$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa File: da9f656f-967e-33d1-a127-ac025a8b8520.roa (raw, json) Hash identifier: fS1+Isj2QPD07yPBRqYAfTF7cU4vRmbI4iJGQTB4h20= Subject key identifier: A1:02:12:72:A6:BF:57:79:C9:E9:52:0C:75:EE:8C:B3:4C:3E:0C:A4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA07EDE63D40DDB894EA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:07:ed:e6:3d:40:dd:b8:94:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=83177dd9-8b9e-4448-85ea-4ec155e18a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:9d:9e:43:97:22:7b:da:58:0a:81:25:de: 99:24:94:07:ff:29:30:89:bc:ca:60:02:a1:02:a5: f5:ec:f9:9a:7e:4b:82:c4:55:e7:d7:6f:9d:f2:77: 6c:5d:c1:94:c7:41:97:da:04:63:09:75:a3:e0:35: 24:53:4e:f8:e4:80:cf:14:f6:cd:76:94:b1:55:68: 49:81:3b:17:7c:62:ec:0f:35:4b:21:e9:ad:05:65: 26:03:18:d6:c7:37:77:66:ae:8d:e1:36:df:e6:58: fe:50:c3:f7:b0:6e:bc:a4:60:d1:b3:a4:7b:18:44: 26:6a:6b:80:46:75:49:be:5f:24:4a:c7:5e:45:e5: 2d:ee:bc:71:a3:b2:93:d0:04:25:23:2a:75:db:b5: b0:2a:a9:a5:a7:d4:c5:e5:18:6a:a2:15:89:a4:a2: 36:d8:1f:3b:58:32:23:57:36:22:a4:d1:92:20:26: 1d:b8:2d:04:c2:a2:4a:7a:a7:61:55:4b:b3:bc:f9: f7:3c:24:41:61:55:73:58:79:82:1f:3e:1d:95:5d: 9b:7d:95:f4:bf:0b:48:8a:45:f4:51:b3:14:2d:9e: e4:01:db:84:48:7f:8f:8f:0f:bf:3c:47:ef:8c:4b: 65:f2:a9:29:79:79:17:56:fb:69:03:d6:01:ae:2a: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:02:12:72:A6:BF:57:79:C9:E9:52:0C:75:EE:8C:B3:4C:3E:0C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da9f656f-967e-33d1-a127-ac025a8b8520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:da:86:d6:29:87:62:fc:ee:6b:d3:80:3d:33:8a:fb:d4:aa: ce:e6:05:95:c8:4c:09:7f:83:b7:37:08:1e:23:0c:26:20:63: 82:a9:03:69:8e:a5:64:4e:d7:b2:88:9b:bb:82:d5:b2:d6:65: c6:a5:ec:65:11:42:22:d7:19:cc:c0:be:f8:5a:a8:52:41:bb: 51:1b:76:d0:db:c4:19:46:d3:67:71:7c:9a:cb:6d:17:67:13: 03:06:8d:8d:e4:52:99:c3:b4:e7:aa:d1:24:be:f4:56:04:80: 19:33:b8:fd:a9:ff:48:7e:3e:af:3b:e8:c7:a2:bd:5c:ac:46: c8:60:19:a5:de:fb:a3:99:d3:3e:93:f3:55:7b:33:21:91:07: 29:13:c5:c4:7b:7d:2f:e8:35:e9:15:68:5e:21:fb:98:de:5b: 67:ea:ce:e4:a3:03:44:bc:67:46:dd:a4:51:09:bd:ae:9c:83: cd:23:0e:b8:60:e8:26:5d:5a:3c:8d:a7:69:2d:69:1e:ab:50: b0:ca:5e:5d:b2:d6:9f:4a:d1:84:1f:a3:b1:d0:bf:a7:4d:7a: 99:70:a2:e5:96:ac:55:5c:58:e2:90:f5:c2:7f:0f:61:dc:1f: fc:0a:a3:95:bc:4f:c0:50:68:46:96:03:c2:5e:ee:3f:fd:7e: 9c:62:13:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gft5j1A3biU6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ODMxNzdkZDktOGI5ZS00NDQ4LTg1ZWEtNGVjMTU1ZTE4YTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjqdnkOXInvaWAqBJd6ZJJQH/ykwibzKYAKh AqX17PmafkuCxFXn12+d8ndsXcGUx0GX2gRjCXWj4DUkU0745IDPFPbNdpSxVWhJ gTsXfGLsDzVLIemtBWUmAxjWxzd3Zq6N4Tbf5lj+UMP3sG68pGDRs6R7GEQmamuA RnVJvl8kSsdeReUt7rxxo7KT0AQlIyp127WwKqmlp9TF5RhqohWJpKI22B87WDIj VzYipNGSICYduC0EwqJKeqdhVUuzvPn3PCRBYVVzWHmCHz4dlV2bfZX0vwtIikX0 UbMULZ7kAduESH+Pjw+/PEfvjEtl8qkpeXkXVvtpA9YBriryuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKECEnKmv1d5yelSDHXujLNMPgykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGE5ZjY1NmYtOTY3ZS0z M2QxLWExMjctYWMwMjVhOGI4NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPahtYph2L87mvTgD0zivvUqs7mBZXITAl/g7c3CB4jDCYgY4KpA2mO pWRO17KIm7uC1bLWZcal7GURQiLXGczAvvhaqFJBu1EbdtDbxBlG02dxfJrLbRdn EwMGjY3kUpnDtOeq0SS+9FYEgBkzuP2p/0h+Pq876MeivVysRshgGaXe+6OZ0z6T 81V7MyGRBykTxcR7fS/oNekVaF4h+5jeW2fqzuSjA0S8Z0bdpFEJva6cg80jDrhg 6CZdWjyNp2ktaR6rULDKXl2y1p9K0YQfo7HQv6dNeplwouWWrFVcWOKQ9cJ/D2Hc H/wKo5W8T8BQaEaWA8Je7j/9fpxiE3A= -----END CERTIFICATE-----Generated at Sun May 4 10:40:07 2025 by rpki-client