$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa File: d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa (raw, json) Hash identifier: c/vVK24KOAN+D1IZiphHUxC7XqvlAcDPDKCeVxuIGMU= Subject key identifier: 06:BB:87:FB:25:5C:B8:38:CB:8F:7B:91:72:DF:20:B7:6C:E8:0F:25 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24D26864FE05DDF90BA600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d2:68:64:fe:05:dd:f9:0b:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=63e68a49-0e97-48c0-b7ea-da37ccb87874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:21:a9:69:25:e0:c7:9c:42:0e:a7:1e:ed:a0: 4e:eb:02:cd:3e:0b:96:61:75:42:1c:45:fd:ce:03: ec:8d:70:1d:88:74:68:09:b6:2d:af:6a:91:71:3c: 0f:e1:95:d1:b6:4c:8a:29:bb:e0:ce:13:3c:fd:f5: 6d:53:a3:48:71:f0:4b:89:27:82:cd:99:ca:ed:3c: 38:05:28:8f:cd:a3:58:48:61:a9:16:57:08:ec:c0: 94:98:cc:3f:7a:ee:1e:22:ea:f7:c8:23:d5:bd:09: 60:2e:16:a3:92:8d:1a:dc:4b:d3:d4:cb:06:72:b1: 2c:14:49:38:6f:b5:ca:ca:3f:c3:8b:00:30:67:d3: dc:8e:97:3e:1c:89:e6:11:ca:27:2c:9e:ca:20:cd: c9:5f:b1:b8:b3:9b:01:61:fa:69:be:ea:85:e0:21: 88:19:91:e2:4d:32:05:b6:b0:83:ca:91:5a:eb:85: e7:5b:f5:bb:c7:70:c4:07:10:07:9d:1e:51:90:2f: fe:81:e4:2e:9f:46:5e:4d:ba:bc:e6:bd:b1:e3:aa: 21:a3:9d:e3:d9:be:e9:d5:c2:f3:23:a4:25:00:62: e8:1e:74:07:40:e7:36:0e:42:38:c3:c0:24:99:75: db:88:f0:e0:46:68:6a:7e:7b:cf:78:5e:bf:bf:b3: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BB:87:FB:25:5C:B8:38:CB:8F:7B:91:72:DF:20:B7:6C:E8:0F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ef:3c:f6:0c:e6:7b:1c:0e:97:ae:af:05:cb:c0:26:1f:5b: 21:f7:d1:32:5d:64:0b:c0:05:9f:77:33:38:bb:3c:a3:6f:da: 52:50:4d:0c:26:59:93:1e:94:e9:6b:99:24:51:ae:bd:7b:69: e8:7d:7f:c6:fc:b0:d5:93:1a:1f:8e:96:28:7a:24:7f:2d:f6: ec:e7:ec:17:0f:7b:a5:5f:a9:20:93:8f:e0:d9:bd:a9:51:0a: 27:d9:7f:a7:aa:7e:e5:cb:a1:a2:43:ae:21:9b:37:48:3a:00: 1e:b4:5b:0c:b7:9f:23:fa:f7:4e:b4:76:c6:f7:aa:b0:c8:4d: 99:f8:23:f6:52:4f:e7:17:bf:31:b1:1c:a2:af:c9:23:d0:89: 96:91:7c:9a:8d:ec:9b:c0:6d:03:26:d8:7b:2c:55:3d:1d:b5: 0e:1a:fa:1a:89:f3:08:c3:34:5f:8d:6f:58:1b:0d:aa:90:81: 0d:7c:fd:36:8c:6f:df:45:03:27:8e:b0:44:6a:07:9b:d7:08: e5:d8:31:ec:18:28:69:93:4f:c3:c0:89:d5:f2:77:e4:44:64: 3f:3c:b0:fa:fe:23:58:47:d4:27:28:3b:b8:72:b1:af:76:b9: 73:ff:3f:ed:f6:e0:a9:b2:2e:ed:5d:ae:55:2b:5a:06:88:7e: 09:b8:a4:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNJoZP4F3fkLpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NjNlNjhhNDktMGU5Ny00OGMwLWI3ZWEtZGEzN2NjYjg3ODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliGpaSXgx5xCDqce7aBO6wLNPguWYXVCHEX9 zgPsjXAdiHRoCbYtr2qRcTwP4ZXRtkyKKbvgzhM8/fVtU6NIcfBLiSeCzZnK7Tw4 BSiPzaNYSGGpFlcI7MCUmMw/eu4eIur3yCPVvQlgLhajko0a3EvT1MsGcrEsFEk4 b7XKyj/DiwAwZ9Pcjpc+HInmEconLJ7KIM3JX7G4s5sBYfppvuqF4CGIGZHiTTIF trCDypFa64XnW/W7x3DEBxAHnR5RkC/+geQun0ZeTbq85r2x46oho53j2b7p1cLz I6QlAGLoHnQHQOc2DkI4w8AkmXXbiPDgRmhqfnvPeF6/v7Nz7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa7h/slXLg4y497kXLfILds6A8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDhmZTJhMjItMjc1NC0z ZTAxLTljM2MtOWMxNTQzNjQ3MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPvPPYM5nscDpeurwXLwCYfWyH30TJdZAvABZ93Mzi7PKNv2lJQTQwm WZMelOlrmSRRrr17aeh9f8b8sNWTGh+Olih6JH8t9uzn7BcPe6VfqSCTj+DZvalR CifZf6eqfuXLoaJDriGbN0g6AB60Wwy3nyP69060dsb3qrDITZn4I/ZST+cXvzGx HKKvySPQiZaRfJqN7JvAbQMm2HssVT0dtQ4a+hqJ8wjDNF+Nb1gbDaqQgQ18/TaM b99FAyeOsERqB5vXCOXYMewYKGmTT8PAidXyd+REZD88sPr+I1hH1CcoO7hysa92 uXP/P+324KmyLu1drlUrWgaIfgm4pPk= -----END CERTIFICATE-----Generated at Sun May 4 18:29:44 2025 by rpki-client