$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa File: 8247a5ea-22ad-3fea-afa9-0b471461850c.roa (raw, json) Hash identifier: 3CmfHOo4kzNXthdb72845LYXw2G5CqrcOyajRKlGnDw= Subject key identifier: 23:47:9B:C8:62:06:44:24:AC:34:2F:59:7B:1A:8E:E7:38:14:96:06 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA08DCFB4FA8391B204880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:08:dc:fb:4f:a8:39:1b:20:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=1ae74219-05a3-4b87-945f-dc22be3f956b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:fc:41:55:41:de:9e:31:a0:c0:19:97:3c: 2c:a7:22:ed:c2:af:fb:9e:9a:c5:68:b1:5f:7a:e2: 50:79:e5:85:6f:8d:dd:33:d4:c4:b3:fe:c6:8f:ff: 1d:16:f6:53:77:d1:09:a2:3b:d1:0f:c9:44:2f:3b: 20:b8:4d:9f:63:5e:62:26:4c:29:3c:5f:8b:9f:ad: f4:23:48:60:8c:ae:fb:d4:68:ca:06:d4:4f:bb:91: f6:95:75:e4:2f:8f:64:94:7c:8c:4b:db:1d:ab:4d: fb:66:eb:93:e1:2c:4e:8b:76:5a:bd:a7:e1:45:94: e1:f2:ac:f2:c4:bc:47:09:34:41:2e:39:5b:ef:15: c9:e5:60:9a:74:8e:b7:ad:64:28:b5:cc:2b:43:d9: e6:48:e3:0f:b4:3c:b6:9b:45:ee:f5:b3:dd:c0:76: db:3f:51:0c:a3:b6:69:93:b6:20:88:91:ab:bc:1c: 1a:aa:1d:26:89:06:b5:b8:a8:c1:f4:5d:8e:fa:8d: e5:64:98:c1:71:3a:07:bc:5a:27:23:51:53:0a:e5: b8:79:65:7a:10:aa:b3:29:51:57:cc:16:85:b7:26: e6:6a:ce:91:46:23:9e:2f:43:45:50:08:5f:45:39: 72:4e:d3:eb:ac:c5:2e:28:8d:25:72:b5:9b:e9:cb: 15:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:9B:C8:62:06:44:24:AC:34:2F:59:7B:1A:8E:E7:38:14:96:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8247a5ea-22ad-3fea-afa9-0b471461850c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:33:19:af:97:4f:c8:82:f9:4b:80:96:8f:71:00:e3:be:a9: 46:ce:09:70:11:f1:cf:4a:25:aa:f8:0c:4b:91:3c:c2:d0:e3: 5c:4c:8d:81:2b:9c:a3:17:c4:f6:89:1b:00:f9:43:df:52:1e: 70:fa:9e:fc:f5:57:21:59:0b:f7:1a:40:97:63:f5:fa:15:22: 2f:7d:58:4a:39:51:75:b1:eb:b9:48:00:bb:f8:f3:eb:db:7e: ed:7e:99:90:bf:f0:83:11:d3:7a:9a:a9:b7:b8:ea:40:ef:ed: 15:db:77:ae:1d:8e:e0:99:f7:9a:48:bb:1a:08:1d:77:65:47: 49:80:61:4b:e2:12:79:df:50:74:77:5f:5e:55:dd:a1:25:03: ad:a7:a3:73:e7:8d:34:d5:ce:d3:c2:bb:a7:38:c4:8f:c6:e0: 89:5f:48:26:90:8d:ba:2b:29:48:83:d6:e0:1b:1f:96:d9:e2: 78:a5:4a:77:1f:2d:35:43:a3:2b:e2:df:d1:18:eb:b8:18:bb: f5:56:2a:bb:4c:65:74:44:d1:59:5e:22:cf:03:d9:28:e5:6f: 05:fd:f4:d9:29:52:47:15:e5:f0:c9:b9:70:d2:89:ce:41:01: 30:69:ee:f7:45:90:9f:6a:6f:51:1d:1e:b6:13:95:f1:dc:ee: 8a:b0:e5:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gjc+0+oORsgSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MWFlNzQyMTktMDVhMy00Yjg3LTk0NWYtZGMyMmJlM2Y5NTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfL8QVVB3p4xoMAZlzwspyLtwq/7nprFaLFf euJQeeWFb43dM9TEs/7Gj/8dFvZTd9EJojvRD8lELzsguE2fY15iJkwpPF+Ln630 I0hgjK771GjKBtRPu5H2lXXkL49klHyMS9sdq037ZuuT4SxOi3ZavafhRZTh8qzy xLxHCTRBLjlb7xXJ5WCadI63rWQotcwrQ9nmSOMPtDy2m0Xu9bPdwHbbP1EMo7Zp k7YgiJGrvBwaqh0miQa1uKjB9F2O+o3lZJjBcToHvFonI1FTCuW4eWV6EKqzKVFX zBaFtybmas6RRiOeL0NFUAhfRTlyTtPrrMUuKI0lcrWb6csV/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNHm8hiBkQkrDQvWXsajuc4FJYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODI0N2E1ZWEtMjJhZC0z ZmVhLWFmYTktMGI0NzE0NjE4NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4zGa+XT8iC+UuAlo9xAOO+qUbOCXAR8c9KJar4DEuRPMLQ41xMjYEr nKMXxPaJGwD5Q99SHnD6nvz1VyFZC/caQJdj9foVIi99WEo5UXWx67lIALv48+vb fu1+mZC/8IMR03qaqbe46kDv7RXbd64djuCZ95pIuxoIHXdlR0mAYUviEnnfUHR3 X15V3aElA62no3PnjTTVztPCu6c4xI/G4IlfSCaQjborKUiD1uAbH5bZ4nilSncf LTVDoyvi39EY67gYu/VWKrtMZXRE0VleIs8D2SjlbwX99NkpUkcV5fDJuXDSic5B ATBp7vdFkJ9qb1EdHrYTlfHc7oqw5Yo= -----END CERTIFICATE-----Generated at Sun May 4 19:27:32 2025 by rpki-client