$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa File: f0e650e8-42ca-3b0b-82e7-54b60647533e.roa (raw, json) Hash identifier: Kw7uQ/pCC+OxluwwlnEarT7Y9FtYJiYg+4WqxI+HmO0= Subject key identifier: 02:A6:B7:77:5D:DE:90:42:7F:BB:5C:12:FF:0D:A1:4A:B0:91:12:FC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24DB862A6340E9680B8480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36411 IP address blocks: 104.134.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:db:86:2a:63:40:e9:68:0b:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=6d935b9c-6559-45f7-8c9a-665364c73855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7e:b7:8c:a2:0c:08:f8:22:8b:1a:83:e4:d3: 76:f3:31:ef:27:07:78:1d:74:de:f1:01:82:3a:e9: 65:62:04:34:95:67:dd:af:91:34:33:77:bf:f5:38: 57:8a:19:57:66:94:81:e2:b4:62:8c:7c:34:f8:de: 71:21:87:b1:3f:2f:e6:82:9c:ef:8d:b8:2d:5f:54: a6:84:00:c5:3b:7a:c7:e4:24:85:8a:ce:12:bd:b3: 68:61:a3:b4:a5:bb:e4:a1:7e:3d:82:ec:55:51:44: c3:ac:18:90:9d:72:a2:49:b5:d6:30:6f:c8:33:8c: d8:d3:f6:98:11:32:e1:93:fe:b2:a7:eb:e6:da:86: 03:9f:cf:cb:67:0d:8e:6d:f2:13:5d:56:f6:9d:37: 3c:f3:8d:66:0e:57:18:df:ee:bc:00:ad:48:dd:d7: d6:64:d5:28:27:7e:52:c4:ac:55:17:27:25:5d:ac: 51:17:52:7f:65:82:03:5b:70:65:b9:2e:9b:4d:73: e1:d9:5f:8e:e8:d1:3c:63:57:30:4e:c8:a6:50:9f: 6d:0b:be:42:5f:90:c3:2d:b1:43:25:b6:bd:3c:02: e8:19:94:44:98:57:4c:e8:a7:74:04:a0:07:32:23: 1a:a9:94:2c:fc:29:84:9d:4b:95:21:4a:e9:10:ae: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:B7:77:5D:DE:90:42:7F:BB:5C:12:FF:0D:A1:4A:B0:91:12:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:67:44:9d:20:cf:dc:24:c4:5d:20:23:6e:b4:39:87:51:07: 6f:a2:46:49:4c:d1:f1:24:51:1b:08:bb:24:8d:71:6f:c0:c7: 0e:f9:c3:bc:17:a5:cf:3d:b0:cb:b7:00:59:7d:59:8d:3d:38: b9:64:84:b2:7a:52:72:12:ed:90:03:60:24:f2:17:7a:0f:77: f8:b7:56:83:0a:ec:33:b6:de:37:63:ba:f7:4b:d8:38:5a:49: b4:cc:43:1e:9e:2a:e0:9e:84:be:a0:1e:0d:42:89:dc:39:d7: 69:6e:61:54:aa:6c:e5:8d:08:4b:03:94:f8:4d:42:34:e4:3c: 0f:c2:35:56:99:82:a0:94:c0:3d:09:4e:0b:09:e2:64:fb:2c: 9d:64:02:71:c2:d1:36:3c:c2:9e:a5:21:86:a2:3f:32:6d:a3: 5e:75:00:58:9a:ac:c3:c6:9c:ed:ba:a1:21:4d:0a:43:aa:b4: 6f:3d:7f:a0:f7:fa:5b:ec:b5:5a:85:e3:a0:6a:53:8c:93:fe: 2c:87:63:8a:04:4e:ea:1b:82:2f:ad:b6:7f:27:9a:85:5a:d2: 06:6a:11:6b:c6:9a:d4:81:10:73:aa:2a:10:e3:b3:85:46:04: 22:57:e7:72:52:0f:5b:79:c6:40:c1:6c:a1:41:9c:a2:48:ba: a8:40:a0:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNuGKmNA6WgLhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NmQ5MzViOWMtNjU1OS00NWY3LThjOWEtNjY1MzY0YzczODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn63jKIMCPgiixqD5NN28zHvJwd4HXTe8QGC OullYgQ0lWfdr5E0M3e/9ThXihlXZpSB4rRijHw0+N5xIYexPy/mgpzvjbgtX1Sm hADFO3rH5CSFis4SvbNoYaO0pbvkoX49guxVUUTDrBiQnXKiSbXWMG/IM4zY0/aY ETLhk/6yp+vm2oYDn8/LZw2ObfITXVb2nTc8841mDlcY3+68AK1I3dfWZNUoJ35S xKxVFyclXaxRF1J/ZYIDW3BluS6bTXPh2V+O6NE8Y1cwTsimUJ9tC75CX5DDLbFD Jba9PALoGZREmFdM6Kd0BKAHMiMaqZQs/CmEnUuVIUrpEK5HaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKmt3dd3pBCf7tcEv8NoUqwkRL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjBlNjUwZTgtNDJjYS0z YjBiLTgyZTctNTRiNjA2NDc1MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhnRJ0gz9wkxF0gI260OYdRB2+iRklM0fEkURsIuySNcW/Axw75w7wX pc89sMu3AFl9WY09OLlkhLJ6UnIS7ZADYCTyF3oPd/i3VoMK7DO23jdjuvdL2Dha SbTMQx6eKuCehL6gHg1Cidw512luYVSqbOWNCEsDlPhNQjTkPA/CNVaZgqCUwD0J TgsJ4mT7LJ1kAnHC0TY8wp6lIYaiPzJto151AFiarMPGnO26oSFNCkOqtG89f6D3 +lvstVqF46BqU4yT/iyHY4oETuobgi+ttn8nmoVa0gZqEWvGmtSBEHOqKhDjs4VG BCJX53JSD1t5xkDBbKFBnKJIuqhAoIw= -----END CERTIFICATE-----Generated at Mon Apr 28 01:56:51 2025 by rpki-client