$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa File: dfd93ee2-24f3-3c72-927e-16cb7326efed.roa (raw, json) Hash identifier: 6Uu4Swfx7Xya8uuM1VQK8gonkxBeJVrqv4SHrLu2r9c= Subject key identifier: DF:EA:B4:40:C9:66:A2:36:94:B8:95:05:B3:D0:7B:59:EC:CF:84:F3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B395CB4377503B506980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b3:95:cb:43:77:50:3b:50:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=e1c9f167-e872-4d27-b207-e4e232885526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:10:63:5d:f5:f4:1c:3e:60:71:8e:c7:63: 91:eb:f9:06:af:ed:d9:4e:9f:78:06:b7:07:2a:3a: 1e:d3:61:7a:ff:ca:0e:1c:af:b2:8a:28:98:43:32: 97:dd:43:4d:3e:e7:1c:0d:f3:67:24:a5:c0:ef:28: 50:21:62:a4:ea:ba:80:0a:f1:46:69:cb:4b:a0:14: ea:97:9d:e1:49:d8:80:e9:a4:77:37:93:c9:3d:78: 4e:66:96:b3:12:38:9f:9b:28:37:d7:15:c6:40:75: 4c:f0:4b:1a:ea:2d:23:d4:a1:1f:c5:29:07:48:04: ca:cf:b2:4a:5d:b7:f0:f8:b1:0b:06:fa:24:69:ad: ba:70:0d:b7:67:ec:19:cc:61:29:64:67:34:5a:77: bc:35:6c:a5:f0:0b:90:61:10:bc:9d:7e:af:08:85: 34:ad:ef:c5:7b:65:db:4b:70:02:fc:36:df:15:a2: 7d:6f:9b:06:c8:c1:9b:e8:b2:49:2a:b8:50:64:bc: 89:f7:27:85:81:f3:73:bf:94:09:35:1b:59:4b:25: ab:b0:f1:8f:1e:64:ea:02:4a:73:1e:87:75:b0:1a: 25:a1:49:89:7b:23:b0:74:39:9e:a9:7b:21:36:79: 1a:08:94:d7:fe:73:6f:56:f4:ca:81:81:cb:76:d5: b0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EA:B4:40:C9:66:A2:36:94:B8:95:05:B3:D0:7B:59:EC:CF:84:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c9:52:d8:b9:1d:b6:85:2e:5f:ff:b6:a6:ec:56:ae:16:4f: d7:70:e6:19:0b:91:c8:6a:ca:a4:a0:a5:10:7a:07:0d:80:cb: 5b:bf:86:c1:4e:fb:ad:87:f0:43:96:21:4c:02:9f:87:0c:fa: 44:c7:f3:75:e3:4f:ae:e6:ac:a1:1b:49:ac:11:c8:62:df:22: d6:0a:9c:a5:42:0e:dd:18:b7:70:16:45:7f:e1:72:75:42:ab: d8:ee:6d:2c:3a:88:69:fd:84:ba:fc:a3:ab:3d:fb:5f:55:eb: 7e:c8:cb:0c:3e:95:96:4e:e7:31:00:1b:d3:ef:7d:91:fc:2f: d7:8b:b8:0f:5e:87:96:38:8b:2a:34:c3:f7:51:58:59:61:a6: 87:dc:e8:6f:c5:1e:8a:a4:3c:48:a5:a1:7c:71:23:e8:1c:4e: ba:8b:7f:35:0a:fe:e2:75:4a:2c:d7:ae:37:a0:ca:16:78:33: fb:c0:de:58:69:13:45:40:83:a5:0f:40:7e:f1:d4:d2:d7:f7: c3:15:a4:f6:9b:9f:5a:d3:81:2d:4f:79:9e:a3:02:1a:72:ec: 14:e0:fe:f1:7b:d1:08:b1:21:c1:5b:7a:7f:95:ab:22:03:79: ca:8a:d9:ba:1e:c5:26:26:40:3e:5d:6d:c7:e5:e5:3e:f6:ec: f0:3a:ea:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLOVy0N3UDtQaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZTFjOWYxNjctZTg3Mi00ZDI3LWIyMDctZTRlMjMyODg1NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngEQY1319Bw+YHGOx2OR6/kGr+3ZTp94BrcH Kjoe02F6/8oOHK+yiiiYQzKX3UNNPuccDfNnJKXA7yhQIWKk6rqACvFGactLoBTq l53hSdiA6aR3N5PJPXhOZpazEjifmyg31xXGQHVM8Esa6i0j1KEfxSkHSATKz7JK Xbfw+LELBvokaa26cA23Z+wZzGEpZGc0Wne8NWyl8AuQYRC8nX6vCIU0re/Fe2Xb S3AC/DbfFaJ9b5sGyMGb6LJJKrhQZLyJ9yeFgfNzv5QJNRtZSyWrsPGPHmTqAkpz Hod1sBoloUmJeyOwdDmeqXshNnkaCJTX/nNvVvTKgYHLdtWwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/qtEDJZqI2lLiVBbPQe1nsz4TzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGZkOTNlZTItMjRmMy0z YzcyLTkyN2UtMTZjYjczMjZlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3JUti5HbaFLl//tqbsVq4WT9dw5hkLkchqyqSgpRB6Bw2Ay1u/hsFO +62H8EOWIUwCn4cM+kTH83XjT67mrKEbSawRyGLfItYKnKVCDt0Yt3AWRX/hcnVC q9jubSw6iGn9hLr8o6s9+19V637Iyww+lZZO5zEAG9PvfZH8L9eLuA9eh5Y4iyo0 w/dRWFlhpofc6G/FHoqkPEiloXxxI+gcTrqLfzUK/uJ1SizXrjegyhZ4M/vA3lhp E0VAg6UPQH7x1NLX98MVpPabn1rTgS1PeZ6jAhpy7BTg/vF70QixIcFben+VqyID ecqK2boexSYmQD5dbcfl5T727PA66vY= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:08 2025 by rpki-client