$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa File: 88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa (raw, json) Hash identifier: 5lJvMmdRLTE3MnJhN7pFzlK+JRzlYE9u6pb9CHkc9kc= Subject key identifier: 65:D7:E2:38:EA:80:97:59:0E:86:9C:A8:65:F1:0A:59:D0:00:21:EF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24A6EA2C0A4E89453FECC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 104.134.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a6:ea:2c:0a:4e:89:45:3f:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=76a17db9-6506-4b6e-b107-12b8e7cce92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:4f:30:a5:74:fa:6d:e9:bb:a2:ba:2d:3f: 1b:12:3c:4f:96:0a:5b:29:ed:1f:98:c0:78:aa:e0: 82:0f:bb:01:2e:e6:01:fc:cd:57:a6:77:de:4d:af: a2:00:e2:fa:5c:3f:36:c0:88:8c:c7:c8:e9:6a:ce: 73:14:40:c8:8e:73:1b:e5:00:ef:bc:8f:0c:d5:f0: dd:e9:f2:b8:fc:d0:1b:17:4a:a6:c4:b3:0b:6f:f8: 52:4b:c3:39:49:40:2e:51:d3:bd:3c:f8:18:c7:ab: 35:61:81:fe:05:cc:f5:8f:ce:7a:b9:ff:54:29:31: 20:ca:18:ab:65:db:60:c6:56:74:d8:7d:f9:55:4a: 75:c1:17:66:30:ef:12:2d:4c:c7:e3:8b:82:64:a4: 9a:67:05:93:61:29:aa:9d:8a:be:bb:30:83:be:78: 62:ff:9e:f2:db:bb:a3:5c:f8:18:74:ae:97:86:d5: b8:65:5e:b8:1b:9e:3a:84:26:62:96:2f:8d:41:94: a7:36:e7:32:0c:25:01:8a:fa:4b:2e:83:15:e4:34: db:f8:5f:a2:73:82:e7:c2:ca:70:7b:1b:80:1c:71: 20:6b:9b:d6:26:ca:59:0a:37:68:ce:4a:01:3f:f3: 85:f8:b4:d8:57:53:ca:24:c2:54:e3:5d:06:95:b4: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:E2:38:EA:80:97:59:0E:86:9C:A8:65:F1:0A:59:D0:00:21:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88d16d8f-8d77-36e1-af86-8739d0f3a16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:05:9f:8a:e2:a5:94:10:72:57:3c:d9:de:e4:69:4a:46:42: 14:4f:60:ec:bb:20:39:f6:69:bd:f6:8f:2c:cb:c1:f0:15:1f: 42:b6:c1:08:c4:7a:f6:ba:93:d7:a5:1d:a3:8f:1f:55:05:b8: c4:4e:52:8a:48:61:0e:f6:a5:cb:87:33:cc:d7:3a:fe:d1:e0: bf:a5:f2:01:4d:85:3c:7d:49:08:72:43:e1:c0:47:79:e3:3f: 3c:cb:c2:90:e3:65:c2:e7:d1:4a:bf:20:19:59:5d:cb:f9:49: 31:cc:db:63:47:e7:4d:07:72:d1:f7:5f:e6:b2:b8:d8:5c:3a: eb:10:65:f3:4b:c3:4e:b3:97:21:97:c8:16:81:37:6f:07:e0: 27:04:28:e3:12:41:ff:20:6c:7b:3d:ea:b5:b7:61:43:41:9e: 24:fe:12:1c:78:fc:14:23:f0:c1:00:50:ce:72:56:bd:b9:2a: 78:da:1c:24:c6:fe:2c:ce:ab:b0:17:0d:71:95:e8:9e:3b:ed: 91:37:ca:14:57:b2:d0:d0:6d:f9:94:f8:09:55:b8:5c:41:5e: 21:a7:8d:a3:f8:74:e3:a2:38:35:f7:6a:6e:bb:a6:f8:25:5e: 0d:73:bc:c3:5e:58:29:37:fa:42:73:88:8e:99:d1:74:ec:7b: 9c:bc:0e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKbqLApOiUU/7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzZhMTdkYjktNjUwNi00YjZlLWIxMDctMTJiOGU3Y2NlOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOlPMKV0+m3pu6K6LT8bEjxPlgpbKe0fmMB4 quCCD7sBLuYB/M1XpnfeTa+iAOL6XD82wIiMx8jpas5zFEDIjnMb5QDvvI8M1fDd 6fK4/NAbF0qmxLMLb/hSS8M5SUAuUdO9PPgYx6s1YYH+Bcz1j856uf9UKTEgyhir ZdtgxlZ02H35VUp1wRdmMO8SLUzH44uCZKSaZwWTYSmqnYq+uzCDvnhi/57y27uj XPgYdK6XhtW4ZV64G546hCZili+NQZSnNucyDCUBivpLLoMV5DTb+F+ic4Lnwspw exuAHHEga5vWJspZCjdozkoBP/OF+LTYV1PKJMJU410GlbS/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXX4jjqgJdZDoacqGXxClnQACHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODhkMTZkOGYtOGQ3Ny0z NmUxLWFmODYtODczOWQwZjNhMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoFn4ripZQQclc82d7kaUpGQhRPYOy7IDn2ab32jyzLwfAVH0K2wQjE eva6k9elHaOPH1UFuMROUopIYQ72pcuHM8zXOv7R4L+l8gFNhTx9SQhyQ+HAR3nj PzzLwpDjZcLn0Uq/IBlZXcv5STHM22NH500HctH3X+ayuNhcOusQZfNLw06zlyGX yBaBN28H4CcEKOMSQf8gbHs96rW3YUNBniT+Ehx4/BQj8MEAUM5yVr25KnjaHCTG /izOq7AXDXGV6J477ZE3yhRXstDQbfmU+AlVuFxBXiGnjaP4dOOiODX3am67pvgl Xg1zvMNeWCk3+kJziI6Z0XTse5y8Dgg= -----END CERTIFICATE-----Generated at Sun May 4 13:00:38 2025 by rpki-client