$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa File: d928e18b-9866-37ab-a256-596a1223db7b.roa (raw, json) Hash identifier: pn7T6uu3i3xckKSXzfys4LFdfr1sbnUmm7wxmw2PN18= Subject key identifier: 5D:1E:E6:42:E8:25:9F:F3:AA:13:ED:51:DC:B8:6F:66:40:4C:09:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285849B6DF493F391C8D392D77B780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 36411 IP address blocks: 104.132.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:49:3f:39:1c:8d:39:2d:77:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=cb4fd3b6-f3a7-4c11-a9be-37fa9e21415a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1c:3b:4b:1d:4d:57:7b:45:5c:58:35:2f:41: 76:ca:d1:bd:57:a4:b2:3f:4d:24:d1:e6:4c:20:2e: ad:de:1c:c0:9c:27:47:d5:18:43:23:2f:fd:b9:d0: 96:64:95:04:7a:3c:e9:e8:6e:a3:23:11:19:bb:b5: 8d:85:0b:5e:15:f6:f8:a7:c3:6e:ac:fd:2c:0b:c0: 74:2b:04:b8:c7:8c:e6:01:03:36:be:49:1b:3c:93: 0b:11:9f:35:85:40:6a:e9:2d:84:69:20:65:34:dc: 95:3e:33:4a:b1:9a:d1:2f:de:7b:e0:2f:b0:73:0d: e3:04:46:cb:37:8b:9f:c8:e5:85:1f:db:fd:05:de: 4e:cc:73:53:ba:7f:c9:3f:d6:15:19:de:a9:f2:74: 0e:01:aa:22:43:6a:61:f9:1b:60:00:36:7e:99:07: e7:b6:f2:42:c3:06:80:58:67:b6:ff:59:b6:45:3c: b2:f2:4e:e0:2d:f9:a9:6a:ca:18:d6:29:fc:12:54: 26:4b:29:81:21:a1:5a:23:d1:86:4f:6e:d0:40:f9: 2a:36:f6:9b:5f:d3:dd:0c:95:81:c8:aa:68:1f:82: fe:95:13:a3:4d:58:fc:e5:43:7d:fe:1c:b7:5e:fa: 93:10:0b:9b:f0:09:bf:a3:db:56:53:89:d9:02:85: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:E6:42:E8:25:9F:F3:AA:13:ED:51:DC:B8:6F:66:40:4C:09:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:10:97:d2:31:c1:8e:d0:31:9c:82:25:cb:7a:ea:be:a4:97: 4f:7a:39:d2:1c:4c:59:53:99:aa:7b:34:7b:81:af:2d:f7:c4: f3:c2:b5:db:91:c5:21:84:fa:0d:e1:a9:39:7e:55:c7:f0:cd: 07:e7:a2:2c:ac:68:f5:8f:d4:3f:0b:e2:be:05:ea:3d:2d:60: 06:d2:e5:5b:89:76:5f:ea:b6:d7:67:3b:f9:ff:a5:08:37:77: 2c:a2:f8:f0:9c:bc:05:00:7f:09:f8:61:3d:4a:13:28:76:5d: d3:1c:71:6a:1b:ec:20:5c:b8:fc:7f:59:d2:6b:5c:9e:b1:da: 4e:4f:54:5c:b9:19:fe:3e:a3:e0:8a:4c:6a:a5:58:4b:b2:26: 4c:e5:c9:45:9d:c3:10:79:27:08:d7:ec:c7:91:3f:e9:1f:ea: 80:45:63:fa:86:42:56:1c:02:66:5f:a9:cd:a5:80:33:fb:61: dc:ab:f6:03:77:6e:9b:b3:5e:4d:ef:3a:16:d5:ee:25:ee:70: 6e:7e:6a:52:f4:9b:21:22:c2:b4:d0:3d:e7:cb:fe:ba:85:c0: 21:5b:fb:b5:58:d7:96:f5:76:c7:91:f8:d3:65:af:5f:e1:9f: 74:64:9d:c0:7b:5e:0b:07:eb:2e:d4:07:c0:b3:e3:51:c9:21: cf:dd:fa:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230k/ORyNOS13t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk Y2I0ZmQzYjYtZjNhNy00YzExLWE5YmUtMzdmYTllMjE0MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghw7Sx1NV3tFXFg1L0F2ytG9V6SyP00k0eZM IC6t3hzAnCdH1RhDIy/9udCWZJUEejzp6G6jIxEZu7WNhQteFfb4p8NurP0sC8B0 KwS4x4zmAQM2vkkbPJMLEZ81hUBq6S2EaSBlNNyVPjNKsZrRL9574C+wcw3jBEbL N4ufyOWFH9v9Bd5OzHNTun/JP9YVGd6p8nQOAaoiQ2ph+RtgADZ+mQfntvJCwwaA WGe2/1m2RTyy8k7gLfmpasoY1in8ElQmSymBIaFaI9GGT27QQPkqNvabX9PdDJWB yKpoH4L+lROjTVj85UN9/hy3XvqTEAub8Am/o9tWU4nZAoXROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0e5kLoJZ/zqhPtUdy4b2ZATAkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDkyOGUxOGItOTg2Ni0z N2FiLWEyNTYtNTk2YTEyMjNkYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwQl9IxwY7QMZyCJct66r6kl096OdIcTFlTmap7NHuBry33xPPCtduR xSGE+g3hqTl+VcfwzQfnoiysaPWP1D8L4r4F6j0tYAbS5VuJdl/qttdnO/n/pQg3 dyyi+PCcvAUAfwn4YT1KEyh2XdMccWob7CBcuPx/WdJrXJ6x2k5PVFy5Gf4+o+CK TGqlWEuyJkzlyUWdwxB5JwjX7MeRP+kf6oBFY/qGQlYcAmZfqc2lgDP7Ydyr9gN3 bpuzXk3vOhbV7iXucG5+alL0myEiwrTQPefL/rqFwCFb+7VY15b1dseR+NNlr1/h n3RkncB7XgsH6y7UB8Cz41HJIc/d+lk= -----END CERTIFICATE-----Generated at Sun May 4 18:52:29 2025 by rpki-client