 27:33:51:c2:b3:ec:ab:89:66:d7:37:2d:02:1c:1d: 86:fe:77:3c:91:8f:b5:5e:37:a9:1e:62:0a:ee:82: 3e:16:7f:1f:91:ac:6e:d7:1d:af:23:f4:7d:41:21: 00:b3:a0:86:4a:11:70:f4:47:63:e0:d1:f1:4d:e3: 4b:b8:17:69:dd:d9:de:5e:1d:ff:ae:d9:94:5d:95: e7:7c:16:90:e9:98:05:f9:12:5b:13:d6:66:cc:5e: e4:6a:bd:db:60:8e:cc:b9:74:aa:cb:5f:4d:bc:f2: 4b:34:cb:f6:02:fe:ea:5b:cf:b8:df:97:80:c2:34: 9a:bf:78:5e:07:87:50:7e:ff:4d:98:37:7b:21:ac: c0:f5:11:2a:1f:59:62:ff:8e:9f:29:21:f8:67:13: ac:7c:b4:11:d8:1b:95:91:7b:29:44:04:51:b1:82: 47:c0:f3:ba:3b:30:71:02:c8:65:46:f4:b2:ba:56: f0:ff:da:13:1b:05:ad:2f:1b:e4:b2:a2:07:0d:61: 33:03:0b:ee:4f:be:94:0c:7d:99:5e:14:d6:a7:f3: 28:fa:3d:d4:8e:e5:ba:51:a8:3a:b7:b5:9e:88:4d: bc:f8:d5:58:ab:16:1d:a8:b2:55:e5:51:db:6f:0b: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EA:31:2F:69:78:2B:DE:F0:61:32:E4:74:7C:91:C5:6D:20:2E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:36:b2:44:02:77:eb:bf:61:aa:3e:50:61:67:8e:65:ec:19: 57:19:0b:f9:d3:ef:15:04:3c:5c:96:5a:98:b2:22:3e:a9:65: 0a:da:02:ff:49:0e:c1:67:7f:a4:27:43:aa:85:47:15:4d:b1: e2:bc:e1:1f:be:ee:95:06:f4:f8:51:3c:3b:8f:02:81:00:3b: 2d:75:b6:c1:4d:5f:32:be:13:a6:9c:fd:1b:39:27:e7:fe:1b: c9:4d:cb:5b:a7:74:e3:aa:44:8d:28:0b:24:88:97:44:e7:ae: 6a:5b:e8:b4:6a:56:e1:ad:d9:f0:26:02:85:c2:b0:6e:8e:49: 62:28:52:fa:d9:1b:e4:5a:67:b8:86:0b:9f:fc:96:76:a6:f8: d2:fd:56:2e:5b:7b:49:61:72:81:29:1e:37:d4:53:de:d3:ad: 52:d8:14:3d:85:27:1d:90:60:4d:6d:e8:26:e3:50:37:ef:bd: 1d:bd:c0:bf:d1:04:8a:29:6e:50:98:64:d3:bb:90:b7:b4:f6: 6e:14:31:e3:e7:cc:c1:f3:c6:a7:74:c8:b8:03:c1:e4:b4:bb: 33:4d:8b:7b:5a:03:7b:08:b8:0f:e1:ad:82:6e:ff:94:2c:b4: d9:ea:12:12:0b:1a:fe:3f:ad:89:91:02:6b:2b:b8:fa:0b:26: d8:d1:d2:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0dqKg0Kyt5proAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk MmIzMjBlYTctY2Q3NC00MGE3LWE0ZmQtY2U4M2M1YWI1ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJIoJbUklBc8MEh8afcnM1HCs+yriWbXNy0C HB2G/nc8kY+1XjepHmIK7oI+Fn8fkaxu1x2vI/R9QSEAs6CGShFw9Edj4NHxTeNL uBdp3dneXh3/rtmUXZXnfBaQ6ZgF+RJbE9ZmzF7kar3bYI7MuXSqy19NvPJLNMv2 Av7qW8+435eAwjSav3heB4dQfv9NmDd7IazA9REqH1li/46fKSH4ZxOsfLQR2BuV kXspRARRsYJHwPO6OzBxAshlRvSyulbw/9oTGwWtLxvksqIHDWEzAwvuT76UDH2Z XhTWp/Mo+j3UjuW6Uag6t7WeiE28+NVYqxYdqLJV5VHbbwuhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvqMS9peCve8GEy5HR8kcVtIC6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzkwMDk1NTQtZTEwZC0z ZjY3LTliMWUtMGI4OWE2NDQ2YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw2skQCd+u/Yao+UGFnjmXsGVcZC/nT7xUEPFyWWpiyIj6pZQraAv9J DsFnf6QnQ6qFRxVNseK84R++7pUG9PhRPDuPAoEAOy11tsFNXzK+E6ac/Rs5J+f+ G8lNy1undOOqRI0oCySIl0Tnrmpb6LRqVuGt2fAmAoXCsG6OSWIoUvrZG+RaZ7iG C5/8lnam+NL9Vi5be0lhcoEpHjfUU97TrVLYFD2FJx2QYE1t6CbjUDfvvR29wL/R BIopblCYZNO7kLe09m4UMePnzMHzxqd0yLgDweS0uzNNi3taA3sIuA/hrYJu/5Qs tNnqEhILGv4/rYmRAmsruPoLJtjR0sw= -----END CERTIFICATE-----Generated at Sun Apr 27 22:33:49 2025 by rpki-client