$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9d1bf6c-352f-32a5-a772-83f5ed866bc0.roa File: b9d1bf6c-352f-32a5-a772-83f5ed866bc0.roa (raw, json) Hash identifier: 6ZjABJkutET0h8Zdn90nO9dVWh9cHkxv32DY1I4swEY= Subject key identifier: CF:99:8F:E4:84:2C:04:0B:E7:FF:90:B3:2A:90:A3:5D:ED:FF:37:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA0B725A58B54D77410B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9d1bf6c-352f-32a5-a772-83f5ed866bc0.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:0b:72:5a:58:b5:4d:77:41:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=de383a17-2896-4aa3-9b44-8644f2698528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:0b:20:07:bb:98:25:ab:b9:cf:8a:2a:6f: 9c:91:27:90:7e:4f:c7:95:9f:5e:63:97:e9:a4:95: 7f:ac:53:99:a7:de:c6:02:95:05:be:06:05:ce:d4: ff:1b:95:82:73:97:e0:b5:f9:d9:d9:d6:90:90:20: bf:44:1b:ef:38:e0:ee:67:29:d0:b1:bf:06:05:4c: b6:88:77:c7:5d:bb:72:73:da:6f:87:d8:29:92:08: 42:56:a5:ba:8a:a0:c3:a6:d6:54:98:97:84:a0:39: f2:ce:39:68:eb:c9:a2:c9:48:83:89:37:11:73:cb: 80:4c:9d:5c:1e:6c:14:89:f7:3e:93:95:e9:e0:75: e6:a1:b7:82:63:0e:49:78:d8:03:90:8a:90:0b:9b: 48:d8:c2:f5:6d:70:6b:e8:f9:14:b4:75:ef:63:6e: 42:86:ca:77:c7:de:81:df:5d:a3:d9:84:02:94:92: 71:85:01:15:36:65:78:46:2c:9b:3f:8c:88:32:b9: cf:f1:15:a9:83:80:98:0d:8d:39:0b:da:eb:b5:37: c4:da:6d:2b:dd:41:25:69:c3:08:39:9a:6b:56:b4: 72:ed:cf:3c:1d:0a:8a:7e:ab:2b:25:f9:2d:7e:d9: 8f:30:25:0d:51:b8:1a:77:f6:f7:36:64:43:33:61: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:99:8F:E4:84:2C:04:0B:E7:FF:90:B3:2A:90:A3:5D:ED:FF:37:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9d1bf6c-352f-32a5-a772-83f5ed866bc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:18:56:dd:56:65:9d:94:3f:9d:5e:40:f8:34:5b:0d:5d:a6: 7e:3c:16:38:3f:bd:3c:01:ac:7a:c1:d7:b8:f0:c3:64:59:13: 8e:a1:ba:1f:1b:d8:dd:57:ec:86:cd:f4:3b:00:cd:fc:2f:ac: 3a:a2:d1:86:42:46:32:17:98:61:4c:f4:28:c3:bf:3b:93:20: 40:7a:e8:30:32:35:82:74:34:e6:e2:31:be:ad:ad:a2:f3:9a: 9a:4e:26:95:9c:20:a8:a1:90:a9:c9:82:d6:c9:37:fd:5c:b5: 12:bf:d4:70:91:24:dc:f5:08:f4:32:96:db:71:fd:a9:e3:0f: f1:fc:b1:a7:4d:a4:3e:ee:de:80:d4:8c:c8:28:21:50:74:4a: 07:b4:2a:4f:d5:79:44:ae:b7:51:33:3c:eb:76:12:1a:b2:55: d0:96:51:2c:10:55:35:b1:32:ec:c3:8d:56:11:a3:7b:16:89: db:41:a5:92:74:ca:a0:d3:6a:28:94:b8:42:27:4a:33:02:58: 0a:09:db:c1:66:8f:1c:13:e0:3d:61:be:5d:38:d9:ca:a4:2d: 8f:ee:96:a8:fd:51:9e:9e:d9:b0:1f:b7:30:2c:71:2a:be:b0: 6a:a9:87:42:97:e9:ae:4c:af:e9:fb:6c:a5:6f:bf:ca:a2:55: 99:d4:7f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gtyWli1TXdBCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZGUzODNhMTctMjg5Ni00YWEzLTliNDQtODY0NGYyNjk4NTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZULIAe7mCWruc+KKm+ckSeQfk/HlZ9eY5fp pJV/rFOZp97GApUFvgYFztT/G5WCc5fgtfnZ2daQkCC/RBvvOODuZynQsb8GBUy2 iHfHXbtyc9pvh9gpkghCVqW6iqDDptZUmJeEoDnyzjlo68miyUiDiTcRc8uATJ1c HmwUifc+k5Xp4HXmobeCYw5JeNgDkIqQC5tI2ML1bXBr6PkUtHXvY25Chsp3x96B 312j2YQClJJxhQEVNmV4RiybP4yIMrnP8RWpg4CYDY05C9rrtTfE2m0r3UElacMI OZprVrRy7c88HQqKfqsrJfktftmPMCUNUbgad/b3NmRDM2ETDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+Zj+SELAQL5/+QsyqQo13t/zd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjlkMWJmNmMtMzUyZi0z MmE1LWE3NzItODNmNWVkODY2YmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoYVt1WZZ2UP51eQPg0Ww1dpn48Fjg/vTwBrHrB17jww2RZE46huh8b 2N1X7IbN9DsAzfwvrDqi0YZCRjIXmGFM9CjDvzuTIEB66DAyNYJ0NObiMb6traLz mppOJpWcIKihkKnJgtbJN/1ctRK/1HCRJNz1CPQylttx/anjD/H8sadNpD7u3oDU jMgoIVB0Sge0Kk/VeUSut1EzPOt2EhqyVdCWUSwQVTWxMuzDjVYRo3sWidtBpZJ0 yqDTaiiUuEInSjMCWAoJ28FmjxwT4D1hvl042cqkLY/ulqj9UZ6e2bAftzAscSq+ sGqph0KX6a5Mr+n7bKVvv8qiVZnUf7o= -----END CERTIFICATE-----Generated at Sun May 4 18:16:31 2025 by rpki-client