$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa File: 35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa (raw, json) Hash identifier: dnDMA4se86iOWBg4LRCvsbhBimCJf2JfP6n3ZY3HKcc= Subject key identifier: 2A:5F:15:4C:42:BE:92:63:78:97:29:19:B6:5A:EA:25:69:A2:42:AE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9ECBB2467904CEC90C460 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ec:bb:24:67:90:4c:ec:90:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=125e2c18-1d5d-4882-ad45-ff581db1ff7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:bf:25:e3:2f:ad:45:77:b4:e7:98:e0:69: c1:6d:f2:2f:b9:9c:38:73:37:6f:ca:35:60:a8:6b: 2b:21:a0:2a:38:5d:c6:3f:99:92:0e:cf:05:66:42: da:6c:b7:8d:46:4e:57:f3:3e:f8:57:f5:65:3d:60: 91:f5:91:46:b6:2b:82:93:fc:b9:16:d2:16:d6:50: 0f:49:9a:a6:cf:03:d4:57:62:a9:47:22:44:d0:ec: bc:25:30:7f:76:2f:02:8a:b4:74:30:27:78:e7:82: 7b:5a:c4:cf:9a:4d:42:89:3f:93:34:29:23:c2:64: 64:6f:2b:fd:e7:b7:d2:03:09:34:f2:f6:8f:70:18: 07:aa:8c:5b:eb:04:92:cf:25:36:d9:a7:36:5b:b3: 91:e1:a2:15:7b:05:45:23:1f:24:cd:df:9e:85:cf: 88:28:ae:eb:bd:96:06:d2:3d:3c:06:73:2e:8c:fe: 7f:7b:87:12:b0:bd:c2:1b:a7:c5:1f:cf:54:5d:c0: d6:47:38:ec:8e:50:3e:f6:39:d1:df:da:d9:5c:0d: ee:e8:b4:9c:14:1b:0a:64:a5:3d:99:38:ba:07:4d: bb:c0:72:4e:37:aa:53:a3:66:38:c9:ae:36:98:a0: b4:0e:4e:93:76:9d:82:da:68:7f:e2:60:64:ba:37: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5F:15:4C:42:BE:92:63:78:97:29:19:B6:5A:EA:25:69:A2:42:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7e:27:fa:89:c1:e4:dc:5d:d9:5b:41:c7:3a:42:4c:d9:f2: d2:1c:97:87:26:ed:26:95:97:df:b6:e1:ab:ad:9f:ce:20:6e: da:f1:b6:b2:08:58:9e:23:f0:69:08:08:ff:c9:e6:5c:c0:82: 82:5d:5c:34:46:ad:50:df:c3:fc:da:aa:69:9d:3c:04:9f:2e: d2:97:36:8a:b6:a9:c7:7d:eb:eb:e6:e5:06:14:e3:07:01:fd: e5:44:d9:ee:52:c1:77:40:07:a3:62:ba:74:7d:43:b7:da:cd: e3:66:3b:eb:54:43:44:52:e1:ff:9b:93:8c:ad:c3:fe:f9:9c: 2a:fb:7b:e3:e4:82:90:6e:00:65:cd:d1:5f:aa:be:b2:92:93: 17:ee:14:c7:4a:53:b2:1a:17:2c:41:e4:f9:55:80:86:7e:8f: 61:8c:5e:96:2e:b2:d5:bc:a8:51:c5:0e:d7:72:f5:41:56:7e: f5:17:b7:e3:97:ca:be:ed:71:cb:33:29:91:19:b3:12:73:aa: 04:8e:65:e8:8b:10:04:97:92:61:a0:f8:46:78:48:77:73:ef: 85:16:f8:3e:59:84:69:2f:a1:a0:ca:74:f5:b5:ff:44:37:6b: 14:5c:a0:71:51:d3:ce:6e:2f:59:ad:8a:aa:ca:73:0f:04:b6: 15:1c:69:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+ey7JGeQTOyQxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MTI1ZTJjMTgtMWQ1ZC00ODgyLWFkNDUtZmY1ODFkYjFmZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu6/JeMvrUV3tOeY4GnBbfIvuZw4czdvyjVg qGsrIaAqOF3GP5mSDs8FZkLabLeNRk5X8z74V/VlPWCR9ZFGtiuCk/y5FtIW1lAP SZqmzwPUV2KpRyJE0Oy8JTB/di8CirR0MCd454J7WsTPmk1CiT+TNCkjwmRkbyv9 57fSAwk08vaPcBgHqoxb6wSSzyU22ac2W7OR4aIVewVFIx8kzd+ehc+IKK7rvZYG 0j08BnMujP5/e4cSsL3CG6fFH89UXcDWRzjsjlA+9jnR39rZXA3u6LScFBsKZKU9 mTi6B027wHJON6pTo2Y4ya42mKC0Dk6Tdp2C2mh/4mBkujfJyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpfFUxCvpJjeJcpGbZa6iVpokKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU5ODljOWEtZDE0ZS0z ZTNiLWE0YzgtN2E1OTEwNTVlYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl+J/qJweTcXdlbQcc6QkzZ8tIcl4cm7SaVl9+24autn84gbtrxtrII WJ4j8GkICP/J5lzAgoJdXDRGrVDfw/zaqmmdPASfLtKXNoq2qcd96+vm5QYU4wcB /eVE2e5SwXdAB6NiunR9Q7fazeNmO+tUQ0RS4f+bk4ytw/75nCr7e+PkgpBuAGXN 0V+qvrKSkxfuFMdKU7IaFyxB5PlVgIZ+j2GMXpYustW8qFHFDtdy9UFWfvUXt+OX yr7tccszKZEZsxJzqgSOZeiLEASXkmGg+EZ4SHdz74UW+D5ZhGkvoaDKdPW1/0Q3 axRcoHFR085uL1mtiqrKcw8EthUcaSM= -----END CERTIFICATE-----Generated at Sun May 4 20:49:35 2025 by rpki-client