$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa File: cfd5bacf-b676-36e1-b190-4f38b062ea59.roa (raw, json) Hash identifier: eNKRarnq+8cE7n2LM2bMZtBRc2i/a6+XEUeLMFOFqaI= Subject key identifier: A1:80:10:CB:DF:5C:0C:45:4D:95:C6:31:91:3D:B4:77:CD:3E:73:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24CFA46292CE16738CB394 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36411 IP address blocks: 104.134.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cf:a4:62:92:ce:16:73:8c:b3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=fbd15448-daf2-4fc9-a12f-8f58c3aac654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:aa:9e:8d:ed:50:eb:44:13:ec:e4:80:75: 1c:9e:fd:df:7d:7b:15:b2:17:90:2b:d9:d0:4a:c6: 0b:44:39:f1:01:ff:4e:e5:76:b7:fd:06:bc:c8:65: 16:f1:ac:89:1d:b7:b6:dd:13:e9:25:9d:a8:8e:19: 82:77:8a:47:f7:c8:54:e5:97:3c:de:76:fb:e2:b0: 50:9d:80:44:3c:41:c6:9c:6b:e4:4d:ea:3f:78:db: 49:d5:17:f1:54:a6:79:ff:0a:41:b9:b2:5d:77:56: f4:4a:3b:5d:f2:8b:d5:b6:81:30:df:b3:c0:1c:fb: 74:f6:48:69:95:7a:31:ee:a1:fb:16:67:9e:0d:04: ed:42:14:a8:ea:7a:29:55:3b:3e:b0:d1:3a:f2:a5: c8:c9:96:87:d4:6f:8a:7e:8d:20:e1:57:79:a2:1a: 6b:08:8d:86:25:9c:8e:8c:f4:3b:62:b5:0d:8f:bb: c1:66:2a:9d:07:0b:05:0a:93:81:f8:b0:43:10:f8: aa:71:3e:5d:ac:56:7e:07:82:c3:b9:a2:a7:72:04: a4:f0:26:94:40:81:24:df:d2:4e:8e:87:ca:26:84: c4:d9:2e:63:44:9e:31:de:88:2d:33:9b:d7:c1:f2: c4:ec:33:f5:d7:34:0b:71:46:4a:67:45:1a:66:c1: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:80:10:CB:DF:5C:0C:45:4D:95:C6:31:91:3D:B4:77:CD:3E:73:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:29:e7:57:fd:ed:0c:a2:ca:2a:94:1e:a4:98:c6:ad:b9:00: 65:56:1b:f2:67:7b:a5:c5:06:6c:eb:d6:6c:fb:ab:44:0b:aa: 2a:7f:aa:ac:42:4b:07:b1:ec:a9:a2:c0:47:99:d3:6e:9f:99: 19:0d:91:e1:6c:73:44:cb:40:0f:bf:1c:ad:b0:73:db:b7:53: e2:09:08:52:b9:f5:b5:47:3f:e0:a3:b7:6d:7f:18:27:da:9c: 32:cb:25:f2:73:7e:34:21:1c:a5:3d:89:05:48:f6:ba:97:34: 56:9c:47:09:13:cc:45:96:d4:6e:d7:d9:dd:97:18:04:e4:e2: c8:97:49:25:67:44:86:a8:ca:66:ff:cb:37:ab:05:37:bd:9f: a8:49:35:1e:7a:93:37:75:9e:5e:5a:55:36:5b:51:56:79:57: f5:df:3d:48:60:87:61:76:e3:5a:d5:37:cd:53:7d:bd:fe:f9: b0:07:e5:52:99:18:3f:81:f4:06:0a:68:cf:8b:76:a5:48:09: 00:2e:5e:44:db:a9:b9:7e:f0:d1:1d:13:a2:76:87:2b:46:d5: c4:7e:09:5c:b2:57:6f:25:0a:13:75:b4:54:fb:f6:50:e1:70: e7:1e:56:aa:b0:c3:b8:f5:f8:63:bb:27:b1:de:d1:4a:9c:f0: 91:ab:42:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJM+kYpLOFnOMs5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmJkMTU0NDgtZGFmMi00ZmM5LWExMmYtOGY1OGMzYWFjNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8aqno3tUOtEE+zkgHUcnv3ffXsVsheQK9nQ SsYLRDnxAf9O5Xa3/Qa8yGUW8ayJHbe23RPpJZ2ojhmCd4pH98hU5Zc83nb74rBQ nYBEPEHGnGvkTeo/eNtJ1RfxVKZ5/wpBubJdd1b0Sjtd8ovVtoEw37PAHPt09khp lXox7qH7FmeeDQTtQhSo6nopVTs+sNE68qXIyZaH1G+Kfo0g4Vd5ohprCI2GJZyO jPQ7YrUNj7vBZiqdBwsFCpOB+LBDEPiqcT5drFZ+B4LDuaKncgSk8CaUQIEk39JO jofKJoTE2S5jRJ4x3ogtM5vXwfLE7DP11zQLcUZKZ0UaZsFf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGAEMvfXAxFTZXGMZE9tHfNPnNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2ZkNWJhY2YtYjY3Ni0z NmUxLWIxOTAtNGYzOGIwNjJlYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4p51f97QyiyiqUHqSYxq25AGVWG/Jne6XFBmzr1mz7q0QLqip/qqxC Swex7KmiwEeZ026fmRkNkeFsc0TLQA+/HK2wc9u3U+IJCFK59bVHP+Cjt21/GCfa nDLLJfJzfjQhHKU9iQVI9rqXNFacRwkTzEWW1G7X2d2XGATk4siXSSVnRIaoymb/ yzerBTe9n6hJNR56kzd1nl5aVTZbUVZ5V/XfPUhgh2F241rVN81Tfb3++bAH5VKZ GD+B9AYKaM+LdqVICQAuXkTbqbl+8NEdE6J2hytG1cR+CVyyV28lChN1tFT79lDh cOceVqqww7j1+GO7J7He0Uqc8JGrQj0= -----END CERTIFICATE-----Generated at Sun Apr 27 18:31:49 2025 by rpki-client