$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa File: 04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json) Hash identifier: Fi5xqO8LJebazeWIaqMyKXIuWK4Q69qq/X/ygw8M72g= Subject key identifier: A5:18:2D:DD:EA:F4:6C:09:A3:20:26:76:F2:18:B2:CF:09:23:51:ED Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA08C03F6E796EC3164100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:08:c0:3f:6e:79:6e:c3:16:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=739da69c-272a-40a8-b2c5-d53618002aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:64:d8:c1:28:73:fc:e0:6f:ba:d9:96:d0:f5: 34:da:9b:4e:9c:9b:06:0c:42:36:98:d0:50:a2:ae: 1e:fc:b9:94:9a:ab:09:c2:cd:2b:de:be:42:ec:cf: 8b:4e:39:19:4a:4c:51:fe:37:fb:81:9f:76:02:78: f2:20:58:b9:2b:45:fb:e2:32:80:29:b4:40:c7:31: 8f:7b:24:33:96:4e:73:3d:60:2a:88:ce:9a:32:c4: d0:ee:c5:7a:6b:86:0a:01:73:af:ea:7e:db:cf:a4: 5f:7d:2c:1b:b5:73:df:2b:1b:e4:06:cc:c3:5f:a6: 00:af:80:7a:d6:a6:11:56:05:02:aa:25:99:89:18: 44:2c:3b:99:dd:87:1c:87:fb:19:ef:0e:e5:68:cd: 74:1d:66:94:fa:6f:e9:c7:4a:5b:4c:29:f6:f1:65: 6a:49:7b:2a:64:e8:ad:4e:3b:f4:cb:ab:a2:c8:4c: a2:3f:c3:68:e8:75:a5:11:23:3b:0c:36:33:4f:b7: 79:ac:a2:65:91:1b:cb:c9:8e:99:6e:c0:b1:52:e6: 00:75:5f:4a:12:12:ba:83:b1:21:4d:88:88:81:be: 07:75:8f:33:c4:87:05:87:5e:99:e4:de:ab:46:fc: ea:74:85:97:d3:39:64:2a:fb:49:34:da:eb:3c:4f: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:2D:DD:EA:F4:6C:09:A3:20:26:76:F2:18:B2:CF:09:23:51:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6f:2c:23:7b:3f:b7:df:ac:be:c0:42:0c:61:72:27:ba:4a: 9d:17:4f:9a:66:22:eb:41:3b:de:26:9c:8b:f6:c8:e7:67:65: 48:bc:dd:60:d1:c7:77:54:83:28:7a:2f:88:84:79:71:bf:21: e7:76:42:35:fd:2a:cb:c1:6a:41:75:36:a0:8f:8f:07:ea:ff: a6:b2:0a:99:c0:fe:7e:3d:66:41:ae:3b:99:1d:71:41:08:1a: 59:90:87:b5:46:af:3c:24:f0:35:59:d2:73:a3:9a:85:f7:f8: 99:10:d2:4d:b0:d6:cc:ae:d8:63:bd:87:95:7d:bb:17:1c:af: aa:50:ba:ef:ae:69:34:91:92:43:3f:13:0a:97:bd:31:70:fc: 6d:6d:50:c3:24:53:09:a2:3a:4f:a9:c8:fb:c4:65:d6:13:42: f9:f2:8c:01:f4:28:b1:b3:e3:60:44:2a:00:f2:4b:51:1f:a8: 78:eb:9d:18:93:67:1d:1e:b4:fe:b5:4d:6d:19:1c:14:d5:1f: 2c:35:bf:53:06:c1:7a:ca:50:f7:91:a8:e0:a7:45:7f:93:f9: 92:da:72:63:a1:e7:4b:30:b6:82:33:fe:4f:c6:b1:62:81:7e: 79:1e:83:db:d5:e2:4d:9d:f3:50:2b:93:b2:01:ae:62:80:3e: a1:b1:9e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gjAP255bsMWQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NzM5ZGE2OWMtMjcyYS00MGE4LWIyYzUtZDUzNjE4MDAyYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmTYwShz/OBvutmW0PU02ptOnJsGDEI2mNBQ oq4e/LmUmqsJws0r3r5C7M+LTjkZSkxR/jf7gZ92AnjyIFi5K0X74jKAKbRAxzGP eyQzlk5zPWAqiM6aMsTQ7sV6a4YKAXOv6n7bz6RffSwbtXPfKxvkBszDX6YAr4B6 1qYRVgUCqiWZiRhELDuZ3Ycch/sZ7w7laM10HWaU+m/px0pbTCn28WVqSXsqZOit Tjv0y6uiyEyiP8No6HWlESM7DDYzT7d5rKJlkRvLyY6ZbsCxUuYAdV9KEhK6g7Eh TYiIgb4HdY8zxIcFh16Z5N6rRvzqdIWX0zlkKvtJNNrrPE8hRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUYLd3q9GwJoyAmdvIYss8JI1HtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRlNWE1ZGItM2ExOS0z MTYxLWIxODctN2FkNGNkODA4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhvLCN7P7ffrL7AQgxhcie6Sp0XT5pmIutBO94mnIv2yOdnZUi83WDR x3dUgyh6L4iEeXG/Ied2QjX9KsvBakF1NqCPjwfq/6ayCpnA/n49ZkGuO5kdcUEI GlmQh7VGrzwk8DVZ0nOjmoX3+JkQ0k2w1syu2GO9h5V9uxccr6pQuu+uaTSRkkM/ EwqXvTFw/G1tUMMkUwmiOk+pyPvEZdYTQvnyjAH0KLGz42BEKgDyS1EfqHjrnRiT Zx0etP61TW0ZHBTVHyw1v1MGwXrKUPeRqOCnRX+T+ZLacmOh50swtoIz/k/GsWKB fnkeg9vV4k2d81Ark7IBrmKAPqGxnj4= -----END CERTIFICATE-----Generated at Sun May 4 19:03:45 2025 by rpki-client