$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f8c217c-c32f-315e-9b94-8f131e58af8f.roa File: 6f8c217c-c32f-315e-9b94-8f131e58af8f.roa (raw, json) Hash identifier: m/mJ1FFG/np7/+oLmps443jw1FTGraN5y+Bf0R0YDp0= Subject key identifier: 47:4F:45:C0:99:41:57:F6:8D:AE:2C:03:E2:88:35:2E:25:07:1D:7E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24B0A63C466665EDC7FB80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f8c217c-c32f-315e-9b94-8f131e58af8f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b0:a6:3c:46:66:65:ed:c7:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=6c33060d-50d9-40cf-8e22-46f9b306bf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:97:be:6b:57:0b:75:ec:40:43:b7:3d:31: b0:94:92:f8:b3:43:c5:11:d3:f2:7f:1c:0b:e4:36: 47:85:5d:7c:b2:b9:a0:81:2a:6d:b3:cf:23:1f:19: 2a:ec:d8:98:82:3a:9b:5f:c2:ca:61:1d:bf:d2:b2: 82:1e:d3:61:02:aa:04:1a:17:c9:c0:90:2f:9f:9e: 9e:26:9b:cf:de:2b:5b:c6:7b:7a:da:25:ef:0e:df: 7f:f8:28:9e:d0:1c:e9:9f:1c:2c:5c:0d:69:e5:81: 00:de:85:e2:24:07:02:df:f6:cd:9b:65:33:ff:06: b2:2f:55:35:29:e8:ba:4f:b6:da:db:49:84:7a:a3: 42:55:4d:cd:c1:fa:f8:ab:c2:aa:8b:27:ff:d2:a0: 5b:ac:ae:0f:2a:83:a9:a2:7f:c1:a9:40:32:62:53: 58:aa:4c:b2:f5:e6:7a:5d:7a:05:74:17:89:f4:e0: 61:92:45:ab:38:1d:5d:ce:f7:e7:cc:27:19:2e:9c: 14:d7:28:1a:b9:88:fa:ad:59:84:d6:6c:82:51:a3: 36:de:44:c0:fc:1c:61:ae:81:fb:5a:85:d0:9a:de: 6e:bf:78:b9:91:c9:4c:39:44:9c:6c:93:a6:35:cb: e4:2d:94:bd:d2:bc:10:50:cd:0b:40:f4:ec:aa:25: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4F:45:C0:99:41:57:F6:8D:AE:2C:03:E2:88:35:2E:25:07:1D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f8c217c-c32f-315e-9b94-8f131e58af8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c2:45:e7:fa:8a:0a:a1:a1:d1:37:23:8a:f6:45:ee:d4:83: c5:58:a9:94:95:12:38:e8:2f:49:0b:92:3f:2b:7f:c0:7f:ab: b8:f2:d3:15:4c:22:4e:90:21:42:5a:eb:1b:d3:1c:bb:01:99: 84:eb:d3:9a:e5:0d:1d:dc:1a:72:42:30:fa:c8:0b:69:02:25: db:cf:f5:b0:cf:4e:1d:83:3f:a0:48:1e:0a:ed:54:6b:e7:0b: 16:44:4e:bf:b9:53:fb:81:b6:80:c7:54:65:24:8c:6f:e5:4b: 24:9e:76:ba:a4:92:e7:2d:c1:55:43:d6:fb:b7:98:f4:66:63: 0b:55:06:f8:76:c0:61:ea:8a:93:52:f3:3b:22:81:08:f2:27: c1:02:75:be:f0:e5:ed:aa:81:69:e4:94:d8:03:d5:ea:3d:3d: 9c:8c:f2:87:f5:25:51:49:45:ef:26:0d:00:6f:cf:17:50:e3: 43:20:ca:37:5b:77:db:f0:ec:30:dd:e1:15:d3:87:62:6c:1d: 9b:7a:50:75:02:b2:a8:21:f7:3a:2e:15:a2:d3:a9:e4:a1:8a: 99:71:3f:50:49:ac:c6:0d:9c:7b:d1:5a:e5:db:3b:43:04:64: 21:e0:ef:ff:13:34:4d:5c:cd:47:43:f1:99:a4:59:52:9d:23: 49:69:72:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLCmPEZmZe3H+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NmMzMzA2MGQtNTBkOS00MGNmLThlMjItNDZmOWIzMDZiZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroaXvmtXC3XsQEO3PTGwlJL4s0PFEdPyfxwL 5DZHhV18srmggSpts88jHxkq7NiYgjqbX8LKYR2/0rKCHtNhAqoEGhfJwJAvn56e JpvP3itbxnt62iXvDt9/+Cie0BzpnxwsXA1p5YEA3oXiJAcC3/bNm2Uz/wayL1U1 Kei6T7ba20mEeqNCVU3Nwfr4q8Kqiyf/0qBbrK4PKoOpon/BqUAyYlNYqkyy9eZ6 XXoFdBeJ9OBhkkWrOB1dzvfnzCcZLpwU1ygauYj6rVmE1myCUaM23kTA/BxhroH7 WoXQmt5uv3i5kclMOUScbJOmNcvkLZS90rwQUM0LQPTsqiUlEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdPRcCZQVf2ja4sA+KINS4lBx1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmY4YzIxN2MtYzMyZi0z MTVlLTliOTQtOGYxMzFlNThhZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjCRef6igqhodE3I4r2Re7Ug8VYqZSVEjjoL0kLkj8rf8B/q7jy0xVM Ik6QIUJa6xvTHLsBmYTr05rlDR3cGnJCMPrIC2kCJdvP9bDPTh2DP6BIHgrtVGvn CxZETr+5U/uBtoDHVGUkjG/lSySedrqkkuctwVVD1vu3mPRmYwtVBvh2wGHqipNS 8zsigQjyJ8ECdb7w5e2qgWnklNgD1eo9PZyM8of1JVFJRe8mDQBvzxdQ40Mgyjdb d9vw7DDd4RXTh2JsHZt6UHUCsqgh9zouFaLTqeShiplxP1BJrMYNnHvRWuXbO0ME ZCHg7/8TNE1czUdD8ZmkWVKdI0lpcj8= -----END CERTIFICATE-----Generated at Sun May 4 20:54:28 2025 by rpki-client