$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa File: ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa (raw, json) Hash identifier: xUd0Be73YUt05HTbCdxZNu4o9Xh8QPsuceRY7riOkXg= Subject key identifier: 30:A0:D9:F5:A1:EE:61:77:9D:FD:85:76:04:F9:BE:EB:84:8C:D3:87 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0AA937DE61B81679DE80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0a:a9:37:de:61:b8:16:79:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=82ad0542-3bc6-42aa-b9cf-64982574af8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:80:f2:49:2e:54:d5:57:a3:d6:36:4c:5f: e0:f8:64:46:b3:24:e1:15:19:6d:e0:0b:ee:c5:61: ad:b4:a3:1e:19:62:d2:6c:b3:53:d5:67:27:4b:d0: 06:cf:c1:99:5b:c1:a4:84:2d:db:19:23:3c:49:46: ef:85:a8:55:86:f7:d8:c6:c5:ad:16:2b:4c:b5:16: a8:98:a4:c1:30:11:9b:70:4e:b5:13:20:08:e5:e0: 17:f1:44:0d:8e:c0:49:dc:f6:71:2c:94:a5:c4:f1: c1:8f:24:e4:bb:94:5a:41:5e:70:10:af:35:d1:12: 30:bb:57:ba:a7:d4:5d:57:e8:7d:2f:01:fe:04:47: 09:d3:8b:7f:1d:4b:a0:d5:c0:fc:10:51:dd:99:f8: 60:15:05:92:a5:6f:3a:f2:a8:2f:e2:b7:83:7c:90: f9:4e:93:7c:f5:86:2e:17:fa:77:84:cc:8d:c5:11: 72:7c:ff:57:f4:0e:8e:56:fa:35:1c:07:0f:d6:b3: 3f:0e:f2:8a:c4:e3:e4:0e:8f:72:4f:4c:69:2f:01: 09:14:1d:46:95:7c:fe:f8:b9:47:d3:bb:9c:11:0d: 01:a4:a8:0b:50:54:1a:e4:06:43:5c:0d:a3:0c:f9: 59:b6:e5:d2:e4:7a:28:ef:f2:b3:fb:d9:b3:c8:bb: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A0:D9:F5:A1:EE:61:77:9D:FD:85:76:04:F9:BE:EB:84:8C:D3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac2ccd65-f378-362d-bb2b-2e54ad6ccf58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1c:3c:04:e5:82:13:32:52:5e:e9:a8:d4:5b:5a:42:ad:66: f9:8a:9d:54:4a:c1:15:5e:4b:f8:30:e7:bc:ca:b0:4a:f3:47: d2:f0:f6:1d:59:91:80:dc:4d:48:14:fe:81:78:05:5f:8f:59: a6:4d:08:ed:5e:2a:d4:96:5a:b1:11:44:10:21:76:9a:1a:4e: b1:f0:f7:3d:8b:4c:7f:29:b5:a6:34:5e:16:fc:55:17:c7:e1: e2:d5:60:64:c6:5d:96:6e:2c:76:6c:31:90:33:69:36:b6:b2: f7:95:14:a8:4d:a2:ce:4f:3f:4a:46:b0:f3:5f:ec:53:15:8e: b8:5d:75:6b:34:82:3a:8b:8f:78:c6:d9:35:16:35:db:ce:c2: 2e:49:2e:ad:54:16:fb:e7:07:7d:f5:ed:bd:df:45:03:14:70: 78:3a:4f:47:96:eb:1b:a4:40:c7:54:87:58:84:2b:8b:84:3d: 98:cc:73:45:2b:53:1a:3b:b1:c5:5a:86:8a:c2:ed:77:e6:15: b3:79:42:62:f9:97:8b:c2:2a:b1:33:9a:c4:97:e4:85:e5:09: 77:34:0d:cd:22:32:5a:d3:37:8f:10:3a:fb:ab:94:e0:a9:c9: 9e:45:07:7b:d1:20:11:17:22:85:a8:34:70:d6:bc:7d:a8:57: e8:f5:ae:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gqpN95huBZ53oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ODJhZDA1NDItM2JjNi00MmFhLWI5Y2YtNjQ5ODI1NzRhZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWCA8kkuVNVXo9Y2TF/g+GRGsyThFRlt4Avu xWGttKMeGWLSbLNT1WcnS9AGz8GZW8GkhC3bGSM8SUbvhahVhvfYxsWtFitMtRao mKTBMBGbcE61EyAI5eAX8UQNjsBJ3PZxLJSlxPHBjyTku5RaQV5wEK810RIwu1e6 p9RdV+h9LwH+BEcJ04t/HUug1cD8EFHdmfhgFQWSpW868qgv4reDfJD5TpN89YYu F/p3hMyNxRFyfP9X9A6OVvo1HAcP1rM/DvKKxOPkDo9yT0xpLwEJFB1GlXz++LlH 07ucEQ0BpKgLUFQa5AZDXA2jDPlZtuXS5Hoo7/Kz+9mzyLtQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCg2fWh7mF3nf2FdgT5vuuEjNOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWMyY2NkNjUtZjM3OC0z NjJkLWJiMmItMmU1NGFkNmNjZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQcPATlghMyUl7pqNRbWkKtZvmKnVRKwRVeS/gw57zKsErzR9Lw9h1Z kYDcTUgU/oF4BV+PWaZNCO1eKtSWWrERRBAhdpoaTrHw9z2LTH8ptaY0Xhb8VRfH 4eLVYGTGXZZuLHZsMZAzaTa2sveVFKhNos5PP0pGsPNf7FMVjrhddWs0gjqLj3jG 2TUWNdvOwi5JLq1UFvvnB3317b3fRQMUcHg6T0eW6xukQMdUh1iEK4uEPZjMc0Ur Uxo7scVahorC7XfmFbN5QmL5l4vCKrEzmsSX5IXlCXc0Dc0iMlrTN48QOvurlOCp yZ5FB3vRIBEXIoWoNHDWvH2oV+j1rl0= -----END CERTIFICATE-----Generated at Sun May 4 18:59:05 2025 by rpki-client