$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa File: 47cc97f2-3c67-35da-93c6-4033da29eec6.roa (raw, json) Hash identifier: 2XMMvlLI6s+8lCSkakjvtS3gusBLza+T1gg+l+kNdHA= Subject key identifier: 5D:74:81:E4:6F:48:77:A0:F3:09:19:F2:18:9F:FE:BB:7B:19:34:0C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D60E6C95F637090501C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d6:0e:6c:95:f6:37:09:05:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=24cdb56f-e074-4edb-8b0a-c2190640ca27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c2:5f:c3:53:bc:af:6a:9c:a8:4b:17:29:85: a9:be:62:b3:99:e1:54:2d:c9:80:ab:b9:52:73:16: cd:1a:d7:0d:bf:ed:41:a8:e7:84:47:cb:b1:75:92: 2c:6f:bb:87:ad:53:6e:94:68:ee:2f:c3:12:c8:10: 8d:91:18:d9:0b:b4:85:52:78:d6:af:d8:fa:53:1f: f3:34:ae:0b:7e:86:f9:2e:06:a8:d2:1f:45:23:46: 16:e1:29:48:b1:72:ac:96:fe:5a:20:da:bc:9c:a8: e3:fc:65:d1:03:7e:a5:ab:3a:bd:7c:0e:de:bf:7a: ae:e3:f9:89:ba:30:f4:53:97:87:28:62:fe:1f:d9: c2:e5:6c:b8:33:b9:e0:49:c2:7d:70:a3:98:e9:51: ff:82:19:60:be:13:09:1f:60:d5:71:44:19:19:ef: d9:ae:fa:ee:08:61:a5:d0:82:8a:43:cb:fc:1c:97: 3e:a9:64:96:95:45:71:64:f7:00:68:76:e1:84:44: 13:9b:21:40:0b:13:be:ae:a1:d1:dd:e2:73:0d:44: 00:dc:40:fd:09:2c:82:8d:06:fa:33:20:df:1d:2c: a9:80:12:d4:5d:fe:b4:2e:5b:2d:19:ba:f4:f9:cf: ca:69:8e:69:74:5d:67:ec:92:1b:61:2d:9d:c7:fa: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:74:81:E4:6F:48:77:A0:F3:09:19:F2:18:9F:FE:BB:7B:19:34:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5e:aa:2c:f1:0e:a4:71:39:61:ab:1e:04:bb:fe:d6:c4:ea: a1:86:e2:8b:a8:d7:d8:78:23:bf:8d:39:bd:12:ce:15:fa:51: 02:db:8e:27:ce:e3:bb:4e:41:1b:94:89:48:33:ee:16:e3:02: b1:81:8b:c5:65:48:f3:c0:49:87:e6:7d:91:5d:6d:3b:2e:5e: a6:01:6b:37:1e:63:00:02:c3:b0:21:ad:67:f1:64:47:bd:c7: b2:53:4b:6e:32:fe:81:83:69:aa:45:bc:8a:0a:13:56:35:23: 17:bd:a4:34:bc:6a:7a:cf:bb:0d:f3:a2:7f:3d:18:6a:e4:c1: 66:2b:7e:2b:a0:1f:39:6b:ce:f2:ff:70:ee:50:33:64:d1:58: 05:0a:2b:6f:71:4b:1e:e7:73:33:ee:aa:79:a1:42:8d:00:6b: c9:11:b9:26:6f:72:53:51:08:e5:00:a2:ad:7e:ea:58:12:13: 53:df:df:b9:7f:0e:bc:02:b3:55:94:d9:c9:7a:2e:21:27:50: c1:9b:4d:fa:13:f5:64:f3:4d:5d:dc:6a:cd:ab:83:99:ea:f7: 08:c2:1d:e7:bb:bd:7d:0a:e0:1f:a9:5a:2a:2b:a1:ec:a9:45: ac:e4:94:72:52:02:76:0a:bc:71:91:90:d8:22:1d:04:63:5c: 92:5e:f4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNYObJX2NwkFAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MjRjZGI1NmYtZTA3NC00ZWRiLThiMGEtYzIxOTA2NDBjYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMJfw1O8r2qcqEsXKYWpvmKzmeFULcmAq7lS cxbNGtcNv+1BqOeER8uxdZIsb7uHrVNulGjuL8MSyBCNkRjZC7SFUnjWr9j6Ux/z NK4Lfob5Lgao0h9FI0YW4SlIsXKslv5aINq8nKjj/GXRA36lqzq9fA7ev3qu4/mJ ujD0U5eHKGL+H9nC5Wy4M7ngScJ9cKOY6VH/ghlgvhMJH2DVcUQZGe/ZrvruCGGl 0IKKQ8v8HJc+qWSWlUVxZPcAaHbhhEQTmyFACxO+rqHR3eJzDUQA3ED9CSyCjQb6 MyDfHSypgBLUXf60LlstGbr0+c/KaY5pdF1n7JIbYS2dx/onBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF10geRvSHeg8wkZ8hif/rt7GTQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDdjYzk3ZjItM2M2Ny0z NWRhLTkzYzYtNDAzM2RhMjllZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpeqizxDqRxOWGrHgS7/tbE6qGG4ouo19h4I7+NOb0SzhX6UQLbjifO 47tOQRuUiUgz7hbjArGBi8VlSPPASYfmfZFdbTsuXqYBazceYwACw7AhrWfxZEe9 x7JTS24y/oGDaapFvIoKE1Y1Ixe9pDS8anrPuw3zon89GGrkwWYrfiugHzlrzvL/ cO5QM2TRWAUKK29xSx7nczPuqnmhQo0Aa8kRuSZvclNRCOUAoq1+6lgSE1Pf37l/ DrwCs1WU2cl6LiEnUMGbTfoT9WTzTV3cas2rg5nq9wjCHee7vX0K4B+pWioroeyp RazklHJSAnYKvHGRkNgiHQRjXJJe9F0= -----END CERTIFICATE-----Generated at Sun May 4 10:44:02 2025 by rpki-client