$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa File: 998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa (raw, json) Hash identifier: 5/vxrKF85sMwvC4MzXvhVBXF8FZxkmTTbncEMdY/+7k= Subject key identifier: C9:A8:8C:7C:8F:03:FC:82:EE:51:52:C0:FE:D5:AD:23:17:46:B6:CF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849912F4275A869BF97EDCF8900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 41264 IP address blocks: 104.132.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:42:75:a8:69:bf:97:ed:cf:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=a3ccd8bd-7dd3-4766-a1e0-904093f4272b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:06:ee:c3:bd:37:19:23:06:54:f9:0d:72: 4c:da:76:e7:57:85:73:c0:b1:14:e0:54:73:82:be: 78:76:56:ed:84:f4:e4:64:4a:b7:f9:e3:28:48:91: 10:f5:f3:94:56:aa:28:a4:43:fc:3d:4d:af:ea:90: 0f:b4:2c:64:86:6b:8d:fd:61:5f:c2:5e:e6:a7:c0: 79:b7:9f:5e:9d:ff:d9:ee:3b:b7:99:dc:e8:98:50: da:90:d6:03:42:28:95:05:3c:ae:74:3f:ec:7c:4a: c2:17:62:44:2a:a1:f0:b0:4d:c1:70:92:9b:e3:42: d4:f9:a5:94:c3:6c:82:89:6b:8c:23:5b:cf:4a:f7: 30:db:b5:31:7c:69:20:85:58:5b:8e:d6:a9:e7:a7: e3:14:06:46:bf:89:71:06:db:a7:ce:e1:d5:e9:1d: af:34:58:b5:44:1d:ca:ae:8f:0a:19:bd:a2:eb:7d: 1a:dc:f0:f1:c2:98:ce:c3:61:5d:b0:c6:d0:5e:29: 10:38:54:d0:a3:91:ba:c6:cf:db:84:87:69:91:c9: 4c:89:de:c4:50:96:e5:17:e6:4c:46:99:3b:02:0f: 6f:f7:67:46:54:95:33:bb:be:98:63:14:35:27:94: 2a:79:d2:72:6f:4d:6f:ed:f7:11:5f:48:03:dd:d6: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:8C:7C:8F:03:FC:82:EE:51:52:C0:FE:D5:AD:23:17:46:B6:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:53:1b:33:08:37:13:26:c1:83:ef:4d:3d:a0:39:f8:1c:67: 8e:5c:ed:58:32:69:a0:de:d7:b7:95:cc:b9:91:1b:39:db:46: 59:92:ff:ac:5c:62:87:35:82:2b:72:20:48:0e:a9:dd:b7:54: 3c:98:1b:9d:ba:56:ec:cd:dd:9a:67:f7:da:78:95:83:f8:30: 67:c8:a4:4d:d9:9c:c8:46:6f:94:c4:88:e2:09:3c:ed:e5:cf: 10:4a:e6:a6:85:f4:b5:04:fe:c0:00:ca:71:f3:31:37:32:ed: e3:10:a3:b3:ed:41:35:0d:02:a2:82:ea:05:b4:4c:16:04:f1: fe:74:d1:70:50:cf:23:98:01:ca:e1:ae:ca:82:aa:12:85:79: 06:2c:7a:9d:97:5d:3d:c4:f5:87:02:52:d5:43:35:98:ee:1e: 0c:3f:d0:aa:5c:76:2e:b8:ec:f4:ca:4b:74:e7:38:c9:92:2e: 2d:4e:93:cc:ae:6e:8f:95:df:ff:6e:15:f4:26:cf:f5:06:f0: 5c:43:41:ef:57:e0:7e:24:be:bf:b1:9b:ea:80:eb:7d:1a:2d: 51:94:f3:5d:95:30:e8:3a:ae:16:84:76:b8:fd:4e:16:87:bf: e1:ab:4d:d8:58:9a:9f:32:72:dc:77:be:11:20:cd:02:f5:8c: bf:9e:9d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0J1qGm/l+3PiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YTNjY2Q4YmQtN2RkMy00NzY2LWExZTAtOTA0MDkzZjQyNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRoG7sO9NxkjBlT5DXJM2nbnV4VzwLEU4FRz gr54dlbthPTkZEq3+eMoSJEQ9fOUVqoopEP8PU2v6pAPtCxkhmuN/WFfwl7mp8B5 t59enf/Z7ju3mdzomFDakNYDQiiVBTyudD/sfErCF2JEKqHwsE3BcJKb40LU+aWU w2yCiWuMI1vPSvcw27UxfGkghVhbjtap56fjFAZGv4lxBtunzuHV6R2vNFi1RB3K ro8KGb2i630a3PDxwpjOw2FdsMbQXikQOFTQo5G6xs/bhIdpkclMid7EUJblF+ZM Rpk7Ag9v92dGVJUzu76YYxQ1J5QqedJyb01v7fcRX0gD3dZ+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmojHyPA/yC7lFSwP7VrSMXRrbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk4ZjUxYTktMWE2ZC0z N2UzLTg1NDgtMTExOWU2ZWYzYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJTGzMINxMmwYPvTT2gOfgcZ45c7VgyaaDe17eVzLmRGznbRlmS/6xc Yoc1gityIEgOqd23VDyYG526VuzN3Zpn99p4lYP4MGfIpE3ZnMhGb5TEiOIJPO3l zxBK5qaF9LUE/sAAynHzMTcy7eMQo7PtQTUNAqKC6gW0TBYE8f500XBQzyOYAcrh rsqCqhKFeQYsep2XXT3E9YcCUtVDNZjuHgw/0Kpcdi647PTKS3TnOMmSLi1Ok8yu bo+V3/9uFfQmz/UG8FxDQe9X4H4kvr+xm+qA630aLVGU812VMOg6rhaEdrj9ThaH v+GrTdhYmp8yctx3vhEgzQL1jL+enVY= -----END CERTIFICATE-----Generated at Mon May 5 11:58:32 2025 by rpki-client