$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa File: eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa (raw, json) Hash identifier: 5Y8VI3wCjSbtmcj7aEF+E+BMkIYnOXa3kOHyok8nIPM= Subject key identifier: A2:25:4F:9D:29:7D:A9:95:EB:36:68:00:E5:DC:D8:90:37:C0:0F:9E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA04D55FB6C5D6E1CA7800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:04:d5:5f:b6:c5:d6:e1:ca:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=883b490e-9d6f-43cc-a4fe-7c29bcafb162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:cd:72:46:81:de:29:aa:64:56:f1:48:7e: bc:d2:59:0b:ea:7d:76:8a:09:35:50:f4:f1:e5:9e: ef:c2:14:29:42:e3:2c:c4:b1:20:dc:e2:6f:d6:10: aa:e1:bd:5e:28:c8:54:70:cf:27:82:c8:06:66:43: 68:e4:b9:3c:9a:09:27:24:ab:83:92:87:95:ac:1a: 71:a6:55:d3:37:cd:7a:0d:70:53:98:d3:1f:92:2a: 8b:ea:36:a3:09:ad:f5:75:db:ab:d5:22:38:a2:40: 82:3e:a9:3a:04:97:7f:87:2f:45:7a:f3:c3:b9:93: 1b:82:83:1c:9b:38:56:1e:cc:fc:ce:5d:44:12:47: 6a:de:6f:60:a4:78:34:98:84:86:87:c9:c7:90:15: 9b:bf:cf:02:ae:17:6a:eb:31:3d:4a:97:9a:56:68: c0:ee:07:a1:82:e6:34:92:51:07:a3:28:9f:6b:d5: 99:93:1b:75:b2:e9:d9:69:43:18:47:d4:7d:88:b1: b0:2a:1b:ee:1b:6e:5d:3e:32:32:aa:49:df:90:fa: b0:b8:53:fb:96:41:ab:dc:58:19:8f:00:1d:ef:5e: 33:a9:01:91:22:c4:bb:22:5c:0b:80:43:cb:76:8c: b1:85:d7:ba:30:15:10:bc:72:d6:8d:ef:48:49:4b: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:25:4F:9D:29:7D:A9:95:EB:36:68:00:E5:DC:D8:90:37:C0:0F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:44:0a:f7:ba:d4:0e:99:9e:02:f4:b9:5d:af:61:65:d6:0d: 35:cb:16:40:49:e9:99:6f:dd:12:2d:8d:81:b6:f3:c0:64:a5: 40:26:7b:28:dc:af:9d:7f:cc:bf:cd:61:28:f4:9e:21:9b:fd: 67:fe:14:5a:07:01:8d:2e:c2:7d:dc:4d:78:d7:7b:fb:be:ca: 7d:74:4d:49:90:49:cf:c7:8a:c8:47:bd:e3:e3:b7:98:c3:d7: 36:86:2f:86:c0:29:af:7a:e3:d3:33:5f:66:8f:a5:ba:52:91: 96:97:2b:ed:c5:5d:de:e9:6d:f2:68:ae:98:bc:56:25:30:55: bd:b4:3f:8b:7c:ff:ee:9e:c7:f5:9c:a6:20:29:c3:ba:f6:9a: 5b:28:44:9d:75:04:01:d4:9c:b6:18:4a:74:d3:6f:a6:38:98: b5:a0:6e:33:5a:29:d5:7c:bb:9c:64:79:2d:d1:a7:f5:7d:75: ef:1b:07:af:6c:04:79:c9:97:bf:46:d1:0e:cc:27:e3:2b:f9: a4:1a:85:ea:71:15:1b:bc:eb:b9:72:8d:09:cc:1e:e7:2b:6c: 11:74:5e:16:7b:b1:07:e6:f9:96:e6:94:0d:50:ca:8a:64:f6: bf:0b:22:cc:6f:7d:c0:d5:19:d0:96:77:51:d5:35:37:ea:d8: 6d:88:5b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gTVX7bF1uHKeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ODgzYjQ5MGUtOWQ2Zi00M2NjLWE0ZmUtN2MyOWJjYWZiMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXrNckaB3imqZFbxSH680lkL6n12igk1UPTx 5Z7vwhQpQuMsxLEg3OJv1hCq4b1eKMhUcM8ngsgGZkNo5Lk8mgknJKuDkoeVrBpx plXTN816DXBTmNMfkiqL6jajCa31ddur1SI4okCCPqk6BJd/hy9FevPDuZMbgoMc mzhWHsz8zl1EEkdq3m9gpHg0mISGh8nHkBWbv88Crhdq6zE9SpeaVmjA7gehguY0 klEHoyifa9WZkxt1sunZaUMYR9R9iLGwKhvuG25dPjIyqknfkPqwuFP7lkGr3FgZ jwAd714zqQGRIsS7IlwLgEPLdoyxhde6MBUQvHLWje9ISUu8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIlT50pfamV6zZoAOXc2JA3wA+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWJhMWFmZjMtMzczOS0z NTI2LWIxYWQtZDM4Y2NmOTgyYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhECve61A6ZngL0uV2vYWXWDTXLFkBJ6Zlv3RItjYG288BkpUAmeyjc r51/zL/NYSj0niGb/Wf+FFoHAY0uwn3cTXjXe/u+yn10TUmQSc/HishHvePjt5jD 1zaGL4bAKa9649MzX2aPpbpSkZaXK+3FXd7pbfJorpi8ViUwVb20P4t8/+6ex/Wc piApw7r2mlsoRJ11BAHUnLYYSnTTb6Y4mLWgbjNaKdV8u5xkeS3Rp/V9de8bB69s BHnJl79G0Q7MJ+Mr+aQahepxFRu867lyjQnMHucrbBF0XhZ7sQfm+ZbmlA1Qyopk 9r8LIsxvfcDVGdCWd1HVNTfq2G2IWzA= -----END CERTIFICATE-----Generated at Sun Apr 27 21:32:52 2025 by rpki-client