$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa File: d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa (raw, json) Hash identifier: JNu3eLafmo4mK+6gIajeDAOCec38GboY31YmLn3O93U= Subject key identifier: AE:4F:BF:68:DD:E3:67:73:84:F6:62:F1:53:30:E0:14:20:45:BB:9A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F6A76B4DB02804414F43 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f6:a7:6b:4d:b0:28:04:41:4f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=7715a8a7-b2ba-4c02-a110-a20b74491c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3a:98:9d:a7:38:df:21:7a:5c:5f:63:00:cc: cf:4a:5a:c9:18:d6:ab:e8:91:23:3f:9e:3b:17:9c: 60:b7:c0:71:77:b8:e8:77:f8:05:ac:cd:d9:8a:fe: 75:73:b7:66:b3:57:a8:34:17:66:d2:49:93:7e:b6: 2f:96:fe:1a:b3:00:f2:5d:0e:f6:5f:e6:1f:3f:16: fe:21:eb:2c:4b:b8:9c:81:c7:3f:07:8a:6c:96:5a: ba:22:4a:c3:f8:cc:47:8c:36:6c:8f:f6:1f:31:36: e0:4f:57:44:ba:75:60:63:83:47:cd:9b:c1:d2:43: 1e:d9:31:33:c9:d1:ef:96:63:f0:1e:57:39:74:d0: 4c:48:2f:ce:cc:3d:f0:70:ce:4a:2e:79:59:f2:20: ac:a1:25:e9:cc:86:ab:51:43:3a:95:ee:48:45:bf: 66:60:2f:1d:e4:36:66:30:f1:83:52:b2:1c:5c:a5: db:42:5e:c8:b4:95:c9:bd:bc:b4:dc:4e:08:e2:44: 3e:6c:7a:d6:4f:12:f9:d6:1a:9c:cf:a5:3c:c8:6e: bc:ce:5f:f0:25:2d:3f:ad:78:64:44:85:de:44:c4: 1e:77:c9:16:6b:85:3c:01:43:a5:ac:56:27:47:0c: 32:b7:3a:28:27:86:18:cc:40:48:d4:16:d6:84:0b: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4F:BF:68:DD:E3:67:73:84:F6:62:F1:53:30:E0:14:20:45:BB:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6c:7a:70:d7:2c:cc:d9:ea:1b:b6:52:c1:be:69:0b:54:70: cd:12:4e:de:07:70:d2:3a:bb:f4:a8:fd:70:de:63:8f:54:a7: 04:dd:5e:0d:1d:d0:59:b5:f5:03:f4:e0:b5:9e:7c:6f:9e:39: a6:e4:f3:44:0e:eb:37:d3:2a:dd:3b:2a:08:46:ea:57:f0:13: 5b:11:aa:fb:a2:21:9c:26:0a:e0:3b:3b:3c:f1:94:b0:cb:1d: 85:f4:96:5f:c6:95:75:4d:b5:e0:5e:14:6a:68:ba:87:69:1a: e6:b2:d4:98:d0:62:24:3d:4c:1a:31:2f:33:b5:c7:83:f5:35: 93:33:f2:be:d0:47:7a:b0:a0:d1:f5:fe:37:71:cb:21:f7:b4: f9:68:1e:a1:67:3e:1d:53:16:4c:b7:6e:1e:1a:36:19:e9:7a: 52:8f:70:2f:a4:28:1f:89:7e:e4:b3:6e:ed:a0:60:29:c7:04: 83:54:18:24:67:be:c9:7d:cd:9a:02:50:63:4e:6d:33:a4:19: 4a:55:b4:0c:29:fd:1b:41:5a:98:c6:8d:b0:e4:b3:f0:16:f3: 43:6b:04:0b:0e:78:db:18:48:b2:f4:a4:fa:7b:76:35:3d:fc: b9:67:b5:4a:77:97:e5:5b:ec:96:f5:2c:b5:9a:e9:c2:51:c1: ba:cb:b7:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fana02wKARBT0MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NzcxNWE4YTctYjJiYS00YzAyLWExMTAtYTIwYjc0NDkxYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjqYnac43yF6XF9jAMzPSlrJGNar6JEjP547 F5xgt8Bxd7jod/gFrM3Ziv51c7dms1eoNBdm0kmTfrYvlv4aswDyXQ72X+YfPxb+ IessS7icgcc/B4psllq6IkrD+MxHjDZsj/YfMTbgT1dEunVgY4NHzZvB0kMe2TEz ydHvlmPwHlc5dNBMSC/OzD3wcM5KLnlZ8iCsoSXpzIarUUM6le5IRb9mYC8d5DZm MPGDUrIcXKXbQl7ItJXJvby03E4I4kQ+bHrWTxL51hqcz6U8yG68zl/wJS0/rXhk RIXeRMQed8kWa4U8AUOlrFYnRwwytzooJ4YYzEBI1BbWhAtyEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5Pv2jd42dzhPZi8VMw4BQgRbuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDQ4ZWQ4NzItZDZhNC0z ZjNmLWJjYzMtNGRlNGQyZTcxNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBsenDXLMzZ6hu2UsG+aQtUcM0STt4HcNI6u/So/XDeY49UpwTdXg0d 0Fm19QP04LWefG+eOabk80QO6zfTKt07KghG6lfwE1sRqvuiIZwmCuA7OzzxlLDL HYX0ll/GlXVNteBeFGpouodpGuay1JjQYiQ9TBoxLzO1x4P1NZMz8r7QR3qwoNH1 /jdxyyH3tPloHqFnPh1TFky3bh4aNhnpelKPcC+kKB+JfuSzbu2gYCnHBINUGCRn vsl9zZoCUGNObTOkGUpVtAwp/RtBWpjGjbDks/AW80NrBAsOeNsYSLL0pPp7djU9 /LlntUp3l+Vb7Jb1LLWa6cJRwbrLt4U= -----END CERTIFICATE-----Generated at Sun May 4 18:23:18 2025 by rpki-client