$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a78d0c6d-0744-3547-990b-6b44e5532c90.roa File: a78d0c6d-0744-3547-990b-6b44e5532c90.roa (raw, json) Hash identifier: 7SgVvWMmZWayav7RZLb/x9k4+zFLcTtV5Xuj4hZJhsM= Subject key identifier: E7:89:02:2D:14:41:46:3B:C9:E0:52:7D:2C:95:B5:4B:4D:91:B0:57 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F9504F04C74D315FEDE0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a78d0c6d-0744-3547-990b-6b44e5532c90.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f9:50:4f:04:c7:4d:31:5f:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=b3bc7677-a429-4a65-a896-a5c251bef0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:b0:28:d0:3b:b0:6a:ec:29:b4:54:ef:f2: 75:cd:b4:d1:0a:d2:54:db:d9:7c:7b:8c:54:5b:d9: 3d:b7:7a:7e:45:0e:85:b2:fd:c4:a6:41:37:c8:ea: d5:6f:08:e5:a6:c9:03:76:9e:b5:c8:ec:1f:57:a5: 4a:c9:58:8f:49:35:71:9a:c1:d9:d8:b1:4f:03:78: b1:c0:81:8c:60:c0:d7:62:19:fb:60:e8:f0:a4:c1: b2:8b:a5:7e:09:e6:84:27:6d:8d:0c:28:f2:fa:aa: 96:66:1f:e2:dd:3b:7c:de:46:68:7a:00:3c:a1:ed: b7:03:87:35:bc:6d:57:e4:41:da:d2:17:5e:06:68: 88:dc:f6:f3:ef:73:17:f6:ad:69:db:cf:7e:c3:bd: f3:f4:79:1c:8a:d9:98:a0:86:a1:ba:93:ab:0d:47: cf:3e:35:f8:48:50:c5:2d:bb:77:0c:08:2e:be:95: f5:6a:d5:73:89:b2:e0:18:67:56:60:4d:14:49:d8: c7:c4:0c:ef:fc:fd:d5:72:74:5e:88:00:04:f1:e0: ad:62:61:30:76:52:a2:01:97:f2:8b:84:4e:d6:80: ee:8a:d2:dd:19:fa:d4:48:ea:cd:e7:40:49:6c:a8: 3b:4c:02:58:fc:fe:fd:4d:23:53:2f:bc:89:f3:18: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:02:2D:14:41:46:3B:C9:E0:52:7D:2C:95:B5:4B:4D:91:B0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a78d0c6d-0744-3547-990b-6b44e5532c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:96:de:af:7a:d8:74:79:22:65:cd:51:91:10:39:fc:b4:34: bc:ad:b2:31:07:8d:ea:54:ed:9d:c7:11:67:88:14:52:84:d1: fd:2b:fa:93:d5:aa:7c:13:78:94:84:a3:64:25:8a:c0:01:5c: c3:3f:d0:3e:a6:e5:22:f0:00:d0:28:2d:e6:d0:1d:29:e1:af: a5:b1:d2:df:81:da:82:b8:57:14:7b:ea:15:20:09:67:6a:0e: 8b:a1:d0:be:7c:45:92:2a:b6:63:27:79:8d:9b:20:a1:d8:65: 77:92:b5:47:26:9d:4b:68:ce:25:2c:90:c2:c4:49:05:f4:d8: 78:b8:7a:54:5d:52:de:98:c9:3a:54:9a:51:a1:4f:e4:17:cc: 7a:27:69:f8:30:09:c4:ed:49:29:9a:07:3b:bc:ef:fd:58:ec: a6:2c:6e:ef:ae:ca:44:15:7b:3a:a9:4a:f1:a1:2e:41:b1:c9: 66:e1:6f:f7:8a:90:71:97:73:ff:9d:86:20:39:9b:1c:4f:51: c6:27:cc:5d:f5:7d:f9:9f:50:ef:d1:e9:b5:99:b2:e8:61:0a: a6:a3:29:e5:84:24:f6:2b:a4:17:44:29:ff:a6:56:44:bb:bf: e5:31:98:00:42:4c:b8:cf:2e:c6:e5:2a:9d:19:48:11:49:96: ef:b4:cc:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+flQTwTHTTFf7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk YjNiYzc2NzctYTQyOS00YTY1LWE4OTYtYTVjMjUxYmVmMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3awKNA7sGrsKbRU7/J1zbTRCtJU29l8e4xU W9k9t3p+RQ6Fsv3EpkE3yOrVbwjlpskDdp61yOwfV6VKyViPSTVxmsHZ2LFPA3ix wIGMYMDXYhn7YOjwpMGyi6V+CeaEJ22NDCjy+qqWZh/i3Tt83kZoegA8oe23A4c1 vG1X5EHa0hdeBmiI3Pbz73MX9q1p289+w73z9HkcitmYoIahupOrDUfPPjX4SFDF Lbt3DAguvpX1atVzibLgGGdWYE0USdjHxAzv/P3VcnReiAAE8eCtYmEwdlKiAZfy i4RO1oDuitLdGfrUSOrN50BJbKg7TAJY/P79TSNTL7yJ8xhQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeJAi0UQUY7yeBSfSyVtUtNkbBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTc4ZDBjNmQtMDc0NC0z NTQ3LTk5MGItNmI0NGU1NTMyYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmW3q962HR5ImXNUZEQOfy0NLytsjEHjepU7Z3HEWeIFFKE0f0r+pPV qnwTeJSEo2QlisABXMM/0D6m5SLwANAoLebQHSnhr6Wx0t+B2oK4VxR76hUgCWdq Douh0L58RZIqtmMneY2bIKHYZXeStUcmnUtoziUskMLESQX02Hi4elRdUt6YyTpU mlGhT+QXzHonafgwCcTtSSmaBzu87/1Y7KYsbu+uykQVezqpSvGhLkGxyWbhb/eK kHGXc/+dhiA5mxxPUcYnzF31ffmfUO/R6bWZsuhhCqajKeWEJPYrpBdEKf+mVkS7 v+UxmABCTLjPLsblKp0ZSBFJlu+0zIE= -----END CERTIFICATE-----Generated at Sun May 4 18:37:33 2025 by rpki-client