$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1045efe-d951-3037-8b46-487104947b32.roa File: f1045efe-d951-3037-8b46-487104947b32.roa (raw, json) Hash identifier: kn4cNclG5MUoS60HmSbRyQilUr1CrA3L67MKr3wJATE= Subject key identifier: 05:00:A5:35:43:4B:CA:11:AA:D8:C6:B9:66:D0:7A:C5:C7:EF:34:44 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA05391B0C033371E87600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1045efe-d951-3037-8b46-487104947b32.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:05:39:1b:0c:03:33:71:e8:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=59fa4b27-fb1b-4afe-b223-ac67db5f917e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:63:3a:d0:c3:30:f7:3d:88:97:2e:79:39: 0d:f9:5b:87:a9:c1:2f:fc:e8:ea:06:d2:f4:c3:a2: 93:26:49:49:62:ef:44:72:54:13:70:c1:a5:df:29: 9a:2f:4e:df:80:90:9c:93:f4:6d:6a:9f:b3:c8:e6: 4a:ca:5a:11:5e:90:38:0d:06:4a:0c:bc:e7:f0:27: 04:81:0d:f6:2b:b0:3b:1b:39:d1:74:e6:9e:f9:c1: a5:cb:e3:35:3c:26:e0:6c:10:f9:2c:7d:db:07:c4: 96:d4:dd:35:f6:07:81:c9:57:2a:39:32:cb:bd:83: 65:a7:53:55:60:f5:37:8f:e4:7d:89:2d:77:d3:32: 7b:f7:99:b4:db:49:77:11:ab:eb:3e:1b:60:18:e0: 37:f5:ae:18:48:07:39:52:2f:c0:55:2e:cc:f8:87: 16:64:a3:1c:e2:68:bf:ac:54:03:fb:d6:85:5d:b1: 82:db:78:43:b8:97:42:0d:d0:99:1c:17:c4:8d:3f: e4:2f:53:87:8e:ad:e2:ad:04:2c:30:93:a5:59:54: 71:83:31:be:b2:40:a6:c0:e6:6c:ba:2a:04:5c:49: 25:43:f5:39:c3:98:73:12:2d:8b:cd:95:b4:82:54: 47:ff:64:5f:66:2e:84:79:b6:bc:6a:ed:59:4d:58: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:00:A5:35:43:4B:CA:11:AA:D8:C6:B9:66:D0:7A:C5:C7:EF:34:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1045efe-d951-3037-8b46-487104947b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:16:0e:0f:0b:2f:07:8f:3c:52:dc:a3:c0:11:de:e7:f3:7e: 99:e7:b0:06:47:ea:2a:0f:33:d9:08:37:b7:7d:e6:39:e4:72: 38:e4:a2:93:52:1a:dc:1d:43:c7:73:88:2f:4d:61:e2:b8:b7: e5:52:11:61:05:c3:30:7a:7f:fe:f0:27:c0:15:db:7f:3a:1e: da:3d:46:7e:0a:d5:21:bd:1d:15:71:29:f8:be:42:51:a5:4a: ff:01:2a:0e:97:fe:34:fe:87:dc:a4:ae:b6:82:d6:cf:62:26: 51:ee:ce:17:29:da:a5:93:62:2c:37:8e:5e:6f:c2:63:70:44: fc:fc:3f:19:ad:e1:80:c5:a5:23:4d:e1:f0:16:3b:67:d4:60: d2:31:62:bc:28:06:1a:ac:cc:df:d3:e2:4e:76:4e:b4:55:f7: f4:4d:0f:b3:cc:36:e8:89:e2:6d:24:8b:80:f6:9a:12:8f:c5: 2e:06:84:b8:b5:ca:be:c5:04:d5:5b:9e:cc:76:95:f1:18:8f: 10:99:93:c4:0b:41:b0:86:c0:f1:3b:3f:ed:c8:da:7c:eb:e0: 69:f4:b8:20:49:69:1b:f3:96:f1:5b:fc:0c:29:a1:7d:fb:a4: e1:11:40:e6:48:3f:b5:6c:57:a8:28:82:b5:5c:2f:b7:0c:bd: c5:ee:a7:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gU5GwwDM3HodgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NTlmYTRiMjctZmIxYi00YWZlLWIyMjMtYWM2N2RiNWY5MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAretjOtDDMPc9iJcueTkN+VuHqcEv/OjqBtL0 w6KTJklJYu9EclQTcMGl3ymaL07fgJCck/Rtap+zyOZKyloRXpA4DQZKDLzn8CcE gQ32K7A7GznRdOae+cGly+M1PCbgbBD5LH3bB8SW1N019geByVcqOTLLvYNlp1NV YPU3j+R9iS130zJ795m020l3EavrPhtgGOA39a4YSAc5Ui/AVS7M+IcWZKMc4mi/ rFQD+9aFXbGC23hDuJdCDdCZHBfEjT/kL1OHjq3irQQsMJOlWVRxgzG+skCmwOZs uioEXEklQ/U5w5hzEi2LzZW0glRH/2RfZi6Eeba8au1ZTVjyLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUApTVDS8oRqtjGuWbQesXH7zREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjEwNDVlZmUtZDk1MS0z MDM3LThiNDYtNDg3MTA0OTQ3YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcWDg8LLwePPFLco8AR3ufzfpnnsAZH6ioPM9kIN7d95jnkcjjkopNS GtwdQ8dziC9NYeK4t+VSEWEFwzB6f/7wJ8AV2386Hto9Rn4K1SG9HRVxKfi+QlGl Sv8BKg6X/jT+h9ykrraC1s9iJlHuzhcp2qWTYiw3jl5vwmNwRPz8Pxmt4YDFpSNN 4fAWO2fUYNIxYrwoBhqszN/T4k52TrRV9/RND7PMNuiJ4m0ki4D2mhKPxS4GhLi1 yr7FBNVbnsx2lfEYjxCZk8QLQbCGwPE7P+3I2nzr4Gn0uCBJaRvzlvFb/AwpoX37 pOERQOZIP7VsV6gogrVcL7cMvcXup6M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:22 2025 by rpki-client