$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ece654c6-8f51-3b7d-a313-9dba9d710096.roa File: ece654c6-8f51-3b7d-a313-9dba9d710096.roa (raw, json) Hash identifier: 0wF6JBRqVRrv6L4I31Ayb4CpqVwy/Je2dW87vPfoOZ4= Subject key identifier: E4:78:12:7F:99:AA:38:40:06:90:F4:40:47:A0:8F:61:A3:9F:AE:EE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D6F8A0EFD5FD6AB1B500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ece654c6-8f51-3b7d-a313-9dba9d710096.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d6:f8:a0:ef:d5:fd:6a:b1:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d310d19f-f993-4ce8-8fa8-f552e599efe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:67:94:e9:37:fb:7c:d5:bd:1a:8d:4e:81:5c: 48:b9:5c:14:b8:62:0f:d9:fa:ab:34:00:68:ae:22: 34:6e:65:61:94:a6:4d:5e:06:87:97:c3:c2:14:fc: 77:b5:09:02:f7:bf:e7:59:95:e2:27:96:4b:8c:aa: a5:b1:2f:d2:c0:9f:e1:7e:f6:3d:0d:16:b7:a3:c2: b7:49:f3:d5:b5:61:1d:82:78:95:3a:93:43:68:5b: c4:29:79:32:26:1c:25:ae:8d:7a:54:f6:a3:f3:f9: 98:da:55:29:8d:f0:21:ad:95:fd:48:ef:22:28:71: 1e:46:90:b3:b0:01:51:5f:be:76:f7:49:bd:da:c0: 08:68:fc:93:bb:46:54:0f:dc:f4:ad:2d:02:60:bb: 2c:63:66:a9:2c:d1:66:57:5d:79:cb:55:bb:ac:0f: 2e:1c:a2:f3:a1:29:2f:19:1c:45:c1:5e:ed:d4:ea: db:13:06:ce:b3:3f:9b:85:40:b6:f8:74:d9:dd:34: d3:6c:b8:63:aa:35:1c:d5:5a:d8:8f:cd:ea:4b:ae: d7:20:23:8b:88:57:9b:7c:d9:a8:6b:45:d2:67:54: bb:d1:ba:ed:43:92:16:50:15:86:2c:f5:ba:15:c9: e9:02:72:3b:a6:04:ab:a5:00:e4:62:1b:20:62:68: e6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:78:12:7F:99:AA:38:40:06:90:F4:40:47:A0:8F:61:A3:9F:AE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ece654c6-8f51-3b7d-a313-9dba9d710096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b7:85:24:5b:7c:3b:12:62:96:10:57:3a:da:b3:e1:04:bd: a2:65:47:87:a9:60:50:04:fb:cf:f9:79:e4:3b:fc:e8:67:63: 03:3a:0d:f2:7f:e8:cc:ca:48:55:c7:d0:a7:af:80:3d:33:d6: 66:25:4f:f8:a9:5c:1d:48:30:5a:9b:bc:f1:f8:ca:bd:e6:26: d0:71:7e:d4:7b:ce:7c:0a:c0:95:7e:da:1d:b3:79:65:e4:f3: b4:c6:4e:94:6e:c4:d3:81:58:ea:ff:3f:65:93:fa:97:61:4a: 76:a2:1d:bf:12:d7:97:73:20:61:5b:46:f1:2a:ad:11:51:99: 99:e5:0e:3d:b3:a8:e3:7f:31:c7:0c:56:e0:dd:0c:9d:7a:10: e4:22:59:2a:07:49:6e:1e:2c:49:01:a0:e0:69:d8:1d:eb:df: 92:05:a9:55:90:e5:5e:2c:bb:b7:3a:0f:ec:36:04:9e:1f:5c: ec:fe:55:6b:c1:59:b9:2b:28:6d:0e:1c:07:5c:cb:79:81:49: 9b:ae:ee:c1:3e:ee:24:37:fe:18:56:b1:a0:d4:04:6c:23:c8: de:fa:b2:cc:a6:71:5f:a6:5f:c9:57:b7:cd:d7:b9:27:00:90: 13:bb:13:2c:0d:b4:a4:0c:40:44:71:6d:d9:a7:1d:24:fc:26: d4:de:6b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNb4oO/V/WqxtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDMxMGQxOWYtZjk5My00Y2U4LThmYTgtZjU1MmU1OTllZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGeU6Tf7fNW9Go1OgVxIuVwUuGIP2fqrNABo riI0bmVhlKZNXgaHl8PCFPx3tQkC97/nWZXiJ5ZLjKqlsS/SwJ/hfvY9DRa3o8K3 SfPVtWEdgniVOpNDaFvEKXkyJhwlro16VPaj8/mY2lUpjfAhrZX9SO8iKHEeRpCz sAFRX75290m92sAIaPyTu0ZUD9z0rS0CYLssY2apLNFmV115y1W7rA8uHKLzoSkv GRxFwV7t1OrbEwbOsz+bhUC2+HTZ3TTTbLhjqjUc1VrYj83qS67XICOLiFebfNmo a0XSZ1S70brtQ5IWUBWGLPW6FcnpAnI7pgSrpQDkYhsgYmjmwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR4En+ZqjhABpD0QEegj2Gjn67uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNlNjU0YzYtOGY1MS0z YjdkLWEzMTMtOWRiYTlkNzEwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIa2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK3hSRbfDsSYpYQVzras+EEvaJlR4epYFAE+8/5eeQ7/OhnYwM6DfJ/ 6MzKSFXH0KevgD0z1mYlT/ipXB1IMFqbvPH4yr3mJtBxftR7znwKwJV+2h2zeWXk 87TGTpRuxNOBWOr/P2WT+pdhSnaiHb8S15dzIGFbRvEqrRFRmZnlDj2zqON/MccM VuDdDJ16EOQiWSoHSW4eLEkBoOBp2B3r35IFqVWQ5V4su7c6D+w2BJ4fXOz+VWvB WbkrKG0OHAdcy3mBSZuu7sE+7iQ3/hhWsaDUBGwjyN76ssymcV+mX8lXt83XuScA kBO7EywNtKQMQERxbdmnHST8JtTea+Q= -----END CERTIFICATE-----Generated at Sun Apr 27 15:35:43 2025 by rpki-client