$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa File: 9bf48ac1-703c-3af3-8f05-6803d3f10791.roa (raw, json) Hash identifier: BlmoGWOLivk71VKy6yUmA7Z9EjX2aMghe/DEqNMLoRE= Subject key identifier: C1:5D:5D:F7:3C:8C:D1:63:DD:8E:FA:6D:CB:F5:6F:7A:40:62:62:6C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B4E92DD05F74A81EEB80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b4:e9:2d:d0:5f:74:a8:1e:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=d8d873de-f397-48c5-bb8b-6efe9b7e407f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:36:0e:cc:fe:15:65:98:ab:f9:4f:d8:d5: bc:e3:36:ed:57:3f:2f:ef:31:24:5b:e9:a9:85:e2: 11:67:53:19:9f:c2:cd:a7:12:b9:ea:4b:2b:e8:12: 84:1d:45:77:ec:bc:67:26:a1:a0:34:67:58:8b:78: 86:fe:9c:45:aa:31:c2:d3:eb:91:8d:bb:66:51:2a: aa:cf:d9:06:d8:43:8b:75:16:85:da:4f:2f:ed:b0: 17:da:9b:5c:3e:7e:55:d9:8c:68:29:55:c5:38:da: e7:c5:cd:4f:f5:b2:93:ce:2f:b2:15:22:29:81:50: 66:43:fd:fc:03:af:d0:f1:4c:bb:49:92:ae:13:a2: 8a:8b:f4:0f:d1:96:1a:09:9e:b7:e0:a3:86:30:82: 38:2b:c5:c3:04:0a:eb:8a:ea:a6:ba:61:43:6b:a4: fe:01:3f:ef:5d:07:91:6b:19:27:0a:23:20:cc:18: 26:ec:36:36:70:c1:17:27:88:e7:26:5a:e1:66:af: 6c:e3:01:b7:a7:50:ce:69:cb:8d:29:2e:23:8b:04: 9e:3a:29:0a:1a:21:a2:f1:ee:8d:a1:be:55:ab:85: e4:ac:d7:10:b1:33:54:fe:97:08:ff:64:ae:a7:f7: 94:46:a5:7f:6e:30:ec:af:c1:4e:cd:be:e9:e8:ec: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5D:5D:F7:3C:8C:D1:63:DD:8E:FA:6D:CB:F5:6F:7A:40:62:62:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e4:44:ee:2d:40:fb:f8:0e:5f:93:6c:c1:9e:32:28:ad:70: 9e:d7:e6:87:a7:32:52:f4:99:2b:32:b2:ec:01:23:e2:85:fb: 8d:8f:3d:ce:d7:f0:9a:00:93:af:0f:42:2a:73:9c:c5:d2:f8: a9:e5:b2:a0:ab:f7:10:c0:83:44:ba:4a:7f:b2:a6:a2:32:b9: 8e:c0:af:39:29:d0:a8:78:62:8a:d6:2d:92:d0:51:b4:0b:1b: 68:c3:cc:ea:87:17:d7:a4:39:91:9f:53:40:5b:25:65:44:86: 83:fd:1a:d6:7f:aa:ae:3c:da:5d:77:44:f2:41:1a:40:30:9c: 3b:6b:31:7a:bb:6f:f1:27:66:aa:2b:61:2d:6f:6e:b7:19:21: 53:87:62:71:71:44:9b:50:2d:31:11:e1:ef:a4:61:5b:10:a6: 49:51:0d:0f:b9:60:3a:c9:65:1d:b1:ad:4c:37:c5:ce:73:8d: 7d:b8:ef:d2:b2:1b:15:ff:33:01:c1:86:c3:66:68:2d:e7:da: 28:2e:60:33:f7:dc:48:f3:4b:21:c8:8e:fe:64:07:dd:0a:30: b3:e7:25:6b:1a:4d:2a:80:42:60:12:f4:cc:a3:ef:73:5f:e5: 42:92:96:7c:d5:8e:75:77:fe:c3:df:60:c8:67:39:eb:44:f1: 0a:da:0d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLTpLdBfdKge64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk ZDhkODczZGUtZjM5Ny00OGM1LWJiOGItNmVmZTliN2U0MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzII2Dsz+FWWYq/lP2NW84zbtVz8v7zEkW+mp heIRZ1MZn8LNpxK56ksr6BKEHUV37LxnJqGgNGdYi3iG/pxFqjHC0+uRjbtmUSqq z9kG2EOLdRaF2k8v7bAX2ptcPn5V2YxoKVXFONrnxc1P9bKTzi+yFSIpgVBmQ/38 A6/Q8Uy7SZKuE6KKi/QP0ZYaCZ634KOGMII4K8XDBArriuqmumFDa6T+AT/vXQeR axknCiMgzBgm7DY2cMEXJ4jnJlrhZq9s4wG3p1DOacuNKS4jiwSeOikKGiGi8e6N ob5Vq4XkrNcQsTNU/pcI/2Sup/eURqV/bjDsr8FOzb7p6OyfDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFdXfc8jNFj3Y76bcv1b3pAYmJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWJmNDhhYzEtNzAzYy0z YWYzLThmMDUtNjgwM2QzZjEwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLkRO4tQPv4Dl+TbMGeMiitcJ7X5oenMlL0mSsysuwBI+KF+42PPc7X 8JoAk68PQipznMXS+KnlsqCr9xDAg0S6Sn+ypqIyuY7Arzkp0Kh4YorWLZLQUbQL G2jDzOqHF9ekOZGfU0BbJWVEhoP9GtZ/qq482l13RPJBGkAwnDtrMXq7b/EnZqor YS1vbrcZIVOHYnFxRJtQLTER4e+kYVsQpklRDQ+5YDrJZR2xrUw3xc5zjX2479Ky GxX/MwHBhsNmaC3n2iguYDP33EjzSyHIjv5kB90KMLPnJWsaTSqAQmAS9Myj73Nf 5UKSlnzVjnV3/sPfYMhnOetE8QraDbY= -----END CERTIFICATE-----Generated at Sun May 4 18:33:35 2025 by rpki-client