$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf1cdd79-6f23-378f-9067-cae0eabb1491.roa File: cf1cdd79-6f23-378f-9067-cae0eabb1491.roa (raw, json) Hash identifier: AMpRw552RqhRR8kcs6wvJUR09Mzt6+y5fDeMCQ8adLk= Subject key identifier: F2:FC:0B:3F:94:C0:4F:3F:1C:B0:85:3E:DC:CD:6A:1D:DB:88:38:A9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F45A7AAD09EEB774AB600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf1cdd79-6f23-378f-9067-cae0eabb1491.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.133.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:45:a7:aa:d0:9e:eb:77:4a:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=6c1aa17e-1230-4060-9a19-e473477a8092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2b:56:a3:25:50:18:78:1e:80:25:e3:19:2d: a2:af:2a:d7:2f:7f:20:e7:fc:c0:1b:f8:94:1d:ba: 40:b2:84:68:05:93:d7:63:d7:bb:ea:ab:6a:ee:bf: 57:41:9d:5e:63:4c:cc:c2:d5:07:5e:82:bb:8a:6c: c3:21:88:f7:a1:fd:51:40:f6:54:80:b1:3e:df:98: e7:3c:f4:19:2d:39:e4:95:72:18:f7:8b:54:55:4f: 14:14:bc:94:56:0a:39:5e:62:6a:8a:6d:33:04:57: 0a:06:ef:7d:39:fd:90:42:a6:4f:b5:f3:4a:2e:79: db:cf:99:95:98:a0:60:48:a1:f8:18:21:24:a7:da: 97:b6:b0:e8:f1:96:6c:0f:1e:19:2f:08:6c:97:a8: 30:bb:5f:c2:29:cf:f4:e8:3e:cc:d7:da:e6:fc:fd: cf:24:cd:41:cc:de:41:5a:5c:5f:e6:38:87:cd:94: fd:80:a3:fe:ec:42:01:fa:0a:7c:da:fc:37:f3:24: d9:31:bb:8c:36:2a:b4:05:43:7d:9e:66:86:04:75: c4:c7:26:83:dc:b9:6f:d5:30:ec:1c:dc:9f:a8:08: b1:38:65:5a:05:a2:fd:23:c1:d9:27:da:f5:d6:4f: 5a:4a:27:ef:23:5a:50:ce:36:bf:29:3b:a4:b1:07: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:0B:3F:94:C0:4F:3F:1C:B0:85:3E:DC:CD:6A:1D:DB:88:38:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf1cdd79-6f23-378f-9067-cae0eabb1491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:af:60:f9:99:94:50:10:c8:91:f1:ee:23:3f:c0:be:39:c6: f6:09:25:6d:d9:e5:00:8a:c4:9b:be:91:7b:1e:00:3e:5f:32: 1c:e2:3d:8f:5d:17:3a:cf:3a:e7:07:92:d7:ce:f0:63:c6:1c: 32:d8:61:fe:32:f3:c9:91:ba:a6:72:48:ce:01:d5:92:b9:a0: a6:41:8d:c2:b6:4a:f8:48:ef:cc:31:9d:b1:16:d2:73:5b:8a: 31:d6:fd:d7:84:a0:b9:a8:d1:bf:5c:24:a5:e3:78:99:d9:cf: f6:d8:17:8e:6e:9b:ac:a0:c8:31:bd:bf:f4:35:55:38:f8:0d: 73:57:6c:08:dd:3d:9b:d4:e3:fd:20:36:ad:27:db:a3:7b:7f: 26:70:1b:f3:02:c6:ee:4f:c3:e8:75:f8:c3:20:07:38:32:c2: 6d:09:cb:80:1b:28:c7:96:22:7f:07:f5:5b:22:20:b2:af:e5: 1d:7f:3b:77:d9:c2:2f:5c:49:5a:f3:80:c6:1d:e1:74:0d:f5: f7:d9:f2:bc:54:9d:54:4f:d6:6a:07:ba:a6:37:b9:0c:c9:29: 83:e7:0c:69:96:35:f0:8a:32:bb:c6:43:88:58:18:56:b0:af: 2d:e5:73:41:87:08:d3:4a:d4:cc:a7:22:11:4e:74:70:3d:6b: d7:b7:09:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0WnqtCe63dKtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk NmMxYWExN2UtMTIzMC00MDYwLTlhMTktZTQ3MzQ3N2E4MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9itWoyVQGHgegCXjGS2iryrXL38g5/zAG/iU HbpAsoRoBZPXY9e76qtq7r9XQZ1eY0zMwtUHXoK7imzDIYj3of1RQPZUgLE+35jn PPQZLTnklXIY94tUVU8UFLyUVgo5XmJqim0zBFcKBu99Of2QQqZPtfNKLnnbz5mV mKBgSKH4GCEkp9qXtrDo8ZZsDx4ZLwhsl6gwu1/CKc/06D7M19rm/P3PJM1BzN5B Wlxf5jiHzZT9gKP+7EIB+gp82vw38yTZMbuMNiq0BUN9nmaGBHXExyaD3Llv1TDs HNyfqAixOGVaBaL9I8HZJ9r11k9aSifvI1pQzja/KTuksQdtlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL8Cz+UwE8/HLCFPtzNah3biDipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YxY2RkNzktNmYyMy0z NzhmLTkwNjctY2FlMGVhYmIxNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGvYPmZlFAQyJHx7iM/wL45xvYJJW3Z5QCKxJu+kXseAD5fMhziPY9d FzrPOucHktfO8GPGHDLYYf4y88mRuqZySM4B1ZK5oKZBjcK2SvhI78wxnbEW0nNb ijHW/deEoLmo0b9cJKXjeJnZz/bYF45um6ygyDG9v/Q1VTj4DXNXbAjdPZvU4/0g Nq0n26N7fyZwG/MCxu5Pw+h1+MMgBzgywm0Jy4AbKMeWIn8H9VsiILKv5R1/O3fZ wi9cSVrzgMYd4XQN9ffZ8rxUnVRP1moHuqY3uQzJKYPnDGmWNfCKMrvGQ4hYGFaw ry3lc0GHCNNK1MynIhFOdHA9a9e3CU8= -----END CERTIFICATE-----Generated at Sun Apr 27 22:40:42 2025 by rpki-client