$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bc7d029-18fc-3b90-8127-4e2ca91ca812.roa File: 4bc7d029-18fc-3b90-8127-4e2ca91ca812.roa (raw, json) Hash identifier: qNYOuODFoZ1SJ4kUz0agY1qmt+1uILuVAxaC+FmahKw= Subject key identifier: 2C:7E:BD:80:EB:D0:EB:8A:E5:9E:C3:FE:80:5D:E1:55:64:F0:48:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24A70D6B7B15086C801C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bc7d029-18fc-3b90-8127-4e2ca91ca812.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 41264 IP address blocks: 104.134.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a7:0d:6b:7b:15:08:6c:80:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=f74113ce-64be-4e51-a749-4c9a30538777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:24:70:76:7e:c4:8c:ee:54:93:90:2f:9b: d4:66:d7:6d:bd:45:d2:2e:3d:f7:be:8e:53:21:bb: 3e:7e:49:0e:fd:a1:30:a3:15:f3:a4:f8:ea:dd:51: 08:a3:e5:5e:34:88:70:5b:84:fc:6c:97:ed:f8:ae: a6:80:27:80:3c:ac:dc:23:ad:7e:40:28:9a:31:91: b0:06:7e:40:36:1d:e5:a9:bb:fa:f3:16:51:b4:a0: ec:cc:b5:72:a7:26:4a:2e:e5:e4:0f:8c:df:7e:78: 89:e6:0a:40:2c:fd:21:a9:97:7c:1a:ca:b0:19:66: c2:b6:97:f6:24:5d:79:79:d7:a6:4a:10:f4:79:d6: 52:c9:fd:53:40:31:f5:27:be:ea:21:0b:c2:72:8f: 49:c9:c7:63:94:48:03:cb:35:85:aa:65:ff:4d:1f: cc:b4:3d:ef:b8:30:15:71:36:6f:9d:b6:18:c5:b3: 03:54:97:aa:41:0f:af:07:0f:89:43:64:90:11:d2: a3:01:d4:a3:5d:50:f7:a0:e2:dc:e6:28:74:66:a7: 8e:f0:8a:2d:11:c9:5c:eb:c8:00:b0:1d:da:3f:e3: 38:de:e0:2e:44:a6:a3:7d:e3:f8:75:a9:4c:1d:2f: 84:4e:b0:cb:26:f7:3d:df:51:35:40:f8:36:48:72: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7E:BD:80:EB:D0:EB:8A:E5:9E:C3:FE:80:5D:E1:55:64:F0:48:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bc7d029-18fc-3b90-8127-4e2ca91ca812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a9:44:ee:d1:a1:f6:85:b8:40:3d:b1:ca:e1:09:12:67:63: bd:69:73:64:29:bb:fa:a4:2d:91:e4:06:c4:3e:45:0e:65:96: e5:3c:22:62:9c:c6:70:b8:76:17:c7:d8:66:fc:93:dc:e3:a6: b0:e8:85:90:89:bd:42:2f:9d:5f:4f:10:3c:e5:0f:b5:7b:a0: 3f:b4:84:af:b9:8b:62:87:52:f3:a5:36:12:af:a7:5e:d4:a2: 44:2d:85:c8:09:28:08:b4:06:48:eb:dc:09:f1:f4:40:36:0b: aa:cf:e2:8a:3c:ca:63:d2:c6:a4:79:bb:de:a1:f7:46:f8:f6: 11:10:b3:a4:94:54:10:08:f4:43:3f:a5:8a:25:64:2c:5f:a3: aa:02:cb:c7:b4:0d:8a:cb:b6:d0:c0:b6:06:5a:0e:ae:c2:4d: a7:85:58:e8:d7:c7:2e:a3:ed:c9:36:d5:f1:8f:17:0b:ef:7a: 82:eb:14:04:31:32:ec:11:b7:b6:44:7c:47:65:04:c6:47:4c: c3:41:3a:84:40:e7:5c:1d:87:23:00:be:8c:83:61:29:9d:6b: bc:07:d9:e0:d4:ba:f6:fb:c6:6a:f8:8f:69:6f:0a:87:1b:43: 1c:49:91:95:d0:f8:cd:f3:14:2f:e9:a9:ea:da:40:c7:36:b4: 39:93:2a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKcNa3sVCGyAHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk Zjc0MTEzY2UtNjRiZS00ZTUxLWE3NDktNGM5YTMwNTM4Nzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszUkcHZ+xIzuVJOQL5vUZtdtvUXSLj33vo5T Ibs+fkkO/aEwoxXzpPjq3VEIo+VeNIhwW4T8bJft+K6mgCeAPKzcI61+QCiaMZGw Bn5ANh3lqbv68xZRtKDszLVypyZKLuXkD4zffniJ5gpALP0hqZd8GsqwGWbCtpf2 JF15edemShD0edZSyf1TQDH1J77qIQvCco9JycdjlEgDyzWFqmX/TR/MtD3vuDAV cTZvnbYYxbMDVJeqQQ+vBw+JQ2SQEdKjAdSjXVD3oOLc5ih0ZqeO8IotEclc68gA sB3aP+M43uAuRKajfeP4dalMHS+ETrDLJvc931E1QPg2SHKM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx+vYDr0OuK5Z7D/oBd4VVk8Ei7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGJjN2QwMjktMThmYy0z YjkwLTgxMjctNGUyY2E5MWNhODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJepRO7RofaFuEA9scrhCRJnY71pc2Qpu/qkLZHkBsQ+RQ5lluU8ImKc xnC4dhfH2Gb8k9zjprDohZCJvUIvnV9PEDzlD7V7oD+0hK+5i2KHUvOlNhKvp17U okQthcgJKAi0Bkjr3Anx9EA2C6rP4oo8ymPSxqR5u96h90b49hEQs6SUVBAI9EM/ pYolZCxfo6oCy8e0DYrLttDAtgZaDq7CTaeFWOjXxy6j7ck21fGPFwvveoLrFAQx MuwRt7ZEfEdlBMZHTMNBOoRA51wdhyMAvoyDYSmda7wH2eDUuvb7xmr4j2lvCocb QxxJkZXQ+M3zFC/pqeraQMc2tDmTKv8= -----END CERTIFICATE-----Generated at Sun May 4 18:33:41 2025 by rpki-client