$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de52c09a-bbc1-3233-a08b-ac13505b6b99.roa File: de52c09a-bbc1-3233-a08b-ac13505b6b99.roa (raw, json) Hash identifier: 0MF9w/KM+ff6IfTHUDgHVK7f2zEj5FG8GIs8nBVKZbk= Subject key identifier: 48:FF:A0:72:EC:56:95:2E:53:43:67:F0:1D:53:05:20:6E:BE:9E:73 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0604E990D051679D7F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de52c09a-bbc1-3233-a08b-ac13505b6b99.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:06:04:e9:90:d0:51:67:9d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=a81ecfab-9b3d-47aa-8b35-04f48a63784f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:12:42:0a:ab:cd:51:bb:55:e5:d8:b6:f7:e6: b1:59:bf:df:5c:aa:f4:f0:7d:30:50:75:8c:57:25: b1:4e:6a:79:cb:83:68:89:a6:bb:d7:52:f8:65:77: cd:19:fd:e1:4d:25:45:e2:03:e7:2c:03:c7:a1:96: 59:63:11:eb:30:c4:88:8c:c9:b1:fd:10:b9:fa:88: ca:d3:5d:94:e6:ef:8b:0b:fc:62:1e:f0:2c:9d:07: a7:42:b8:3f:f1:3f:c5:a0:d0:f8:84:93:7e:27:97: bf:df:93:7e:0e:61:a1:b1:e7:56:11:de:bd:84:58: a1:1e:65:4e:74:e5:a4:ab:97:e3:bf:4e:d9:e9:f9: 62:5d:79:f8:f4:09:3d:82:1b:de:34:2e:4d:8a:81: 26:a8:d0:78:15:2e:fe:08:4b:84:98:cd:5f:f2:4e: f3:99:27:be:fd:c0:93:d4:14:70:b2:e0:9c:68:90: 31:19:93:f0:21:1b:ef:bf:a7:a4:90:4d:81:8c:85: ef:a2:e7:9b:5a:ae:ef:25:20:7b:bd:e4:91:d7:2f: 7f:3a:64:9f:39:ac:2a:83:80:88:96:d1:e0:75:48: 62:e6:90:6a:1c:f0:55:6d:2f:0e:82:da:51:8b:ce: 9c:f7:b1:26:30:ec:f4:01:78:db:ad:11:2f:0b:9c: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:A0:72:EC:56:95:2E:53:43:67:F0:1D:53:05:20:6E:BE:9E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de52c09a-bbc1-3233-a08b-ac13505b6b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:74:da:8b:ec:c8:61:2f:c7:75:a9:94:30:57:76:06:ce:c5: 76:a1:e5:99:20:ed:9d:75:1e:2d:f4:47:66:c5:0a:2e:84:68: 09:7e:06:e6:0a:ed:e3:90:64:65:74:c3:50:6d:bb:23:27:2f: 29:40:c7:7e:80:90:b0:ce:88:df:fc:3b:c8:68:c5:b9:59:de: cc:af:5c:1b:84:c4:b7:1a:28:1a:2a:b5:99:a5:e1:24:a8:c0: 45:2e:50:d2:93:c1:e1:3b:69:b8:28:92:90:23:d2:83:e9:17: 1f:8e:2e:73:c4:a5:38:9c:a1:cc:80:82:2e:ff:3f:87:82:53: 98:40:4f:1a:e6:a1:d3:bd:4d:8c:e8:48:47:6f:81:07:c5:50: 1c:67:7c:f9:e7:41:af:32:56:69:9d:22:cc:9b:8b:05:c6:2d: b6:ee:d7:c1:8b:4b:6d:7c:72:e0:2e:2c:9e:8b:06:98:37:a4: 56:48:f7:18:4a:b2:c0:19:bf:a7:fd:ae:0b:23:43:77:1a:6f: 43:08:66:66:b6:8e:5c:47:50:cc:08:40:32:bf:0a:fd:f5:39: 8d:e4:96:a3:30:f0:70:d9:cd:d7:73:41:09:54:8a:ca:94:8c: 48:47:8e:37:b3:92:76:59:55:12:52:47:da:df:93:ce:2a:f3: 98:eb:e8:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gYE6ZDQUWedfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YTgxZWNmYWItOWIzZC00N2FhLThiMzUtMDRmNDhhNjM3ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBJCCqvNUbtV5di29+axWb/fXKr08H0wUHWM VyWxTmp5y4Noiaa711L4ZXfNGf3hTSVF4gPnLAPHoZZZYxHrMMSIjMmx/RC5+ojK 012U5u+LC/xiHvAsnQenQrg/8T/FoND4hJN+J5e/35N+DmGhsedWEd69hFihHmVO dOWkq5fjv07Z6fliXXn49Ak9ghveNC5NioEmqNB4FS7+CEuEmM1f8k7zmSe+/cCT 1BRwsuCcaJAxGZPwIRvvv6ekkE2BjIXvouebWq7vJSB7veSR1y9/OmSfOawqg4CI ltHgdUhi5pBqHPBVbS8OgtpRi86c97EmMOz0AXjbrREvC5wpVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj/oHLsVpUuU0Nn8B1TBSBuvp5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGU1MmMwOWEtYmJjMS0z MjMzLWEwOGItYWMxMzUwNWI2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF02ovsyGEvx3WplDBXdgbOxXah5Zkg7Z11Hi30R2bFCi6EaAl+BuYK 7eOQZGV0w1BtuyMnLylAx36AkLDOiN/8O8hoxblZ3syvXBuExLcaKBoqtZml4SSo wEUuUNKTweE7abgokpAj0oPpFx+OLnPEpTicocyAgi7/P4eCU5hATxrmodO9TYzo SEdvgQfFUBxnfPnnQa8yVmmdIsybiwXGLbbu18GLS218cuAuLJ6LBpg3pFZI9xhK ssAZv6f9rgsjQ3cab0MIZma2jlxHUMwIQDK/Cv31OY3klqMw8HDZzddzQQlUisqU jEhHjjezknZZVRJSR9rfk84q85jr6Lw= -----END CERTIFICATE-----Generated at Sun Apr 27 18:31:46 2025 by rpki-client