$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa File: 5afeb378-224a-3c24-b822-69b5d1a03f18.roa (raw, json) Hash identifier: ThA7KC4KZeLbJTUnQTISxlwhrrnZj15p7ufFuBM1g2s= Subject key identifier: BB:A0:C3:73:08:C8:34:ED:8F:81:56:E9:A5:0A:9F:7C:7C:C3:98:94 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F84968FC78E1BBE8B540 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f8:49:68:fc:78:e1:bb:e8:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=704e1f2e-f520-4820-be3a-38bd169f3835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:8b:30:71:4a:1f:11:ab:75:70:cb:f0:37: db:ea:5b:c3:b9:3f:c2:54:39:c6:45:bf:cb:62:3c: 6e:f1:00:e8:4e:31:64:5d:c2:f7:55:c9:68:59:7a: 89:04:c6:35:82:c8:fa:2f:cf:e7:15:e5:30:93:1f: 08:61:db:d2:f5:0d:d2:4f:bb:c6:0e:ea:30:5b:14: cd:45:71:7e:6c:b6:27:24:aa:12:ba:87:e3:a3:96: 72:3f:1d:ed:4c:fb:3b:30:d7:23:4a:e1:ea:39:f1: e8:e6:70:ea:4b:30:72:8c:84:52:f2:1c:7f:7c:93: 35:67:6a:e1:9b:65:87:f0:a6:5a:98:6c:0d:ef:e8: a1:e9:79:75:a6:3d:51:f6:33:d2:7e:c7:6a:b2:f2: 56:ed:b4:4e:4b:7b:16:33:27:40:6f:53:df:50:9b: d6:e9:a9:8b:b2:51:61:e8:f1:df:53:8e:ff:a4:68: 93:2c:bc:d8:6b:a7:a5:da:b5:c1:d7:82:6d:be:1b: 8c:a2:8a:9a:a8:f6:27:a2:c0:01:90:d9:f2:22:1e: 97:2c:e9:1a:99:8c:f1:c8:3f:2e:24:b3:d8:4d:d2: c3:24:81:aa:93:29:5a:27:33:ff:a8:64:a8:ff:3f: 82:f1:b5:66:ef:ab:43:55:fe:69:cb:6c:78:bf:63: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A0:C3:73:08:C8:34:ED:8F:81:56:E9:A5:0A:9F:7C:7C:C3:98:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:72:d7:76:1d:fa:36:f7:8c:a4:ee:ae:5a:06:fa:86:6a:9f: 2c:6d:fb:dc:f7:52:60:a8:9e:c9:3e:8f:58:2b:4d:5d:7d:fd: 97:ac:cd:3e:15:13:aa:73:fb:a1:3e:be:cc:dc:fe:33:34:11: c9:f0:c6:26:50:23:6a:26:02:e3:9d:48:53:b0:19:b7:b1:57: 95:87:16:df:c6:92:2d:44:69:93:36:34:da:d8:2c:ad:4f:22: cf:c7:26:c8:31:fb:22:92:fc:39:b8:83:99:38:0b:a1:01:39: fd:23:01:38:5a:20:b1:97:2d:42:34:22:37:c4:79:58:86:1f: bc:15:a4:e0:7a:f8:71:d1:52:55:f7:cc:9a:72:d8:fc:48:a7: ef:62:fa:d3:1e:90:eb:32:e4:12:18:a4:73:ee:cd:0a:c4:6c: 6c:0d:85:fa:6e:19:f2:8c:86:0f:37:82:5f:2a:e8:fb:cb:a5: 6a:6b:e1:87:bf:a8:d1:2d:f5:b7:ad:18:d0:3f:0e:30:76:22: 56:39:e9:e6:19:27:c4:6a:35:dc:ef:5c:20:0e:ee:66:b7:51: b8:cd:60:e9:55:8c:bb:75:bf:1b:1d:7d:2f:54:d8:cc:6c:39: 1b:42:d1:3f:cc:cb:59:8e:ec:f3:3f:ee:06:cf:75:fa:e8:ab: 2d:87:ac:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fhJaPx44bvotUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NzA0ZTFmMmUtZjUyMC00ODIwLWJlM2EtMzhiZDE2OWYzODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurGLMHFKHxGrdXDL8Dfb6lvDuT/CVDnGRb/L Yjxu8QDoTjFkXcL3VcloWXqJBMY1gsj6L8/nFeUwkx8IYdvS9Q3ST7vGDuowWxTN RXF+bLYnJKoSuofjo5ZyPx3tTPs7MNcjSuHqOfHo5nDqSzByjIRS8hx/fJM1Z2rh m2WH8KZamGwN7+ih6Xl1pj1R9jPSfsdqsvJW7bROS3sWMydAb1PfUJvW6amLslFh 6PHfU47/pGiTLLzYa6el2rXB14JtvhuMooqaqPYnosABkNnyIh6XLOkamYzxyD8u JLPYTdLDJIGqkylaJzP/qGSo/z+C8bVm76tDVf5py2x4v2OatQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLugw3MIyDTtj4FW6aUKn3x8w5iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWFmZWIzNzgtMjI0YS0z YzI0LWI4MjItNjliNWQxYTAzZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVy13Yd+jb3jKTurloG+oZqnyxt+9z3UmConsk+j1grTV19/ZeszT4V E6pz+6E+vszc/jM0EcnwxiZQI2omAuOdSFOwGbexV5WHFt/Gki1EaZM2NNrYLK1P Is/HJsgx+yKS/Dm4g5k4C6EBOf0jAThaILGXLUI0IjfEeViGH7wVpOB6+HHRUlX3 zJpy2PxIp+9i+tMekOsy5BIYpHPuzQrEbGwNhfpuGfKMhg83gl8q6PvLpWpr4Ye/ qNEt9betGNA/DjB2IlY56eYZJ8RqNdzvXCAO7ma3UbjNYOlVjLt1vxsdfS9U2Mxs ORtC0T/My1mO7PM/7gbPdfroqy2HrMQ= -----END CERTIFICATE-----Generated at Sun May 4 19:40:49 2025 by rpki-client