$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa File: 4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa (raw, json) Hash identifier: 1eVkVc54+D7eII47wxxbRuivb9zHoX83NThtTy9H+xg= Subject key identifier: 52:8B:AB:7C:A1:45:6F:DD:66:53:95:D2:39:C5:A4:FF:12:69:F3:43 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F33717A03EFC6C90CD00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f3:37:17:a0:3e:fc:6c:90:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=2c567462-2004-42d3-bbcf-4ca320b521ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:b0:75:8b:46:53:48:6e:66:39:46:b2:ee: 28:53:25:d6:90:02:64:42:5c:d4:95:fd:9c:bc:9e: c0:b8:8e:d0:db:ee:06:ad:84:84:d3:b6:58:46:dc: bb:e1:bf:34:b9:97:e6:f0:29:84:34:9b:4a:1e:68: 06:ad:ec:d6:f5:24:3e:c4:30:9d:15:0a:c4:54:91: 31:97:d1:9a:1f:78:19:81:63:23:1b:50:f7:fd:c5: fb:f7:6d:77:87:29:fe:ec:66:68:bb:82:2c:0f:bd: ce:ed:bf:f9:55:f6:f1:8e:f6:28:02:50:e0:c0:0b: af:bf:08:ec:5b:ff:c0:19:69:2b:89:f3:fd:01:3f: 91:a7:5c:0a:fc:c5:9e:06:93:12:18:62:09:cd:e8: 41:4c:f6:92:65:e7:c6:6a:df:67:b2:58:ac:8c:7c: cb:45:6d:83:7a:e5:18:5d:dc:f3:a5:59:18:71:db: 19:97:c8:5c:10:19:0f:70:36:1b:57:29:17:df:69: 33:19:e2:40:66:00:61:85:d0:16:e9:08:65:b7:ce: fb:4d:a4:a8:8a:66:3b:32:bb:a4:59:cd:41:dc:c1: 58:66:15:73:79:73:d1:f8:14:ee:8c:dd:16:f3:37: ea:48:b2:7f:ea:3c:8b:c8:ff:9f:b6:46:5b:76:ab: ff:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:AB:7C:A1:45:6F:DD:66:53:95:D2:39:C5:A4:FF:12:69:F3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9f:23:92:91:31:59:16:62:e8:0a:e2:47:63:0e:d9:50:cc: ba:db:4b:3b:f0:b7:fc:47:ea:c3:c5:01:2f:6d:e8:74:74:49: ba:3a:e7:0e:7f:88:00:21:b6:69:d7:c9:eb:0a:d6:c9:41:e4: f4:74:3d:f4:a2:7c:76:09:4b:fd:b0:09:34:5a:fe:4e:09:de: 73:f9:42:9b:b3:64:50:5d:d7:a2:cc:0e:e8:85:5b:0a:79:a5: 86:c8:50:e2:bc:3f:a5:0f:91:79:42:74:65:41:a8:f1:e1:cd: 1c:c5:bc:25:42:19:c7:b1:48:e2:ce:d1:e9:ee:7c:c5:92:07: a3:17:a4:f7:6e:6e:e4:1e:a8:ac:fd:d2:ca:e5:fa:83:a6:a8: a5:66:6b:cc:42:5f:a7:6e:e0:05:e6:1e:85:6c:79:21:ba:9e: c8:90:16:ef:a7:7f:74:7c:bd:b8:25:85:e3:74:06:08:fc:ad: 87:67:d7:de:29:f9:ae:1f:4b:9f:29:82:62:a1:be:58:a8:1f: 5c:51:af:c6:66:91:74:96:72:ef:74:ec:65:c3:b6:84:76:46: 82:64:78:32:74:9d:ca:85:dd:39:3c:ca:2c:42:6b:6b:01:4f: ee:b0:21:f7:eb:79:70:6c:77:6f:6f:ca:07:d3:6d:c8:2f:1a: c4:49:53:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fM3F6A+/GyQzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MmM1Njc0NjItMjAwNC00MmQzLWJiY2YtNGNhMzIwYjUyMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnamwdYtGU0huZjlGsu4oUyXWkAJkQlzUlf2c vJ7AuI7Q2+4GrYSE07ZYRty74b80uZfm8CmENJtKHmgGrezW9SQ+xDCdFQrEVJEx l9GaH3gZgWMjG1D3/cX79213hyn+7GZou4IsD73O7b/5VfbxjvYoAlDgwAuvvwjs W//AGWkrifP9AT+Rp1wK/MWeBpMSGGIJzehBTPaSZefGat9nslisjHzLRW2DeuUY XdzzpVkYcdsZl8hcEBkPcDYbVykX32kzGeJAZgBhhdAW6Qhlt877TaSoimY7Mruk Wc1B3MFYZhVzeXPR+BTujN0W8zfqSLJ/6jyLyP+ftkZbdqv/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKLq3yhRW/dZlOV0jnFpP8SafNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGNiZDZjYmEtNzQxZi0z ZmY0LTgyZWYtNDBhYzcyMjQ5Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqfI5KRMVkWYugK4kdjDtlQzLrbSzvwt/xH6sPFAS9t6HR0Sbo65w5/ iAAhtmnXyesK1slB5PR0PfSifHYJS/2wCTRa/k4J3nP5QpuzZFBd16LMDuiFWwp5 pYbIUOK8P6UPkXlCdGVBqPHhzRzFvCVCGcexSOLO0enufMWSB6MXpPdubuQeqKz9 0srl+oOmqKVma8xCX6du4AXmHoVseSG6nsiQFu+nf3R8vbglheN0Bgj8rYdn194p +a4fS58pgmKhvlioH1xRr8ZmkXSWcu907GXDtoR2RoJkeDJ0ncqF3Tk8yixCa2sB T+6wIffreXBsd29vygfTbcgvGsRJU5g= -----END CERTIFICATE-----Generated at Sun May 4 19:25:05 2025 by rpki-client