$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa File: da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa (raw, json) Hash identifier: 4jzrxNJbm4R+Hd/+nxCTRGNyEMiNbdF50dxaP7yHywo= Subject key identifier: EA:21:70:4A:A2:F9:D0:1C:6C:50:E2:4D:43:40:7E:80:95:6F:4F:FF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D0DFE33560F74EAAA352 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d0:df:e3:35:60:f7:4e:aa:a3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=9398926e-7685-42f5-a713-d2cbff193069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:d4:96:51:62:2f:e5:ba:82:56:44:65:6d: 17:20:57:ef:77:a0:44:91:df:b9:bd:c3:32:a6:22: 48:a6:8e:2b:ef:eb:fa:dc:c4:77:70:19:41:f2:32: 3f:e2:a2:cd:83:94:3e:dd:14:ee:cc:5d:4b:29:88: 63:63:98:fb:9a:d7:40:1a:1c:8d:15:43:87:9d:50: c6:b0:fe:c1:d8:9a:22:b2:9e:97:b7:e6:fe:c1:01: 8a:e8:55:7f:64:d9:aa:bb:1c:dc:17:b4:93:df:99: 25:ef:69:92:e8:49:2d:e9:2b:11:87:da:89:95:f5: c2:8c:80:40:3f:66:e5:2e:cf:aa:99:37:2b:ec:9e: 90:d9:e4:9a:5c:ca:0c:47:4a:2a:85:de:0d:11:6f: ac:4e:ee:14:09:d9:91:45:a2:f4:60:9a:6c:29:48: 3e:74:33:30:dd:ea:55:35:f8:7c:cf:48:2b:02:e9: ec:81:ea:3a:11:52:85:94:1c:56:d0:67:af:25:e6: 09:d8:3f:76:3d:89:4c:ad:f9:a5:33:9d:81:51:ca: fe:7c:b6:8f:43:0c:1c:f4:49:a4:87:f9:b4:56:02: 00:cd:b6:a6:c3:9c:ef:e7:b0:ae:13:34:90:9e:ba: d5:cf:68:08:37:49:65:58:fb:3b:80:e0:25:55:63: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:70:4A:A2:F9:D0:1C:6C:50:E2:4D:43:40:7E:80:95:6F:4F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:80:02:b1:ec:1c:2f:83:a1:92:58:7f:6b:b4:cd:34:75:23: 2a:c0:0a:02:de:1b:20:0e:f7:e9:b6:4e:75:00:94:d3:29:53: 34:31:7f:dd:a4:a4:ef:26:26:c1:6c:a4:c5:e3:5c:13:07:c9: 92:1a:6a:9c:55:c2:24:9a:b0:db:65:6d:56:c6:8b:0d:e3:14: bf:e9:a6:53:57:4e:90:81:56:cf:f4:63:03:12:95:fb:8f:a4: bd:57:0c:fb:cf:8f:ef:49:90:cd:4f:48:20:38:fb:02:48:3b: ba:55:7e:60:75:fc:a2:11:0b:f2:47:02:4d:2f:d4:88:0d:54: 54:25:d7:d5:9c:b4:2c:65:49:fb:21:b4:7d:fb:df:be:88:d9: 90:98:b4:da:5f:2c:56:29:f9:2e:bc:52:82:cc:34:73:53:13: cb:41:18:4f:3d:b9:7f:60:bf:82:cd:82:3b:ba:c4:44:df:cb: d4:92:a6:df:6a:e4:0e:bc:0c:83:13:ea:c0:88:ed:19:db:65: 17:b2:30:7f:dd:8b:da:8d:af:53:a5:b3:41:f3:95:69:bd:85: 22:0c:45:d1:42:ef:96:90:14:dc:66:4c:43:4b:ba:ca:7a:70: fa:da:ab:90:cd:91:d8:45:12:f7:69:b5:26:42:1b:c6:60:e6: dd:31:20:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNDf4zVg906qo1IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTM5ODkyNmUtNzY4NS00MmY1LWE3MTMtZDJjYmZmMTkzMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYPUllFiL+W6glZEZW0XIFfvd6BEkd+5vcMy piJIpo4r7+v63MR3cBlB8jI/4qLNg5Q+3RTuzF1LKYhjY5j7mtdAGhyNFUOHnVDG sP7B2Joisp6Xt+b+wQGK6FV/ZNmquxzcF7ST35kl72mS6Ekt6SsRh9qJlfXCjIBA P2blLs+qmTcr7J6Q2eSaXMoMR0oqhd4NEW+sTu4UCdmRRaL0YJpsKUg+dDMw3epV Nfh8z0grAunsgeo6EVKFlBxW0GevJeYJ2D92PYlMrfmlM52BUcr+fLaPQwwc9Emk h/m0VgIAzbamw5zv57CuEzSQnrrVz2gIN0llWPs7gOAlVWOrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOohcEqi+dAcbFDiTUNAfoCVb0//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGEwNGJkYzktZTViMy0z NzM5LWJjNTYtOTE3YWFkZTlhMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKAArHsHC+DoZJYf2u0zTR1IyrACgLeGyAO9+m2TnUAlNMpUzQxf92k pO8mJsFspMXjXBMHyZIaapxVwiSasNtlbVbGiw3jFL/pplNXTpCBVs/0YwMSlfuP pL1XDPvPj+9JkM1PSCA4+wJIO7pVfmB1/KIRC/JHAk0v1IgNVFQl19WctCxlSfsh tH37376I2ZCYtNpfLFYp+S68UoLMNHNTE8tBGE89uX9gv4LNgju6xETfy9SSpt9q 5A68DIMT6sCI7RnbZReyMH/di9qNr1Ols0HzlWm9hSIMRdFC75aQFNxmTENLusp6 cPraq5DNkdhFEvdptSZCG8Zg5t0xIJ8= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:18 2025 by rpki-client