$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa File: dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa (raw, json) Hash identifier: GsiAJDQG6KU0iM8AyNDUuxDpFhiS1z8Zet8phhU0Kfk= Subject key identifier: F5:81:9C:43:55:4B:77:96:62:86:B9:83:24:DB:02:EA:D4:34:AD:18 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E649B28B4E08D458DED8C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9b:28:b4:e0:8d:45:8d:ed:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=8ba20cfe-f036-4224-9cf5-08f3e8b4c1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:75:aa:c2:1e:e4:43:cf:c4:a2:29:6a:5f:d4: bf:b4:be:df:37:0f:f7:b7:e6:7b:64:11:b4:39:9c: 1c:03:9a:9c:f6:e5:0e:d7:2b:27:a1:02:5d:61:ab: 90:6f:fd:b5:52:8c:9c:fe:dd:ed:7c:65:f9:0a:86: 9a:86:3d:0f:e5:7f:1b:36:ba:15:3d:72:d8:79:19: 43:fb:5b:95:30:17:5f:6a:29:c9:67:47:68:31:52: 5a:e3:92:39:75:70:ef:8a:ed:a4:5e:7c:1b:14:3f: f5:fb:c9:b6:21:05:52:e2:b0:26:be:de:01:fc:08: 39:68:8a:a3:6f:ad:0c:e9:b8:e2:0c:9a:2e:49:9d: f1:8d:a5:d2:70:11:f7:fe:4a:4a:9b:38:a6:1e:81: b8:13:c6:b4:e5:ef:e2:2d:0a:a7:8f:8d:4a:68:a9: b7:ba:7a:39:61:6c:2b:7c:86:f5:55:74:37:c9:ba: f4:cc:f0:de:87:66:31:6a:bb:fb:b8:78:8b:d4:70: 42:42:96:c1:27:d5:4a:b2:34:71:c5:2f:83:cf:c3: ed:6a:b7:4d:f0:86:65:42:78:ff:71:78:af:4a:b3: 5b:09:81:57:27:c2:a9:1b:88:47:f8:38:74:5d:88: fb:dd:2d:1b:ea:10:4e:a4:6e:16:92:0c:6f:90:6c: 72:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:81:9C:43:55:4B:77:96:62:86:B9:83:24:DB:02:EA:D4:34:AD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:43:24:52:19:30:a3:4e:fb:b5:ec:c0:14:8d:1b:41:21:04: af:2a:0a:6e:fc:71:b2:e0:45:c2:b4:18:0d:ea:a5:78:d1:09: 4b:20:5a:d9:45:90:a3:b8:b8:2a:b6:b1:b8:fc:08:48:8d:bf: 1c:1a:71:09:5b:39:84:9c:fd:91:65:82:55:8c:7c:68:46:e8: f7:ee:51:18:9f:cb:4b:aa:4a:81:48:93:b1:a9:c6:c5:5e:33: f2:97:e4:d0:74:84:be:bd:74:db:b4:b3:1d:38:35:f9:e7:16: 1a:f6:8b:e5:f8:ac:12:b8:ac:74:5c:45:5f:ea:85:19:92:26: 11:89:98:b3:22:25:33:93:cf:35:e6:33:58:33:52:a6:25:fe: a4:67:9d:73:ca:62:f8:7a:33:c1:d0:4c:a2:71:30:ef:70:a1: 7a:8f:bf:7a:82:a7:4a:63:64:79:ea:b2:68:5a:2f:09:55:32: 86:38:15:d9:22:17:0c:47:6a:ea:7c:7d:89:74:72:e7:df:de: 2f:a5:f6:a3:69:13:2e:b0:93:75:d7:ea:43:26:d3:e3:1c:7e: 39:62:bb:2e:52:18:56:dd:dc:05:49:fd:ba:18:07:13:c6:1f: f6:a8:6e:60:03:9d:46:18:d9:3f:e8:d5:14:e2:67:e9:be:db: 12:e8:af:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJsotOCNRY3tjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OGJhMjBjZmUtZjAzNi00MjI0LTljZjUtMDhmM2U4YjRjMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXWqwh7kQ8/EoilqX9S/tL7fNw/3t+Z7ZBG0 OZwcA5qc9uUO1ysnoQJdYauQb/21Uoyc/t3tfGX5Coaahj0P5X8bNroVPXLYeRlD +1uVMBdfainJZ0doMVJa45I5dXDviu2kXnwbFD/1+8m2IQVS4rAmvt4B/Ag5aIqj b60M6bjiDJouSZ3xjaXScBH3/kpKmzimHoG4E8a05e/iLQqnj41KaKm3uno5YWwr fIb1VXQ3ybr0zPDeh2Yxarv7uHiL1HBCQpbBJ9VKsjRxxS+Dz8PtardN8IZlQnj/ cXivSrNbCYFXJ8KpG4hH+Dh0XYj73S0b6hBOpG4WkgxvkGxycQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWBnENVS3eWYoa5gyTbAurUNK0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGJiM2ZjZjgtNTNiNS0z MjBlLWFjODgtYjU3MzBiZThhYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9DJFIZMKNO+7XswBSNG0EhBK8qCm78cbLgRcK0GA3qpXjRCUsgWtlF kKO4uCq2sbj8CEiNvxwacQlbOYSc/ZFlglWMfGhG6PfuURify0uqSoFIk7GpxsVe M/KX5NB0hL69dNu0sx04NfnnFhr2i+X4rBK4rHRcRV/qhRmSJhGJmLMiJTOTzzXm M1gzUqYl/qRnnXPKYvh6M8HQTKJxMO9woXqPv3qCp0pjZHnqsmhaLwlVMoY4Fdki FwxHaup8fYl0cuff3i+l9qNpEy6wk3XX6kMm0+Mcfjliuy5SGFbd3AVJ/boYBxPG H/aobmADnUYY2T/o1RTiZ+m+2xLor2A= -----END CERTIFICATE-----Generated at Mon Apr 28 02:21:36 2025 by rpki-client