$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf6f5194-e043-33d6-a9c7-a9cdb4febd85.roa File: cf6f5194-e043-33d6-a9c7-a9cdb4febd85.roa (raw, json) Hash identifier: eK+etZ7lhVV2vyZ53I9FJm/2zDpHlsA07BChN6hkY84= Subject key identifier: D6:F1:C7:9B:22:71:6D:01:FA:80:17:EB:F3:D8:CC:4A:04:99:02:00 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F894BBEF6CA6C97D3478 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf6f5194-e043-33d6-a9c7-a9cdb4febd85.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395973 IP address blocks: 104.134.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f8:94:bb:ef:6c:a6:c9:7d:34:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=66ec17c7-229e-4afd-ba7f-6ccc6de5dca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:ae:eb:7a:1a:92:2e:a9:5c:0f:5f:dc:bd: 91:9a:21:4b:11:34:89:bc:a8:3c:b2:b8:b5:4f:ac: e4:7e:6f:55:58:ca:94:dc:c4:1e:00:8a:a5:50:af: 1f:8d:69:57:e1:ac:c7:99:9b:6a:17:61:04:94:bd: 5f:00:ec:7f:b1:b9:c5:82:e3:e5:0b:e6:b1:dc:9a: a4:29:46:cb:8d:12:80:68:a9:53:5f:f3:d5:ba:3e: 8b:9e:cd:45:43:ef:f6:8e:03:46:15:0b:f7:78:93: 86:14:15:13:2f:f4:16:60:3c:ef:32:8d:12:59:7a: 92:9d:51:79:cc:00:c2:b9:dc:e7:86:1a:2d:4d:a7: 15:c6:e3:42:4f:87:33:0c:10:dd:11:12:b0:fe:ae: 1b:05:3b:6b:48:50:6b:ef:53:1d:1d:16:33:a2:c0: b7:b1:2d:da:de:ac:74:77:e0:f7:ba:64:41:93:fb: 59:bf:13:4b:e0:72:20:4e:35:bd:c0:d6:8f:32:fa: a8:5a:e5:2f:db:3e:69:ed:29:db:c6:c6:8b:70:a8: d1:26:a9:a3:0c:83:01:e0:c2:a8:31:6a:a2:49:b4: 3d:2b:6a:5c:e8:ba:d0:2d:b5:77:6f:66:a4:b5:74: 08:fa:f5:7c:0e:35:5f:b7:79:c4:7c:cf:a0:2f:96: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F1:C7:9B:22:71:6D:01:FA:80:17:EB:F3:D8:CC:4A:04:99:02:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf6f5194-e043-33d6-a9c7-a9cdb4febd85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0c:51:d7:e8:31:40:0d:46:b6:eb:24:2e:e2:2c:2a:f6:c5: 69:0e:0f:3a:8c:25:23:b4:e8:e5:64:c4:78:9a:13:dc:38:0a: a8:03:c8:73:1c:82:74:a4:63:c4:54:0a:f8:7f:79:e8:90:95: 88:0d:fb:97:74:10:4d:41:79:e2:69:fd:0e:73:0e:d7:bd:86: ae:89:6d:ba:b1:13:4f:4e:6d:63:b7:82:00:fb:60:75:9b:b6: 46:5c:f6:53:34:60:95:ce:43:4c:8e:24:a4:5b:52:1c:22:ee: 1b:c2:6a:13:4a:87:f0:e3:fd:4f:de:9c:3c:c2:fe:5e:b0:22: cc:62:b7:5b:df:33:90:11:1a:4b:f7:af:95:69:bf:d5:92:a7: 17:b0:4b:8a:df:43:a5:9f:e6:1c:d4:05:33:a3:4c:85:89:d2: ca:5c:7e:11:33:a4:d9:ce:de:84:28:05:b0:55:5b:8f:f7:0b: d4:ba:1a:02:d2:78:0c:e8:71:6b:05:f0:3b:db:c6:c6:c7:68: b8:92:c1:6d:61:71:c2:f8:80:32:55:c9:38:cc:11:a4:41:3e: 79:69:f2:44:1d:4d:65:87:71:7f:8c:f3:2e:08:90:30:4c:55: 62:93:b0:db:ca:0b:c9:b2:77:ff:52:25:b3:13:69:35:23:6d: 35:a4:9f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fiUu+9spsl9NHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NjZlYzE3YzctMjI5ZS00YWZkLWJhN2YtNmNjYzZkZTVkY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrGu63oaki6pXA9f3L2RmiFLETSJvKg8sri1 T6zkfm9VWMqU3MQeAIqlUK8fjWlX4azHmZtqF2EElL1fAOx/sbnFguPlC+ax3Jqk KUbLjRKAaKlTX/PVuj6Lns1FQ+/2jgNGFQv3eJOGFBUTL/QWYDzvMo0SWXqSnVF5 zADCudznhhotTacVxuNCT4czDBDdERKw/q4bBTtrSFBr71MdHRYzosC3sS3a3qx0 d+D3umRBk/tZvxNL4HIgTjW9wNaPMvqoWuUv2z5p7SnbxsaLcKjRJqmjDIMB4MKo MWqiSbQ9K2pc6LrQLbV3b2aktXQI+vV8DjVft3nEfM+gL5a9gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbxx5sicW0B+oAX6/PYzEoEmQIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2Y2ZjUxOTQtZTA0My0z M2Q2LWE5YzctYTljZGI0ZmViZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAMUdfoMUANRrbrJC7iLCr2xWkODzqMJSO06OVkxHiaE9w4CqgDyHMc gnSkY8RUCvh/eeiQlYgN+5d0EE1BeeJp/Q5zDte9hq6JbbqxE09ObWO3ggD7YHWb tkZc9lM0YJXOQ0yOJKRbUhwi7hvCahNKh/Dj/U/enDzC/l6wIsxit1vfM5ARGkv3 r5Vpv9WSpxewS4rfQ6Wf5hzUBTOjTIWJ0spcfhEzpNnO3oQoBbBVW4/3C9S6GgLS eAzocWsF8DvbxsbHaLiSwW1hccL4gDJVyTjMEaRBPnlp8kQdTWWHcX+M8y4IkDBM VWKTsNvKC8myd/9SJbMTaTUjbTWkn2I= -----END CERTIFICATE-----Generated at Sun May 4 18:29:49 2025 by rpki-client