$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa File: cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa (raw, json) Hash identifier: yskpIa+Lx5VKjiA/LzEBt2TQwuLYu2eONB00kBmYrAc= Subject key identifier: 5B:15:5B:4F:E2:06:30:17:4A:66:46:20:9E:ED:14:77:F8:32:04:D7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24A562C55CD1BD1E39D0E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a5:62:c5:5c:d1:bd:1e:39:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=f9bafd90-43e5-4f40-b8bc-be1ae54cfe91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:b0:9f:50:07:d9:ad:87:41:73:6e:db:c3: 4e:f9:bf:fb:f3:59:12:3e:90:21:33:73:16:f2:ce: 0f:78:e8:0a:1a:d0:48:cd:a6:59:65:16:c0:cc:8b: 2f:46:ce:ab:2b:b8:88:b3:c4:cd:65:48:0f:68:e4: ae:b8:38:d4:0f:39:37:e9:50:fa:07:a3:5c:4d:e2: 95:57:4d:d1:5b:de:11:52:a9:10:57:35:ab:62:58: 89:7a:3d:39:cd:d2:1c:8b:20:b2:e3:fd:97:5a:70: 32:80:78:39:bd:33:d2:ce:7d:2f:0a:8f:9e:b2:72: c5:ca:80:fa:1a:bb:bc:4d:9b:c2:de:24:6e:08:2c: 60:a2:9e:08:ba:5a:06:fa:75:e1:ed:ef:78:5a:d3: fc:fd:7a:75:4a:83:c8:a7:c0:cc:9f:ae:32:c2:e3: eb:ac:13:28:36:7e:c1:07:c2:ad:67:da:9f:2a:ce: bf:f3:e3:bf:43:0a:be:fb:e7:fd:14:00:6b:e6:d4: 69:e3:b6:8c:49:43:16:98:53:a4:f5:4c:e6:aa:f1: c8:4b:7c:bd:80:54:cf:c7:b4:9e:57:e3:d2:24:a8: 25:01:69:4d:02:22:1a:07:70:08:ce:1d:36:3a:36: 75:25:1b:41:5c:51:62:b0:6a:40:2a:89:e0:aa:e7: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:15:5B:4F:E2:06:30:17:4A:66:46:20:9E:ED:14:77:F8:32:04:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cc2cc1ba-7a06-33a7-a7f5-6a4657122659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:10:6d:8b:e9:79:3b:95:16:cd:e9:79:40:6e:ba:e4:92:0e: 23:29:d3:c8:4b:59:b5:1b:a5:19:83:2f:26:10:8b:90:30:da: 52:56:5d:81:83:96:e3:ee:2d:72:5f:d3:15:77:15:8f:f7:eb: 64:c6:02:72:65:44:28:ec:a5:ab:27:36:b5:67:83:0d:52:18: c4:ae:05:35:4c:37:71:6a:1c:03:12:08:48:67:f3:9e:be:b6: f4:28:3c:c5:63:55:99:c6:18:01:14:8c:c3:0c:2e:e7:4c:4d: d8:8a:e7:08:83:d1:ec:ee:6e:8c:b5:7d:dd:a1:33:6f:61:57: 9e:c2:dd:5a:9b:8a:b4:43:68:59:d2:9e:23:9c:af:8d:45:ee: db:1d:a0:b7:8b:e8:f6:e5:fe:cc:68:20:ca:65:d6:c5:34:79: 05:b7:10:77:8d:c8:97:28:ce:02:88:7f:77:81:64:c7:21:11: bb:55:69:ed:f8:ba:13:1a:98:85:b4:a9:c1:d1:27:16:f8:74: bd:ed:1f:e5:25:bb:27:13:f7:3e:6d:72:c8:bf:83:1c:c7:93: f6:17:12:87:10:70:b3:de:4d:3f:e2:0d:0a:35:39:6a:f3:15: 7a:9c:5e:37:6b:ff:e2:4f:ab:95:ab:14:e3:94:41:ef:51:ae: bf:8b:dc:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKVixVzRvR450OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZjliYWZkOTAtNDNlNS00ZjQwLWI4YmMtYmUxYWU1NGNmZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAuwn1AH2a2HQXNu28NO+b/781kSPpAhM3MW 8s4PeOgKGtBIzaZZZRbAzIsvRs6rK7iIs8TNZUgPaOSuuDjUDzk36VD6B6NcTeKV V03RW94RUqkQVzWrYliJej05zdIciyCy4/2XWnAygHg5vTPSzn0vCo+esnLFyoD6 Gru8TZvC3iRuCCxgop4IuloG+nXh7e94WtP8/Xp1SoPIp8DMn64ywuPrrBMoNn7B B8KtZ9qfKs6/8+O/Qwq+++f9FABr5tRp47aMSUMWmFOk9UzmqvHIS3y9gFTPx7Se V+PSJKglAWlNAiIaB3AIzh02OjZ1JRtBXFFisGpAKongque8wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsVW0/iBjAXSmZGIJ7tFHf4MgTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2MyY2MxYmEtN2EwNi0z M2E3LWE3ZjUtNmE0NjU3MTIyNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoQbYvpeTuVFs3peUBuuuSSDiMp08hLWbUbpRmDLyYQi5Aw2lJWXYGD luPuLXJf0xV3FY/362TGAnJlRCjspasnNrVngw1SGMSuBTVMN3FqHAMSCEhn856+ tvQoPMVjVZnGGAEUjMMMLudMTdiK5wiD0ezuboy1fd2hM29hV57C3VqbirRDaFnS niOcr41F7tsdoLeL6Pbl/sxoIMpl1sU0eQW3EHeNyJcozgKIf3eBZMchEbtVae34 uhMamIW0qcHRJxb4dL3tH+UluycT9z5tcsi/gxzHk/YXEocQcLPeTT/iDQo1OWrz FXqcXjdr/+JPq5WrFOOUQe9Rrr+L3IA= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:17 2025 by rpki-client