$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa File: 6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa (raw, json) Hash identifier: vF1rWhfBKgDFV5O3JUfft4qOtzMjoIf5Wle/9h9qeF4= Subject key identifier: 2C:D6:4C:BC:F9:BA:E8:7B:39:EE:62:CE:FC:71:E7:BF:8D:B5:A7:42 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849BDDA36456D694EE068E0E1E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.133.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:36:45:6d:69:4e:e0:68:e0:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=8c50c1d2-0d8a-4fde-b27f-3ee871fb635c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:d6:b0:5f:ca:29:46:d4:03:a3:95:1d:7f: 58:62:e0:b8:e1:d3:9c:a1:07:3c:93:ed:fe:8d:4e: 65:13:37:76:e9:1d:cf:ed:ef:b8:92:ff:2b:0c:d7: c8:98:d5:09:5a:32:e7:70:24:cc:7a:59:06:ab:5b: 32:1b:c2:73:c6:67:07:cd:22:f4:ab:33:9d:3f:ea: 7c:72:f8:d3:a9:d7:1b:30:ab:3c:ea:05:a7:12:54: 88:33:79:8d:94:2a:eb:ab:46:45:35:0e:1d:90:a3: 53:f4:9b:bd:56:57:ef:5c:53:13:1b:0c:56:d6:c6: 81:4e:d9:e4:6d:2e:60:ba:d6:3c:a2:0f:98:ad:9a: 26:b7:3e:17:51:ea:4a:78:a2:dc:59:79:95:83:14: 9b:3c:0f:ac:b4:d9:e2:48:7c:76:e3:27:37:e7:37: cc:a4:a8:a8:b6:c5:d9:8c:28:4f:d5:2e:8e:ee:ac: b4:a9:6d:98:e8:1a:5a:38:db:33:bd:c5:7e:a5:40: ae:3a:66:6d:b6:78:1e:70:aa:22:1f:16:8a:a1:58: 32:0e:af:34:7e:1d:62:48:ff:ce:e1:ee:15:cf:e0: 53:14:2e:2a:81:c6:00:44:76:fb:e1:00:d5:72:d5: 16:b1:75:bc:b0:09:1c:19:1a:5a:7d:b0:57:7e:d2: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:4C:BC:F9:BA:E8:7B:39:EE:62:CE:FC:71:E7:BF:8D:B5:A7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b4:8d:d0:eb:53:de:67:95:42:7d:2d:1a:31:18:57:2d:10: ea:d2:a6:b0:bd:f9:e1:b4:10:e0:8e:88:da:9a:64:3f:f1:1b: d4:bb:51:cc:9c:3c:49:bb:38:79:19:97:25:f3:5e:00:be:3e: 27:95:d1:d7:dd:f4:12:14:a2:92:dc:8f:80:36:7b:82:5e:bb: 64:64:5a:a4:d0:1d:27:3b:c0:87:6f:ad:82:ed:b5:6f:8c:2e: 81:3d:3d:29:b7:72:79:12:54:86:ef:d8:c7:1d:0e:25:35:f6: d4:fa:5d:fd:86:7e:6b:25:1b:f3:9c:1e:55:c7:20:35:ed:68: 17:b1:1a:d6:98:55:e8:d7:fc:05:d3:8d:28:57:e4:a1:97:72: d2:79:f0:79:1f:ac:05:0f:ac:34:12:cb:5a:f4:09:9b:6e:02: db:c6:26:89:a9:c8:5c:79:47:64:51:a5:a4:3e:0d:36:0e:fb: 01:2d:00:7b:44:9e:9b:0a:65:5e:d1:21:25:c3:d8:2a:b4:09: 64:b1:98:ed:3d:52:18:c4:71:b4:34:62:10:63:3f:0d:66:6b: 87:17:31:76:43:07:cc:10:98:e1:4b:51:4d:58:de:d0:95:db: 9c:ef:52:e9:36:92:d4:ec:76:34:32:fe:34:87:c6:fb:d6:07: 98:79:e8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jZFbWlO4Gjg4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OGM1MGMxZDItMGQ4YS00ZmRlLWIyN2YtM2VlODcxZmI2MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWbWsF/KKUbUA6OVHX9YYuC44dOcoQc8k+3+ jU5lEzd26R3P7e+4kv8rDNfImNUJWjLncCTMelkGq1syG8JzxmcHzSL0qzOdP+p8 cvjTqdcbMKs86gWnElSIM3mNlCrrq0ZFNQ4dkKNT9Ju9VlfvXFMTGwxW1saBTtnk bS5gutY8og+YrZomtz4XUepKeKLcWXmVgxSbPA+stNniSHx24yc35zfMpKiotsXZ jChP1S6O7qy0qW2Y6BpaONszvcV+pUCuOmZttngecKoiHxaKoVgyDq80fh1iSP/O 4e4Vz+BTFC4qgcYARHb74QDVctUWsXW8sAkcGRpafbBXftIDcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzWTLz5uuh7Oe5izvxx57+NtadCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjEyM2RlYWMtNWM2Ny0z ZTZiLTkxZjMtZjI5YWVlZWJjN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW0jdDrU95nlUJ9LRoxGFctEOrSprC9+eG0EOCOiNqaZD/xG9S7Ucyc PEm7OHkZlyXzXgC+PieV0dfd9BIUopLcj4A2e4Jeu2RkWqTQHSc7wIdvrYLttW+M LoE9PSm3cnkSVIbv2McdDiU19tT6Xf2GfmslG/OcHlXHIDXtaBexGtaYVejX/AXT jShX5KGXctJ58HkfrAUPrDQSy1r0CZtuAtvGJompyFx5R2RRpaQ+DTYO+wEtAHtE npsKZV7RISXD2Cq0CWSxmO09UhjEcbQ0YhBjPw1ma4cXMXZDB8wQmOFLUU1Y3tCV 25zvUuk2ktTsdjQy/jSHxvvWB5h56MA= -----END CERTIFICATE-----Generated at Sun May 4 18:27:04 2025 by rpki-client