$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa File: 201dc264-73e9-3451-a68e-1cafec19dd3f.roa (raw, json) Hash identifier: 4dYOBlcU5TpuuPVWzLh7U5XxuDiyWLyJdTsREGNUbvc= Subject key identifier: A2:5D:46:6A:7B:BB:AE:B9:5E:BE:92:12:FA:FC:1A:DB:35:AD:0C:C7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F8FF048FE87F0AE4FA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f8:ff:04:8f:e8:7f:0a:e4:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=9c7b45f7-860d-4a96-aa68-7e9ce48ddd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:65:af:4c:e9:b5:2d:8e:2e:d9:8a:9e:6d: c5:ca:dd:23:1f:9d:7f:fc:02:12:0e:60:26:07:d5: 27:98:07:65:bf:00:63:8e:19:fc:4c:73:c5:6b:5a: ab:86:7e:26:6a:79:ba:7b:03:86:13:04:c5:08:19: 66:be:20:e3:92:d3:a2:c4:b6:44:0b:ea:16:a3:38: 5d:44:46:f5:09:25:33:00:45:1c:7a:d7:ad:10:22: d4:11:72:cf:bd:7c:c0:11:e0:d9:b0:14:17:05:eb: 22:43:67:4e:b2:ab:e1:a7:5a:d2:68:73:87:44:20: f6:9b:6b:5e:a5:32:ba:4a:e0:1e:54:e4:0b:b5:f9: 2c:16:84:00:45:21:0a:92:bd:5f:df:74:f2:d4:61: 33:44:d8:28:cd:61:05:59:0a:b6:71:af:f1:a2:ac: 48:37:d0:7f:46:dc:d8:0a:3a:53:e0:5f:0d:e1:5c: b9:4d:4c:2f:00:63:9b:af:8a:1d:a8:b4:29:2f:ae: 39:d8:20:9b:7a:3e:25:30:85:33:be:66:61:56:0f: 2c:46:2b:ab:1a:aa:45:0b:82:97:70:59:d9:c3:3a: 0a:7c:f2:1c:54:18:62:02:0c:27:4a:6a:d2:77:03: 06:d0:3f:d5:c5:2e:22:f4:08:5c:c9:ab:4e:f6:d6: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:46:6A:7B:BB:AE:B9:5E:BE:92:12:FA:FC:1A:DB:35:AD:0C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a4:20:5b:ea:02:f4:09:03:e8:79:c6:b9:5b:45:d8:7a:24: cb:95:e2:b9:26:1d:44:a7:57:a7:81:f9:38:af:bd:2d:71:58: ba:ab:17:0f:71:66:31:ef:a3:34:53:e7:c0:11:e9:28:18:19: d8:ba:2a:e7:f3:6c:91:a0:1e:1e:21:ef:bc:94:b0:de:9e:14: 48:9b:1f:4c:fa:4c:2b:40:42:b7:7c:ac:88:10:f2:c5:51:37: 3b:96:97:10:ab:85:70:be:5e:3e:b8:5e:1b:76:18:a7:8a:d0: c6:05:52:7d:b8:5e:2a:7a:70:85:75:9f:f6:34:77:d2:8a:0d: 89:2a:09:7e:58:67:db:af:e9:41:42:11:e8:96:79:fa:f8:f4: ba:e4:6b:15:3f:7a:e2:13:f6:e3:38:37:78:ba:60:01:6e:ea: 78:33:b1:a5:b1:eb:18:43:76:f2:a0:19:b9:47:3c:b2:63:f7: d1:97:44:ef:eb:95:2b:f0:22:ee:5a:66:77:4e:21:e1:b0:1d: 0f:a5:7f:63:1b:82:60:e2:10:fc:a0:47:e2:66:bb:ef:0f:72: 9d:36:fa:af:fd:48:d8:c9:a0:42:98:58:0b:ad:7b:bd:60:ff: e5:54:aa:54:bc:e1:f7:05:c4:1f:75:d2:9f:a1:23:ee:e0:62: 31:0e:e5:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fj/BI/ofwrk+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk OWM3YjQ1ZjctODYwZC00YTk2LWFhNjgtN2U5Y2U0OGRkZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOxlr0zptS2OLtmKnm3Fyt0jH51//AISDmAm B9UnmAdlvwBjjhn8THPFa1qrhn4manm6ewOGEwTFCBlmviDjktOixLZEC+oWozhd REb1CSUzAEUcetetECLUEXLPvXzAEeDZsBQXBesiQ2dOsqvhp1rSaHOHRCD2m2te pTK6SuAeVOQLtfksFoQARSEKkr1f33Ty1GEzRNgozWEFWQq2ca/xoqxIN9B/RtzY CjpT4F8N4Vy5TUwvAGObr4odqLQpL6452CCbej4lMIUzvmZhVg8sRiurGqpFC4KX cFnZwzoKfPIcVBhiAgwnSmrSdwMG0D/VxS4i9AhcyatO9tZPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJdRmp7u665Xr6SEvr8Gts1rQzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjAxZGMyNjQtNzNlOS0z NDUxLWE2OGUtMWNhZmVjMTlkZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFekIFvqAvQJA+h5xrlbRdh6JMuV4rkmHUSnV6eB+TivvS1xWLqrFw9x ZjHvozRT58AR6SgYGdi6KufzbJGgHh4h77yUsN6eFEibH0z6TCtAQrd8rIgQ8sVR NzuWlxCrhXC+Xj64Xht2GKeK0MYFUn24Xip6cIV1n/Y0d9KKDYkqCX5YZ9uv6UFC EeiWefr49LrkaxU/euIT9uM4N3i6YAFu6ngzsaWx6xhDdvKgGblHPLJj99GXRO/r lSvwIu5aZndOIeGwHQ+lf2MbgmDiEPygR+Jmu+8Pcp02+q/9SNjJoEKYWAute71g /+VUqlS84fcFxB910p+hI+7gYjEO5Sw= -----END CERTIFICATE-----Generated at Sun May 4 18:26:17 2025 by rpki-client