$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa File: d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa (raw, json) Hash identifier: 7tCDGpeXRIlhScDsjgFKONoV3Tk2Ws1SA3qSb32c82s= Subject key identifier: 04:FA:FE:77:F7:E1:1B:0A:2E:B2:CF:C6:29:E6:71:21:76:9F:55:19 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F44A374F0CBD89EED6580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:44:a3:74:f0:cb:d8:9e:ed:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=98e42f96-6adc-4df9-a0c9-727cb4ec926a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:cc:84:61:e2:6e:af:0a:1c:5a:b9:b8:ec: 36:4f:ca:8c:93:1d:7d:63:4c:66:89:36:f1:f9:fa: 46:58:a6:17:a7:f9:16:ff:c4:26:88:31:08:97:e8: c0:c8:35:e7:54:62:96:8b:21:94:4c:7a:b9:5e:11: 15:a4:ae:3e:df:e7:85:d0:00:08:9d:93:10:35:54: 22:64:cc:91:4e:5d:69:60:4d:35:a8:26:c1:ab:7f: 6d:51:87:b3:90:a4:51:f7:b0:05:93:42:92:01:2a: ce:3e:25:54:2c:21:be:d7:65:44:3b:a8:7d:00:24: d4:16:89:87:e0:22:5f:50:6c:dc:3e:59:e9:ac:67: b4:b7:82:d7:e7:ef:3e:77:29:63:cb:91:72:b5:eb: 45:86:e0:94:05:d5:9c:ac:8c:16:87:33:a4:38:13: 61:1b:f3:f2:24:af:4d:d1:17:0e:8d:f0:23:00:47: 2b:33:53:94:79:29:af:89:73:cf:24:49:5a:39:a8: 4f:97:4a:71:61:d6:9b:a6:bd:c6:0d:58:9f:b3:5b: fa:37:d7:43:43:3b:29:ef:6c:df:98:00:37:66:9f: 13:e5:5e:b6:5a:73:20:d5:5c:e9:c8:15:a7:a4:bd: 8d:88:71:7e:6b:47:87:69:ff:e1:f2:e0:37:40:91: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FA:FE:77:F7:E1:1B:0A:2E:B2:CF:C6:29:E6:71:21:76:9F:55:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e6:d2:5d:dc:d8:52:7a:0d:25:9c:47:bc:55:ef:c7:c5:50: 30:da:68:97:95:f0:01:28:26:ea:fe:1c:70:9f:1c:81:19:fe: 6f:37:f0:df:00:5f:64:02:a8:38:8e:3f:9f:80:9a:d0:85:27: 72:ec:36:fd:16:f3:da:b9:21:1c:c2:bd:33:4b:45:eb:62:a8: b0:b7:55:84:6c:b7:5c:e3:6c:cb:12:bf:0d:92:e4:21:26:ba: 38:7d:6d:02:e1:f9:24:85:b0:31:ed:c0:ad:55:34:aa:f4:84: 0e:e2:60:78:0d:ca:b8:dc:91:ea:e7:d7:29:a5:78:b6:59:85: 91:e3:da:2c:a5:72:5e:db:b9:5b:5a:10:6a:ee:32:fa:75:fc: af:2c:59:b8:45:13:02:ca:ef:ac:73:27:ce:46:3f:ae:49:94: 3d:15:79:b6:33:c8:cd:df:f9:ae:82:29:01:40:2b:60:1b:7e: f7:21:15:02:c5:53:a3:81:17:93:33:e9:6f:5d:40:3d:70:7c: ce:ac:c7:25:bd:32:4c:15:1e:da:91:b6:38:4b:cd:34:49:0c: 70:ad:a3:17:de:0e:91:6a:c4:a7:0d:38:2b:0b:89:f0:0d:20: 0f:7a:d2:fd:21:7c:8b:37:58:e8:2e:91:66:59:50:c7:13:19: c6:fb:8d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0SjdPDL2J7tZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk OThlNDJmOTYtNmFkYy00ZGY5LWEwYzktNzI3Y2I0ZWM5MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudnMhGHibq8KHFq5uOw2T8qMkx19Y0xmiTbx +fpGWKYXp/kW/8QmiDEIl+jAyDXnVGKWiyGUTHq5XhEVpK4+3+eF0AAInZMQNVQi ZMyRTl1pYE01qCbBq39tUYezkKRR97AFk0KSASrOPiVULCG+12VEO6h9ACTUFomH 4CJfUGzcPlnprGe0t4LX5+8+dyljy5FytetFhuCUBdWcrIwWhzOkOBNhG/PyJK9N 0RcOjfAjAEcrM1OUeSmviXPPJElaOahPl0pxYdabpr3GDVifs1v6N9dDQzsp72zf mAA3Zp8T5V62WnMg1VzpyBWnpL2NiHF+a0eHaf/h8uA3QJF/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT6/nf34RsKLrLPxinmcSF2n1UZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDUwZTlkOGMtY2MwOS0z YjVmLThiNzEtZDA3Mjg5ZTMxODM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvm0l3c2FJ6DSWcR7xV78fFUDDaaJeV8AEoJur+HHCfHIEZ/m838N8A X2QCqDiOP5+AmtCFJ3LsNv0W89q5IRzCvTNLRetiqLC3VYRst1zjbMsSvw2S5CEm ujh9bQLh+SSFsDHtwK1VNKr0hA7iYHgNyrjckern1ymleLZZhZHj2iylcl7buVta EGruMvp1/K8sWbhFEwLK76xzJ85GP65JlD0VebYzyM3f+a6CKQFAK2AbfvchFQLF U6OBF5Mz6W9dQD1wfM6sxyW9MkwVHtqRtjhLzTRJDHCtoxfeDpFqxKcNOCsLifAN IA960v0hfIs3WOgukWZZUMcTGcb7jQc= -----END CERTIFICATE-----Generated at Sun Apr 27 15:43:03 2025 by rpki-client