$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa File: 0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa (raw, json) Hash identifier: Vzk3g4obrXVH5XCPikQhrmM8W7Vz/wEyXtpfUiEIOZs= Subject key identifier: 32:C5:94:DC:C0:06:FA:AF:BF:20:AC:EB:AD:8B:0B:2E:D9:3D:84:23 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0A01B97426643BA95800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0a:01:b9:74:26:64:3b:a9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=c889a71d-5af7-459c-b5c4-0f08095dcafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:74:b1:c4:1f:a6:dd:34:5a:b0:e2:60:53:7c: d0:cf:2d:b7:da:65:a1:ee:1a:00:39:6c:e0:b0:21: 48:50:17:d5:d1:11:54:42:7b:12:c6:2d:a3:9e:e9: 28:b1:7f:eb:e9:6c:b1:80:f9:88:c4:76:8e:77:f8: 87:af:38:a2:03:c4:f0:04:b1:b7:9e:61:b5:a9:c2: 21:4a:6e:db:2a:f0:50:02:c5:d5:24:52:42:19:10: ac:cc:f3:4f:07:63:bf:4e:43:46:01:c5:3e:e7:56: df:3a:f6:0d:8d:ca:94:fe:27:a9:7e:85:6b:8d:18: 2e:b0:9f:fb:db:6f:35:02:d0:f2:2a:65:fb:97:c0: 06:05:90:5a:29:ad:ca:4f:be:84:c4:80:e3:81:81: 35:6f:57:3c:3d:02:5d:6d:1c:e6:73:47:a0:78:20: 60:8c:ca:b3:56:4f:ea:e7:58:de:a9:03:ae:72:f3: bc:c5:8b:d0:df:79:34:91:af:c5:71:8f:ea:50:16: 2e:bd:e9:df:5a:d4:38:9d:6a:7b:47:ef:47:ee:da: fa:28:90:a8:d5:6d:a3:0c:68:b0:40:ac:c9:c1:d2: ab:29:72:76:84:6e:93:07:65:69:5d:a3:b2:40:50: 8f:bf:69:a9:3d:07:73:fa:eb:b8:3e:c1:37:03:6f: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C5:94:DC:C0:06:FA:AF:BF:20:AC:EB:AD:8B:0B:2E:D9:3D:84:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:63:e1:86:68:14:c2:bd:7b:1d:58:94:a8:0f:bd:eb:1f:96: 33:cd:8e:26:6d:bc:47:c3:ba:20:b9:fb:6e:df:5d:46:90:4c: 58:a7:92:00:f3:b2:b3:10:36:e7:3d:b6:7d:5d:b7:ed:d8:19: f6:83:03:21:58:13:25:a7:e0:0c:20:5d:15:33:6a:aa:ed:3c: 8c:c1:b7:99:9d:f8:df:8d:00:7a:b0:b4:da:e4:67:76:97:51: 8d:3a:74:a5:ca:d6:1d:a6:80:92:5f:83:61:90:e1:06:da:02: 0c:98:ab:11:6b:3e:eb:b2:aa:6e:81:2b:37:ed:2f:ed:91:a1: 4d:44:24:7b:6d:98:83:fe:41:90:3b:84:f4:02:cb:50:a9:5b: da:c2:be:d3:09:2e:3b:7e:5a:68:0b:53:b7:ee:a8:a2:a2:17: e6:00:1a:da:31:a3:a6:6f:b9:4c:3d:e0:76:77:d2:89:49:8a: 43:b9:24:c5:ec:67:2d:27:00:28:9b:3c:9a:b8:82:d7:6d:c3: 3d:51:9b:ce:26:3b:8f:3c:ca:9c:f2:2f:9e:19:c2:d1:d5:a1: 50:79:07:12:92:84:1d:17:d9:ab:81:59:91:df:3f:11:85:5e: c7:df:7b:b4:79:97:53:b9:40:66:6c:6d:25:12:19:0a:2c:91: 49:98:92:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+goBuXQmZDupWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk Yzg4OWE3MWQtNWFmNy00NTljLWI1YzQtMGYwODA5NWRjYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHSxxB+m3TRasOJgU3zQzy232mWh7hoAOWzg sCFIUBfV0RFUQnsSxi2jnukosX/r6WyxgPmIxHaOd/iHrziiA8TwBLG3nmG1qcIh Sm7bKvBQAsXVJFJCGRCszPNPB2O/TkNGAcU+51bfOvYNjcqU/iepfoVrjRgusJ/7 2281AtDyKmX7l8AGBZBaKa3KT76ExIDjgYE1b1c8PQJdbRzmc0egeCBgjMqzVk/q 51jeqQOucvO8xYvQ33k0ka/FcY/qUBYuvenfWtQ4nWp7R+9H7tr6KJCo1W2jDGiw QKzJwdKrKXJ2hG6TB2VpXaOyQFCPv2mpPQdz+uu4PsE3A2928QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLFlNzABvqvvyCs662LCy7ZPYQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGQzYmI2YzAtNDI2ZC0z OWVlLWE1YmQtNTIyMDE0MGFhNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1j4YZoFMK9ex1YlKgPvesfljPNjiZtvEfDuiC5+27fXUaQTFinkgDz srMQNuc9tn1dt+3YGfaDAyFYEyWn4AwgXRUzaqrtPIzBt5md+N+NAHqwtNrkZ3aX UY06dKXK1h2mgJJfg2GQ4QbaAgyYqxFrPuuyqm6BKzftL+2RoU1EJHttmIP+QZA7 hPQCy1CpW9rCvtMJLjt+WmgLU7fuqKKiF+YAGtoxo6ZvuUw94HZ30olJikO5JMXs Zy0nACibPJq4gtdtwz1Rm84mO488ypzyL54ZwtHVoVB5BxKShB0X2auBWZHfPxGF Xsffe7R5l1O5QGZsbSUSGQoskUmYkls= -----END CERTIFICATE-----Generated at Sun May 4 11:09:44 2025 by rpki-client