$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/68ee8242-5fef-34f3-8460-1594b24c4864.roa File: 68ee8242-5fef-34f3-8460-1594b24c4864.roa (raw, json) Hash identifier: /cr8QORpoZT7SLeUbYu91++/XEd1MmKK9I/6kCynw00= Subject key identifier: 87:88:27:18:07:D6:6B:E8:DA:35:16:ED:01:70:51:9B:3F:03:09:A0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E649952B1C7305B8878E400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/68ee8242-5fef-34f3-8460-1594b24c4864.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:99:52:b1:c7:30:5b:88:78:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=656961bc-d5f9-4dbc-a1b3-fb3e0870a225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:45:fc:5b:88:f6:8a:e5:53:8d:d8:69:66: 61:e7:8d:88:46:7e:d0:fe:97:72:b7:45:ba:4b:ec: 8f:4c:7a:80:3c:1d:4a:55:04:ae:33:e1:35:3b:43: 97:5c:dd:7d:45:30:8d:ae:b7:af:47:14:23:11:61: e4:94:73:7c:e7:00:7f:29:8a:bf:d2:65:04:41:c9: 42:b4:11:be:7a:05:4b:3c:11:ec:0a:f5:15:34:aa: 61:1b:5a:fb:f5:de:54:75:0a:c8:77:ec:b3:6f:20: dd:f9:21:28:65:bb:3d:bb:98:a3:47:e9:22:7d:ee: d7:f0:ab:f4:cd:64:f7:11:dd:13:e9:d5:fc:52:57: 72:fe:dd:d4:dd:5e:6b:a8:d1:e3:3c:3b:ba:79:d2: 7f:2c:4b:a5:50:c0:d1:75:2c:2b:57:6f:ea:09:b1: 6d:34:b3:e0:f6:ee:cf:a8:d2:12:c0:05:f2:2a:b0: ba:c5:72:2e:d8:89:30:c4:18:9f:fa:85:eb:4f:35: fe:03:a2:67:e1:9e:4c:56:75:02:2a:02:f6:07:ef: 08:3b:6c:64:0a:76:74:33:3e:e3:14:4b:30:e6:eb: ea:fb:e8:48:61:4b:bd:27:0b:eb:1d:57:f6:7d:c9: 49:4b:94:4e:35:13:53:7b:b6:a4:79:98:62:c0:2b: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:88:27:18:07:D6:6B:E8:DA:35:16:ED:01:70:51:9B:3F:03:09:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/68ee8242-5fef-34f3-8460-1594b24c4864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:56:b9:cf:54:03:88:4a:26:4f:82:a5:2a:d0:6a:de:1f:6b: df:ef:74:7e:b6:b0:0f:27:a5:49:9c:cf:1a:9c:7d:a3:99:b4: a2:09:8a:cd:72:ad:05:11:02:2c:bd:1b:de:cf:5b:d6:2f:eb: d7:51:a9:0d:29:0c:b2:ab:a0:83:7d:9c:0b:83:7c:e1:32:e4: 85:cd:bf:b8:d8:45:c0:d0:6f:79:c2:ae:a9:dc:5e:7d:b6:80: 74:f5:5f:43:b3:4a:94:74:07:22:7d:a3:31:ba:21:31:3f:0c: a6:87:3e:85:b5:70:51:13:55:b5:48:29:37:e3:d2:46:41:b7: d6:31:8a:fe:06:37:c0:6f:ea:97:56:89:39:9e:f9:96:01:50: 96:c0:10:5a:aa:16:f9:73:2a:24:84:7b:92:2d:b2:87:7f:2a: a6:00:fe:5b:c7:3b:53:c0:68:45:66:68:7b:c1:17:1e:ce:a3: d7:26:ad:85:87:07:cf:8e:18:d7:86:28:3e:f1:14:48:50:47: e8:38:eb:6f:8b:ae:77:19:38:32:80:ff:1c:e5:fe:b8:5a:e7: 45:5f:8c:85:9f:0f:07:d1:71:14:00:aa:51:7a:a1:df:b7:2a: 5c:ef:5f:dc:dc:80:eb:c2:c5:5f:80:3b:e7:76:27:b7:01:2f: 84:d4:3b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJlSsccwW4h45AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NjU2OTYxYmMtZDVmOS00ZGJjLWExYjMtZmIzZTA4NzBhMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCNF/FuI9orlU43YaWZh542IRn7Q/pdyt0W6 S+yPTHqAPB1KVQSuM+E1O0OXXN19RTCNrrevRxQjEWHklHN85wB/KYq/0mUEQclC tBG+egVLPBHsCvUVNKphG1r79d5UdQrId+yzbyDd+SEoZbs9u5ijR+kife7X8Kv0 zWT3Ed0T6dX8Uldy/t3U3V5rqNHjPDu6edJ/LEulUMDRdSwrV2/qCbFtNLPg9u7P qNISwAXyKrC6xXIu2IkwxBif+oXrTzX+A6Jn4Z5MVnUCKgL2B+8IO2xkCnZ0Mz7j FEsw5uvq++hIYUu9JwvrHVf2fclJS5RONRNTe7akeZhiwCt42wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeIJxgH1mvo2jUW7QFwUZs/AwmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjhlZTgyNDItNWZlZi0z NGYzLTg0NjAtMTU5NGIyNGM0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJWuc9UA4hKJk+CpSrQat4fa9/vdH62sA8npUmczxqcfaOZtKIJis1y rQURAiy9G97PW9Yv69dRqQ0pDLKroIN9nAuDfOEy5IXNv7jYRcDQb3nCrqncXn22 gHT1X0OzSpR0ByJ9ozG6ITE/DKaHPoW1cFETVbVIKTfj0kZBt9Yxiv4GN8Bv6pdW iTme+ZYBUJbAEFqqFvlzKiSEe5Itsod/KqYA/lvHO1PAaEVmaHvBFx7Oo9cmrYWH B8+OGNeGKD7xFEhQR+g462+LrncZODKA/xzl/rha50VfjIWfDwfRcRQAqlF6od+3 KlzvX9zcgOvCxV+AO+d2J7cBL4TUO24= -----END CERTIFICATE-----Generated at Sun May 4 20:05:12 2025 by rpki-client