$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f19d71b2-fd55-3e3d-8749-3d1f6ccc4206.roa File: f19d71b2-fd55-3e3d-8749-3d1f6ccc4206.roa (raw, json) Hash identifier: 2Sje2cfry9wx3yHSAgZZHduKCpdVvIGtVUh2oQlpKqU= Subject key identifier: B7:FC:DF:8E:14:86:9B:AE:5F:06:7C:8E:A8:38:6C:74:FE:68:4D:E8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F5FDBDF0460144B9E024 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f19d71b2-fd55-3e3d-8749-3d1f6ccc4206.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f5:fd:bd:f0:46:01:44:b9:e0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=7c42ef39-dce5-4dc2-ac64-6f758936d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7f:63:b9:9d:b3:25:93:11:db:24:9f:a6:ba: 27:72:b8:b1:24:d8:cb:21:c0:b2:61:72:1a:eb:61: 2a:10:65:0f:3e:01:bb:de:6f:6e:56:fe:08:f3:da: 73:e7:c4:41:8f:9c:bc:43:c0:f9:cd:2a:da:72:7a: 32:9d:4a:8c:7f:f8:23:2e:af:2c:38:8b:75:cd:f3: cf:b9:d4:fe:a9:96:04:e8:2f:4d:9d:e6:67:08:2a: 80:70:16:f9:1f:9c:ba:63:ba:91:85:27:6e:9f:2b: 7c:81:77:0f:f7:d5:e9:3a:1b:80:7a:0d:f5:80:c4: f3:21:fb:bb:62:26:1e:12:fd:5d:6a:43:0e:cf:ea: f6:81:40:ec:9c:3d:5f:39:e0:d1:08:09:9d:72:58: 19:4b:31:85:50:39:52:ca:00:7d:ec:0c:ae:df:ed: 13:7e:28:c8:a9:4f:0b:b6:09:29:b6:ca:14:f8:72: d3:04:b6:09:1d:67:41:0c:bf:f9:53:33:2e:ae:44: 44:06:f1:f2:ad:6e:4b:13:8b:29:7a:85:00:57:7e: d1:57:8e:91:ef:fb:04:25:4b:9f:c5:87:a5:43:93: b0:0c:45:de:be:d6:14:ab:56:8c:64:31:ba:9d:26: 9d:bd:b1:f7:28:f1:da:49:82:41:4d:68:8f:02:84: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FC:DF:8E:14:86:9B:AE:5F:06:7C:8E:A8:38:6C:74:FE:68:4D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f19d71b2-fd55-3e3d-8749-3d1f6ccc4206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6f:5e:f2:ad:11:eb:2e:5d:dd:38:d9:c7:8f:7a:30:84:e4: 73:06:e9:dd:0b:16:1f:de:5f:be:99:da:e6:17:e5:b0:5e:98: bb:70:4a:f9:6b:1e:30:e1:63:45:49:8a:7f:7f:b8:db:9b:35: 1b:00:48:dd:31:dd:9b:c1:b6:fd:32:e0:44:19:0b:b7:2b:d6: 0c:97:aa:f4:4c:e8:47:cb:b6:3a:f5:00:f3:8c:81:83:19:d7: db:1e:34:f3:2e:07:0f:5c:66:dd:39:a8:7d:ac:4f:e3:b0:85: 57:5e:1f:b5:06:73:65:7d:7b:f5:38:5b:a1:a8:7f:a7:01:d2: a2:f5:17:ee:72:94:a0:3b:79:75:cf:96:c3:42:9f:f4:c1:7f: a7:dd:b1:77:34:83:d9:99:55:bc:b2:40:c7:3f:c7:77:1f:d0: 88:56:00:71:a7:28:d9:3b:a1:2b:c9:2f:4d:29:66:80:b1:be: 1f:4f:d2:6d:c9:3c:28:a5:23:72:5a:ac:8a:22:81:49:a7:ab: 26:f4:85:b1:a1:06:e4:90:88:6b:d2:b1:6e:c8:3c:95:46:47: e0:9f:91:51:a8:1a:d1:47:80:fb:f2:d9:5a:bf:79:af:72:8f: 91:40:92:d2:12:a4:a4:d1:2d:21:ad:31:9e:e1:2a:18:68:3a: f6:a6:7d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fX9vfBGAUS54CQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk N2M0MmVmMzktZGNlNS00ZGMyLWFjNjQtNmY3NTg5MzZkNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH9juZ2zJZMR2ySfproncrixJNjLIcCyYXIa 62EqEGUPPgG73m9uVv4I89pz58RBj5y8Q8D5zSracnoynUqMf/gjLq8sOIt1zfPP udT+qZYE6C9NneZnCCqAcBb5H5y6Y7qRhSdunyt8gXcP99XpOhuAeg31gMTzIfu7 YiYeEv1dakMOz+r2gUDsnD1fOeDRCAmdclgZSzGFUDlSygB97Ayu3+0TfijIqU8L tgkptsoU+HLTBLYJHWdBDL/5UzMurkREBvHyrW5LE4speoUAV37RV46R7/sEJUuf xYelQ5OwDEXevtYUq1aMZDG6nSadvbH3KPHaSYJBTWiPAoQmeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf8344UhpuuXwZ8jqg4bHT+aE3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjE5ZDcxYjItZmQ1NS0z ZTNkLTg3NDktM2QxZjZjY2M0MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdvXvKtEesuXd042cePejCE5HMG6d0LFh/eX76Z2uYX5bBemLtwSvlr HjDhY0VJin9/uNubNRsASN0x3ZvBtv0y4EQZC7cr1gyXqvRM6EfLtjr1APOMgYMZ 19seNPMuBw9cZt05qH2sT+OwhVdeH7UGc2V9e/U4W6Gof6cB0qL1F+5ylKA7eXXP lsNCn/TBf6fdsXc0g9mZVbyyQMc/x3cf0IhWAHGnKNk7oSvJL00pZoCxvh9P0m3J PCilI3JarIoigUmnqyb0hbGhBuSQiGvSsW7IPJVGR+CfkVGoGtFHgPvy2Vq/ea9y j5FAktISpKTRLSGtMZ7hKhhoOvamfcc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:34:28 2025 by rpki-client