$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa File: 1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa (raw, json) Hash identifier: +GxkhH3L4/aV5NsJJnuNhFAxWQN7t5a4CVBT2ER44Rc= Subject key identifier: F4:1D:83:C9:0F:1A:28:09:40:95:4F:88:8E:4A:A5:70:91:8F:0E:F2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EFD9AE4BE777E8125500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ef:d9:ae:4b:e7:77:e8:12:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=73aca916-4b9b-48ce-9caa-585c90fc25a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:f3:9c:70:cf:f2:39:46:ad:66:30:21:df: 3e:3f:fd:fb:00:e6:f8:26:92:b1:a6:c3:7d:79:79: 48:cb:0e:cc:d4:d3:e3:6a:d9:c0:f6:4a:c7:9e:5b: 16:c3:6d:b1:c1:cc:51:d2:2f:53:e4:4a:74:16:ac: 64:d1:1d:25:49:9f:98:4a:9c:0f:3e:a1:f3:68:8d: 00:38:20:63:9b:a5:88:95:a7:fa:1e:3f:af:bc:34: ea:8e:c0:d2:22:2c:e4:b9:a3:bc:38:18:0e:d2:19: 45:3f:a6:2d:c0:dd:a7:a9:e4:f7:76:16:fe:c4:7b: f3:e9:c0:3b:b6:b0:25:7b:98:63:c4:46:02:87:fc: 9e:09:4d:bd:01:9a:78:5d:9a:9d:8f:63:78:e4:fd: 06:bd:83:ca:2f:fa:0c:d5:6e:50:b7:f7:78:ad:35: cb:26:78:74:85:6a:11:f9:69:24:7d:3f:a6:2d:ce: bc:54:09:83:8a:b8:fa:02:11:ce:45:82:fd:43:ce: 5e:99:8e:7e:2d:50:6a:e5:32:e6:b1:12:c2:3c:02: b6:f9:63:3a:96:05:7e:3c:38:5e:44:25:44:33:fb: 91:51:7d:ee:76:0c:b3:c0:68:10:94:37:f2:72:e9: c2:0e:07:75:b8:7c:e5:92:c3:d6:f7:35:54:fd:21: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1D:83:C9:0F:1A:28:09:40:95:4F:88:8E:4A:A5:70:91:8F:0E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bd:a2:3e:94:7a:29:1b:40:0d:d6:57:94:5b:f8:f0:c6:e1: 6e:bf:0c:dd:7a:94:ab:cf:b7:c1:c2:d8:cb:5d:70:56:22:a5: 29:bd:0d:f0:69:9b:df:fc:c3:8a:49:6c:a0:2e:18:06:5e:ed: 45:69:12:a7:41:1c:4a:84:81:7c:68:12:d7:cd:6d:0d:ae:8b: fa:b8:5a:6b:62:6d:62:21:8a:71:03:e2:23:7a:d4:8c:88:1a: a3:98:60:4a:b9:68:88:1c:30:b8:a0:ad:74:98:63:75:60:0d: e7:7d:d3:72:4e:ef:96:c3:66:59:65:63:9a:09:df:46:76:a5: 2a:a5:f5:0e:4a:72:a3:d2:d6:0d:e5:41:c3:d3:4e:e6:e5:32: 3b:ac:28:63:be:f9:66:21:57:fa:57:9f:a5:4e:56:05:8d:23: b6:19:83:15:e5:47:e1:87:df:ca:f2:11:ea:15:a5:d7:d1:11: 61:06:14:27:14:47:f2:f7:76:f3:91:9c:e5:53:cc:df:3a:f6: 61:82:05:bd:cc:01:6f:02:34:b8:b5:1d:15:c5:92:01:4c:90: 44:bf:17:a8:8d:be:d2:99:7c:24:7c:86:57:36:4d:c6:95:a1: 2b:d6:0f:6c:f6:a8:ac:da:1b:26:a1:dd:42:4a:61:dd:8b:58: f7:55:d0:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e/Zrkvnd+gSVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NzNhY2E5MTYtNGI5Yi00OGNlLTljYWEtNTg1YzkwZmMyNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ7znHDP8jlGrWYwId8+P/37AOb4JpKxpsN9 eXlIyw7M1NPjatnA9krHnlsWw22xwcxR0i9T5Ep0Fqxk0R0lSZ+YSpwPPqHzaI0A OCBjm6WIlaf6Hj+vvDTqjsDSIizkuaO8OBgO0hlFP6YtwN2nqeT3dhb+xHvz6cA7 trAle5hjxEYCh/yeCU29AZp4XZqdj2N45P0GvYPKL/oM1W5Qt/d4rTXLJnh0hWoR +WkkfT+mLc68VAmDirj6AhHORYL9Q85emY5+LVBq5TLmsRLCPAK2+WM6lgV+PDhe RCVEM/uRUX3udgyzwGgQlDfycunCDgd1uHzlksPW9zVU/SFspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQdg8kPGigJQJVPiI5KpXCRjw7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWRjYjJkZWItMDIzMS0z ZDUxLWE5OWUtMzI0MGQ2ZGRmMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO9oj6UeikbQA3WV5Rb+PDG4W6/DN16lKvPt8HC2MtdcFYipSm9DfBp m9/8w4pJbKAuGAZe7UVpEqdBHEqEgXxoEtfNbQ2ui/q4WmtibWIhinED4iN61IyI GqOYYEq5aIgcMLigrXSYY3VgDed903JO75bDZlllY5oJ30Z2pSql9Q5KcqPS1g3l QcPTTublMjusKGO++WYhV/pXn6VOVgWNI7YZgxXlR+GH38ryEeoVpdfREWEGFCcU R/L3dvORnOVTzN869mGCBb3MAW8CNLi1HRXFkgFMkES/F6iNvtKZfCR8hlc2TcaV oSvWD2z2qKzaGyah3UJKYd2LWPdV0M8= -----END CERTIFICATE-----Generated at Sun May 4 18:37:29 2025 by rpki-client