$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb60623a-3388-3f0f-b042-e1e19d4224a1.roa File: cb60623a-3388-3f0f-b042-e1e19d4224a1.roa (raw, json) Hash identifier: WR4jTX8hGMJvfewsP8e/tf5olX0flzFsrbEsqHQFZQM= Subject key identifier: FE:96:D7:9F:74:03:54:F3:78:50:A6:D4:72:B1:78:A9:E3:C0:FE:05 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64982BC07D81110E7942A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb60623a-3388-3f0f-b042-e1e19d4224a1.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:98:2b:c0:7d:81:11:0e:79:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=bbb6b817-1a5f-4fae-80a8-dece29397f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ee:92:63:df:7e:95:07:3e:ac:29:bc:10:5b: 76:73:00:99:f4:fd:71:6f:ca:24:c3:d5:1e:e4:96: 68:44:18:ed:cd:50:de:bb:bf:cd:d1:4c:67:52:47: ee:8f:ad:e3:8f:32:61:05:ef:35:d1:e4:59:ae:97: 53:88:3b:66:ad:5b:fd:2f:1d:71:d1:11:0d:90:cb: 4e:68:18:ac:2a:83:de:27:41:c0:66:81:f6:ae:87: 7b:d5:31:c3:8f:ca:72:0f:03:c2:df:34:13:9f:8b: ba:27:5f:c6:d1:d9:87:e0:53:ad:68:2d:15:97:22: 2b:bb:08:11:78:8f:75:ce:08:fa:eb:a5:08:48:a2: 57:a7:19:dd:a7:0d:6e:43:c2:5c:5e:de:48:06:d5: 91:e0:bf:a9:97:0e:ee:ce:dc:4f:43:ba:d8:11:32: 3f:e3:4e:6f:ef:66:fd:bd:32:44:c4:40:9c:ec:da: e5:46:cb:b1:73:74:73:5f:fa:d3:6c:67:b8:e2:d9: 59:a6:fe:89:7f:7a:2d:b2:76:a0:d6:a0:0d:97:0c: 38:f7:ca:3f:6a:9e:f0:3a:04:a8:25:88:8e:92:dc: 72:93:36:a2:6b:0c:a8:3e:18:64:4c:29:e2:da:5b: 68:3b:6f:d0:a2:e9:ef:67:08:e0:7b:cb:23:0d:0d: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:96:D7:9F:74:03:54:F3:78:50:A6:D4:72:B1:78:A9:E3:C0:FE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb60623a-3388-3f0f-b042-e1e19d4224a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:46:95:9d:32:84:f9:99:37:b4:2a:49:d3:bd:e8:6e:47:17: 02:95:b4:fa:44:e8:45:c9:cd:c8:20:6c:25:3b:8d:2e:f8:f2: a4:4c:6c:5e:48:c5:9e:cc:04:1b:04:83:80:89:e6:02:03:9f: ec:29:53:2d:11:ac:a2:7a:77:ae:ac:b9:4c:2a:bc:27:3b:70: c1:59:d0:28:0e:c3:74:7d:28:72:a4:b5:64:97:26:8c:6e:2b: 46:87:a4:3d:58:36:31:7d:8b:af:46:1f:4c:c9:cb:e0:75:ba: 6d:0c:cc:62:ea:59:38:89:07:a1:ce:a6:a6:a4:9e:c6:84:4e: f9:dc:1e:84:46:02:96:e3:04:32:99:d9:3b:5b:34:91:29:31: 89:61:5c:f7:5c:71:b2:9e:bf:36:1e:5e:b1:0a:99:35:8b:bd: 5a:39:05:71:ce:a4:d5:ce:b9:91:2c:2e:09:ec:65:b0:ef:db: 45:86:ff:a4:ea:27:ed:b4:91:b7:9d:1f:2c:1c:7e:c2:a2:ca: 25:0a:5e:f2:e4:eb:1a:47:07:18:d2:c9:d0:ae:03:07:83:89: c5:a6:69:4b:b1:03:4e:40:7c:17:de:04:b9:cc:82:77:ed:44: f9:e4:99:6c:b6:34:ac:79:59:c5:0f:db:92:6d:ad:54:3e:49: a8:aa:dc:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJgrwH2BEQ55QqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YmJiNmI4MTctMWE1Zi00ZmFlLTgwYTgtZGVjZTI5Mzk3ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge6SY99+lQc+rCm8EFt2cwCZ9P1xb8okw9Ue 5JZoRBjtzVDeu7/N0UxnUkfuj63jjzJhBe810eRZrpdTiDtmrVv9Lx1x0RENkMtO aBisKoPeJ0HAZoH2rod71THDj8pyDwPC3zQTn4u6J1/G0dmH4FOtaC0VlyIruwgR eI91zgj666UISKJXpxndpw1uQ8JcXt5IBtWR4L+plw7uztxPQ7rYETI/405v72b9 vTJExECc7NrlRsuxc3RzX/rTbGe44tlZpv6Jf3otsnag1qANlww498o/ap7wOgSo JYiOktxykzaiawyoPhhkTCni2ltoO2/QounvZwjge8sjDQ2/lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6W1590A1TzeFCm1HKxeKnjwP4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2I2MDYyM2EtMzM4OC0z ZjBmLWIwNDItZTFlMTlkNDIyNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlGlZ0yhPmZN7QqSdO96G5HFwKVtPpE6EXJzcggbCU7jS748qRMbF5I xZ7MBBsEg4CJ5gIDn+wpUy0RrKJ6d66suUwqvCc7cMFZ0CgOw3R9KHKktWSXJoxu K0aHpD1YNjF9i69GH0zJy+B1um0MzGLqWTiJB6HOpqaknsaETvncHoRGApbjBDKZ 2TtbNJEpMYlhXPdccbKevzYeXrEKmTWLvVo5BXHOpNXOuZEsLgnsZbDv20WG/6Tq J+20kbedHywcfsKiyiUKXvLk6xpHBxjSydCuAweDicWmaUuxA05AfBfeBLnMgnft RPnkmWy2NKx5WcUP25JtrVQ+Saiq3NU= -----END CERTIFICATE-----Generated at Mon Apr 28 00:45:11 2025 by rpki-client