$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa File: 2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa (raw, json) Hash identifier: pXxIaDUlSt7HagFfkI2DDYxej1cEbklRJBSrApt8V+g= Subject key identifier: 6A:A9:41:71:42:65:73:88:73:64:48:69:5A:C5:53:B4:9C:F9:CA:6B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9ECAB7282A77B6224F880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ec:ab:72:82:a7:7b:62:24:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=2d4e8059-9e50-482b-8d4a-3914c206891e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:06:a4:71:e6:ae:9c:5d:96:10:3a:0d:ab: 11:21:6d:3f:01:be:64:5c:a6:e7:88:f0:6a:88:47: 64:6b:cc:1f:9d:56:7a:73:c7:41:34:a5:de:29:ca: f5:25:81:22:0d:c7:05:8d:55:da:be:bf:3e:5a:86: 48:a9:ae:6a:a3:d0:83:c6:f4:04:f8:d2:23:64:08: 28:58:3b:10:04:40:5d:3b:7e:5b:c2:c0:5d:aa:72: 21:41:e8:08:22:4e:72:93:cb:72:99:64:41:d2:78: 36:b6:a7:c7:24:64:3f:fd:0f:eb:a0:37:ba:ba:26: 17:db:56:89:a5:7b:6b:1b:ae:f4:8f:a1:67:77:b9: 3d:46:08:00:20:2f:d9:e9:f5:57:d3:a0:5f:2a:f5: ca:bd:a8:31:c5:72:08:fa:2b:2f:d9:f6:f3:56:b4: eb:4f:0f:6c:ec:77:94:33:b8:00:b4:6d:d2:65:93: 2e:c4:d7:75:37:7c:bb:3f:0d:27:97:02:cf:47:97: 8a:06:5e:eb:89:ed:22:28:b2:fd:5a:80:e5:93:22: c6:ac:21:28:47:eb:d0:17:4a:28:e9:22:f5:77:53: 0f:e2:e1:55:f1:d8:be:8d:3b:70:d8:d3:fd:09:f1: 3e:97:c1:92:83:85:22:fe:04:12:de:eb:f6:2f:c5: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A9:41:71:42:65:73:88:73:64:48:69:5A:C5:53:B4:9C:F9:CA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c5:41:22:69:9a:a8:28:ca:9b:99:f2:0c:fb:1f:08:d0:7f: b3:39:46:71:5c:5e:90:6a:10:72:84:8e:54:b4:a0:7b:fb:fa: 6f:37:7a:c9:b0:3f:5b:01:21:1d:6c:1d:a4:a5:66:b9:8e:a2: 23:d8:df:6e:76:9e:81:32:e3:74:5b:c2:75:3a:cc:b5:4a:18: aa:0a:96:df:f5:92:6b:f2:05:07:f1:7d:f0:f6:bb:bf:2a:5a: b3:15:4a:80:82:39:92:68:45:52:0e:b9:9f:f6:84:71:ad:ca: 43:2f:7b:a9:e3:da:55:84:db:83:5c:99:84:88:dc:fa:42:7c: b5:44:7c:46:bb:94:22:9d:bf:ab:de:5a:a2:d7:65:64:3f:c6: 79:cf:73:ad:15:be:83:8b:ad:ab:07:f5:f1:45:4f:67:97:00: af:fc:84:0f:71:6d:6e:b9:8b:6d:8c:ee:7a:e3:46:82:0c:1c: 14:eb:2c:ae:b9:88:2e:f1:cb:f7:a6:f4:cf:c3:32:58:8e:97: 03:c9:72:da:c5:e0:f5:a2:6d:58:8e:b6:f1:36:c4:fd:c2:5c: ce:35:99:c7:29:4c:98:be:17:45:5a:3c:b0:d8:84:88:ca:e1: 71:67:70:1e:44:6f:61:64:87:10:3f:c8:87:e7:44:39:93:b0: 7b:1e:3f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eyrcoKne2Ik+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MmQ0ZTgwNTktOWU1MC00ODJiLThkNGEtMzkxNGMyMDY4OTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPsGpHHmrpxdlhA6DasRIW0/Ab5kXKbniPBq iEdka8wfnVZ6c8dBNKXeKcr1JYEiDccFjVXavr8+WoZIqa5qo9CDxvQE+NIjZAgo WDsQBEBdO35bwsBdqnIhQegIIk5yk8tymWRB0ng2tqfHJGQ//Q/roDe6uiYX21aJ pXtrG670j6Fnd7k9RggAIC/Z6fVX06BfKvXKvagxxXII+isv2fbzVrTrTw9s7HeU M7gAtG3SZZMuxNd1N3y7Pw0nlwLPR5eKBl7rie0iKLL9WoDlkyLGrCEoR+vQF0oo 6SL1d1MP4uFV8di+jTtw2NP9CfE+l8GSg4Ui/gQS3uv2L8WGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqpQXFCZXOIc2RIaVrFU7Sc+cprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmJkOGQ2NjUtZWI2ZC0z YWQwLWI4ZDktOGEzNzUwMDM2MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHFQSJpmqgoypuZ8gz7HwjQf7M5RnFcXpBqEHKEjlS0oHv7+m83esmw P1sBIR1sHaSlZrmOoiPY3252noEy43RbwnU6zLVKGKoKlt/1kmvyBQfxffD2u78q WrMVSoCCOZJoRVIOuZ/2hHGtykMve6nj2lWE24NcmYSI3PpCfLVEfEa7lCKdv6ve WqLXZWQ/xnnPc60VvoOLrasH9fFFT2eXAK/8hA9xbW65i22M7nrjRoIMHBTrLK65 iC7xy/em9M/DMliOlwPJctrF4PWibViOtvE2xP3CXM41mccpTJi+F0VaPLDYhIjK 4XFncB5Eb2FkhxA/yIfnRDmTsHseP6A= -----END CERTIFICATE-----Generated at Sun May 4 19:13:17 2025 by rpki-client