$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa File: 9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa (raw, json) Hash identifier: Es+HLNBiJf0wOuT8KEtLp/UNBjMx+zgJQb3PwBIpw14= Subject key identifier: D6:74:44:33:80:A4:C1:03:0F:EA:CF:60:EB:8C:DE:C4:2C:AE:49:60 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849B6DF489581B2C2472C7DE740 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 36383 IP address blocks: 104.135.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:48:95:81:b2:c2:47:2c:7d:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=57ce0abb-08e7-4603-84e3-4c7bc22342f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:00:8f:ec:2c:13:52:b0:65:8f:19:21:7e:d2: 1e:66:10:4a:b4:3c:a5:8a:8c:6f:a5:d3:4f:93:a0: b0:c3:aa:cf:5f:1e:7c:21:4b:e0:bc:49:bb:fb:db: 9d:de:3c:86:5d:93:6c:0d:49:76:b5:e4:eb:da:4f: 42:76:d7:87:12:f4:90:d2:c1:9d:8b:18:59:3e:cc: 1c:69:76:e0:79:a9:cf:72:19:a3:5c:2d:6e:7f:52: 13:35:09:bd:9a:65:b7:d2:e9:b9:6c:bd:b1:da:47: 80:22:3c:93:86:6d:e6:67:94:60:ff:00:c1:f9:e1: e0:a4:20:e8:4a:e2:b6:6d:52:e0:9e:7f:38:9e:45: a7:02:49:bf:c0:79:92:cb:1c:69:a2:de:b0:38:c8: 3b:34:5a:3c:50:bb:8a:f3:fa:ad:4d:44:0d:ce:18: 4b:3e:b2:17:d1:65:6b:df:15:18:03:0c:83:19:11: 41:1c:ba:c5:a7:4b:93:e5:de:bb:16:b8:50:95:6f: ea:df:d6:b0:2f:40:f5:36:bc:de:0f:f1:4e:d3:0b: 84:33:7a:1d:1c:e7:a5:65:59:aa:49:29:7f:aa:61: 5a:a3:a5:9f:f3:92:b3:7c:fb:63:16:be:a4:2f:43: 77:c2:98:18:67:67:2f:88:9d:07:d0:3b:f7:3b:cc: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:74:44:33:80:A4:C1:03:0F:EA:CF:60:EB:8C:DE:C4:2C:AE:49:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9067c3c2-e74f-3c0a-8079-cf6db54bd612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:bd:53:46:38:6a:d1:fe:62:c3:bb:cc:64:3a:a2:ea:3b:16: 44:25:4e:5a:11:10:17:c6:55:46:25:88:f7:1d:7f:5c:ee:34: 72:aa:e2:88:ae:f0:d3:2a:25:65:8c:94:d8:80:56:b0:35:9d: 6c:d2:db:f1:39:20:87:0a:43:b2:b4:a8:b4:48:47:f2:5c:ab: 4f:7e:54:e9:7a:3e:e6:29:84:f0:c8:45:9a:88:1d:ee:ce:57: 46:82:f6:5f:4e:52:f8:13:55:b1:ef:6b:c4:7a:65:5b:98:1c: fd:0a:86:54:58:8d:5f:80:81:70:95:91:11:f2:cd:ac:80:81: b3:cd:a9:be:28:a2:ec:2e:66:e5:49:bd:7f:b5:6a:95:4a:79: 2f:d3:14:22:0b:2b:69:15:d2:8f:f0:9e:02:5a:45:15:d1:b1: 65:86:ec:6a:7c:cc:af:40:24:2d:8d:0c:e7:c4:31:dd:bd:b5: c4:40:90:1f:06:dd:a7:e6:58:1e:7b:9d:f1:ff:6a:2f:7f:8d: ec:ee:39:f0:fb:fd:2a:18:c3:96:6a:30:e3:e6:75:b7:b4:1e: e4:e9:68:63:fc:1c:db:de:50:20:ae:79:a4:d7:22:71:57:bc: 9d:fc:83:a5:87:d5:92:79:79:53:ef:01:d6:04:01:34:0d:67: 44:98:72:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230iVgbLCRyx950AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NTdjZTBhYmItMDhlNy00NjAzLTg0ZTMtNGM3YmMyMjM0MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwCP7CwTUrBljxkhftIeZhBKtDylioxvpdNP k6Cww6rPXx58IUvgvEm7+9ud3jyGXZNsDUl2teTr2k9CdteHEvSQ0sGdixhZPswc aXbgeanPchmjXC1uf1ITNQm9mmW30um5bL2x2keAIjyThm3mZ5Rg/wDB+eHgpCDo SuK2bVLgnn84nkWnAkm/wHmSyxxpot6wOMg7NFo8ULuK8/qtTUQNzhhLPrIX0WVr 3xUYAwyDGRFBHLrFp0uT5d67FrhQlW/q39awL0D1NrzeD/FO0wuEM3odHOelZVmq SSl/qmFao6Wf85KzfPtjFr6kL0N3wpgYZ2cviJ0H0Dv3O8wbxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ0RDOApMEDD+rPYOuM3sQsrklgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTA2N2MzYzItZTc0Zi0z YzBhLTgwNzktY2Y2ZGI1NGJkNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO9U0Y4atH+YsO7zGQ6ouo7FkQlTloREBfGVUYliPcdf1zuNHKq4oiu 8NMqJWWMlNiAVrA1nWzS2/E5IIcKQ7K0qLRIR/Jcq09+VOl6PuYphPDIRZqIHe7O V0aC9l9OUvgTVbHva8R6ZVuYHP0KhlRYjV+AgXCVkRHyzayAgbPNqb4oouwuZuVJ vX+1apVKeS/TFCILK2kV0o/wngJaRRXRsWWG7Gp8zK9AJC2NDOfEMd29tcRAkB8G 3afmWB57nfH/ai9/jezuOfD7/SoYw5ZqMOPmdbe0HuTpaGP8HNveUCCueaTXInFX vJ38g6WH1ZJ5eVPvAdYEATQNZ0SYciY= -----END CERTIFICATE-----Generated at Sun May 4 21:08:55 2025 by rpki-client