$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa File: d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa (raw, json) Hash identifier: vWaIeduUCqDMAf2Zb0NGCNJ/X/MFadyMp0J0UAopkYA= Subject key identifier: 3A:A4:96:30:57:9C:79:BB:7A:CC:6C:02:88:EC:EC:80:A8:82:1B:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E6498E2FF66B7E28824A800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:98:e2:ff:66:b7:e2:88:24:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=7de56375-a967-4205-b27c-29dfefc24c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:34:c6:60:96:50:d6:95:77:78:34:34:4a: 32:09:5f:b2:c6:de:83:e6:76:b9:42:c5:f3:08:d0: 69:e6:c9:c5:63:cd:73:21:98:db:2c:73:53:1d:00: 1e:ca:01:a1:91:b9:f8:41:4e:29:c8:e7:ee:ec:23: dd:87:4e:b4:3c:07:11:44:84:50:a2:61:77:00:59: 7d:af:4b:1b:af:fb:47:5e:43:f0:03:0a:d2:77:cc: c1:0f:f8:6f:6e:fd:96:00:2a:4a:b8:b0:45:bc:f0: 91:72:e2:4a:ee:0d:c8:f0:db:10:75:42:ba:83:44: c2:32:65:4d:52:fa:5e:11:fb:2a:40:ba:f8:74:63: 3b:d8:de:02:09:ae:e2:87:c1:c2:1b:4d:b9:e4:a1: 23:db:6d:7b:5d:9c:0d:81:b2:52:c8:0b:bb:6a:82: 2a:81:d9:95:d4:0c:88:93:ec:6a:23:8d:de:c0:08: e4:89:4e:7c:c8:31:a5:10:1e:d7:ad:4d:7b:f8:16: 61:03:09:2d:24:40:17:fc:f5:03:d4:31:2d:c9:b2: b8:d2:98:0d:da:1f:ed:86:38:be:6c:78:34:be:18: 8b:00:fd:5c:db:24:8e:84:86:50:30:77:f6:1f:83: 65:23:a8:f3:5b:01:48:57:31:32:53:02:65:5c:89: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A4:96:30:57:9C:79:BB:7A:CC:6C:02:88:EC:EC:80:A8:82:1B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d70f0faa-cb14-37bc-b7e8-61ddb829415d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:24:3f:c4:bc:22:88:0a:bb:83:bb:b5:65:27:2c:3a:f5:3a: c3:83:e5:b9:b0:b6:68:96:d4:e2:64:d5:61:c8:6f:7f:f2:71: 86:2a:5c:42:ce:66:0b:36:f0:55:1e:02:e3:e8:f4:01:b4:71: b6:b3:08:66:bd:64:6b:cc:22:a4:fd:70:2a:47:20:80:df:56: 4f:ea:9e:06:fa:51:bd:a2:df:8e:a5:b7:0b:75:ff:dc:8c:cc: 16:f0:4f:1c:63:aa:20:9c:94:a7:97:53:b1:b9:3d:e9:64:d4: 11:68:fd:86:de:c0:d3:4f:11:3f:92:01:63:23:40:06:f8:d0: ca:00:50:69:e4:ae:06:3f:68:3d:b6:a1:63:28:5d:a1:2e:ec: 1b:cd:6c:a7:9d:6c:49:c2:7c:65:cb:7b:3d:52:6f:86:c9:aa: fa:00:86:49:fa:2d:cb:00:e9:9e:61:b3:a6:4d:1b:9b:a8:05: 3e:12:11:a1:8e:01:eb:db:ab:4d:08:bd:41:31:7a:90:4e:df: ef:06:95:c5:84:95:fa:2b:11:94:51:3c:b7:88:8e:42:ee:f7: 19:9b:c0:65:49:4f:61:9c:b5:64:48:6a:5b:c0:df:dc:18:f5: db:90:51:aa:34:fc:35:35:06:87:c5:c2:0e:02:0e:84:ea:4e: 5d:57:13:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJji/2a34ogkqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk N2RlNTYzNzUtYTk2Ny00MjA1LWIyN2MtMjlkZmVmYzI0Yzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGI0xmCWUNaVd3g0NEoyCV+yxt6D5na5QsXz CNBp5snFY81zIZjbLHNTHQAeygGhkbn4QU4pyOfu7CPdh060PAcRRIRQomF3AFl9 r0sbr/tHXkPwAwrSd8zBD/hvbv2WACpKuLBFvPCRcuJK7g3I8NsQdUK6g0TCMmVN UvpeEfsqQLr4dGM72N4CCa7ih8HCG0255KEj2217XZwNgbJSyAu7aoIqgdmV1AyI k+xqI43ewAjkiU58yDGlEB7XrU17+BZhAwktJEAX/PUD1DEtybK40pgN2h/thji+ bHg0vhiLAP1c2ySOhIZQMHf2H4NlI6jzWwFIVzEyUwJlXIkEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqkljBXnHm7esxsAojs7ICoghu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDcwZjBmYWEtY2IxNC0z N2JjLWI3ZTgtNjFkZGI4Mjk0MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMkP8S8IogKu4O7tWUnLDr1OsOD5bmwtmiW1OJk1WHIb3/ycYYqXELO Zgs28FUeAuPo9AG0cbazCGa9ZGvMIqT9cCpHIIDfVk/qngb6Ub2i346ltwt1/9yM zBbwTxxjqiCclKeXU7G5Pelk1BFo/YbewNNPET+SAWMjQAb40MoAUGnkrgY/aD22 oWMoXaEu7BvNbKedbEnCfGXLez1Sb4bJqvoAhkn6LcsA6Z5hs6ZNG5uoBT4SEaGO Aevbq00IvUExepBO3+8GlcWElforEZRRPLeIjkLu9xmbwGVJT2GctWRIalvA39wY 9duQUao0/DU1BofFwg4CDoTqTl1XE+M= -----END CERTIFICATE-----Generated at Mon Apr 28 20:26:43 2025 by rpki-client