$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa File: dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa (raw, json) Hash identifier: i952jnS2jrOuU5xNDlGXJUodGK2c4OqH3iMDqSIB0K8= Subject key identifier: E7:EA:93:C7:F3:5C:A5:76:3B:26:30:7F:3F:72:5D:2E:F9:F5:50:42 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858499F24A95541E5F770D8ED3BC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 395973 IP address blocks: 104.134.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a9:55:41:e5:f7:70:d8:ed:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=57db95d9-0513-4f9d-82d6-4a7781788524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3e:48:e0:8e:42:5b:79:cd:b6:3b:03:66:7f: 71:14:62:f0:af:ba:2d:6d:b6:cd:df:e9:22:f5:35: 84:aa:f2:8b:c4:d1:d3:28:8f:7a:02:d5:0e:a9:07: 71:c3:c6:70:45:6c:95:f6:9e:b5:f0:d6:39:2e:3e: 54:4e:79:d9:f0:42:83:fc:1e:4d:38:a2:12:fc:08: bb:4a:12:c7:ba:44:9b:42:69:80:ef:0e:21:f7:84: 4b:58:a8:08:f4:f8:46:23:ba:6e:bd:25:60:a3:7a: ce:39:28:d4:5a:ad:c6:ac:50:f6:2b:4f:7c:c5:4a: b6:e3:83:5f:cd:4b:8d:f9:64:b9:a8:c8:ed:f9:11: ff:46:da:4d:72:40:12:36:e0:46:1c:d8:e7:81:62: a0:61:80:95:c6:4a:bd:72:15:79:b2:e2:f6:97:9b: a0:b4:e0:79:bf:28:e5:9b:97:e1:4b:50:18:ce:4a: 26:f2:95:d5:42:f2:f2:99:c0:63:1b:3b:75:5f:79: 87:74:7e:fe:f7:3f:91:66:59:24:48:c0:c9:4e:dd: 64:1b:cd:4e:30:71:17:4d:50:b5:64:e7:46:cd:91: 2d:65:8f:c2:33:ea:f6:86:55:6e:2e:c0:3f:8c:44: 1f:b0:65:c0:5d:a9:54:ab:8c:50:9c:9d:00:e4:02: 7a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:93:C7:F3:5C:A5:76:3B:26:30:7F:3F:72:5D:2E:F9:F5:50:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dc9fdc00-f5e8-3de1-8026-79bffccd17f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4d:f2:9a:80:af:1c:59:ac:06:71:44:bb:42:af:ee:b8:9b: 8c:11:24:61:0c:cc:e9:5a:d5:4d:3a:7c:7f:6d:17:9f:7a:cf: a6:28:36:f2:46:5c:b2:0e:d4:e1:af:db:7b:87:fb:24:88:84: 19:0c:ab:9f:f6:32:a6:09:42:b5:8f:59:5a:44:ac:81:d4:14: 13:5a:28:68:9d:e1:0d:9a:f9:e0:b5:30:e8:52:c6:26:2c:7e: 40:3e:04:01:33:32:e4:f7:98:5f:7d:45:c0:8e:1e:b8:11:2c: 2b:0c:04:1f:9e:a0:2d:03:be:72:69:eb:63:c8:60:a6:89:af: ff:5e:f7:cf:00:6e:e7:f9:74:28:11:5b:fe:a5:ba:ee:ac:97: 9c:4d:fc:c7:56:ee:f4:ed:5b:9d:90:97:8b:ed:34:42:39:75: 58:f4:31:95:80:be:9b:45:c3:27:e0:fe:7d:32:d3:12:1e:cd: 0e:a4:bc:19:38:d5:87:47:37:c6:37:99:8f:84:d4:4e:9d:82: 85:fe:c4:c2:7e:3c:bb:14:c0:01:76:f4:aa:09:61:54:c1:72: 63:cf:92:8d:b7:66:f6:0f:0f:b5:d2:5f:69:c5:dd:1a:17:41: 2a:91:9e:95:43:60:83:a5:b2:0e:79:76:7e:2f:64:ac:e6:8a: c5:9b:14:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKlVQeX3cNjtO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTdkYjk1ZDktMDUxMy00ZjlkLTgyZDYtNGE3NzgxNzg4NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz5I4I5CW3nNtjsDZn9xFGLwr7otbbbN3+ki 9TWEqvKLxNHTKI96AtUOqQdxw8ZwRWyV9p618NY5Lj5UTnnZ8EKD/B5NOKIS/Ai7 ShLHukSbQmmA7w4h94RLWKgI9PhGI7puvSVgo3rOOSjUWq3GrFD2K098xUq244Nf zUuN+WS5qMjt+RH/RtpNckASNuBGHNjngWKgYYCVxkq9chV5suL2l5ugtOB5vyjl m5fhS1AYzkom8pXVQvLymcBjGzt1X3mHdH7+9z+RZlkkSMDJTt1kG81OMHEXTVC1 ZOdGzZEtZY/CM+r2hlVuLsA/jEQfsGXAXalUq4xQnJ0A5AJ6ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfqk8fzXKV2OyYwfz9yXS759VBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGM5ZmRjMDAtZjVlOC0z ZGUxLTgwMjYtNzliZmZjY2QxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRN8pqArxxZrAZxRLtCr+64m4wRJGEMzOla1U06fH9tF596z6YoNvJG XLIO1OGv23uH+ySIhBkMq5/2MqYJQrWPWVpErIHUFBNaKGid4Q2a+eC1MOhSxiYs fkA+BAEzMuT3mF99RcCOHrgRLCsMBB+eoC0DvnJp62PIYKaJr/9e988Abuf5dCgR W/6luu6sl5xN/MdW7vTtW52Ql4vtNEI5dVj0MZWAvptFwyfg/n0y0xIezQ6kvBk4 1YdHN8Y3mY+E1E6dgoX+xMJ+PLsUwAF29KoJYVTBcmPPko23ZvYPD7XSX2nF3RoX QSqRnpVDYIOlsg55dn4vZKzmisWbFC0= -----END CERTIFICATE-----Generated at Sun May 4 18:29:10 2025 by rpki-client