$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa File: ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa (raw, json) Hash identifier: mfJrVEqQ3hgp64Bn6l4kEIAoepLJbfV3I+3fq2obamw= Subject key identifier: 81:BB:8A:9A:56:05:3E:48:43:C5:85:05:B8:1F:D7:17:EF:0A:36:F5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9EDE5D8F461384F809280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 15169 IP address blocks: 104.134.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:ed:e5:d8:f4:61:38:4f:80:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=5ab1189a-2100-4e4e-a05c-0930e1447183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:23:7d:ea:5f:91:d2:eb:43:a5:9d:e6:c4: bb:8c:af:15:9c:6d:aa:1e:8f:3a:9e:01:9c:0a:b5: 08:1f:d4:f5:33:01:0d:da:ed:27:ab:09:21:05:fa: 7f:dd:be:d6:40:fb:73:36:31:8f:f6:74:06:21:eb: 46:1d:56:0f:0c:b0:32:ae:59:ee:33:2c:34:00:fe: 91:62:ad:12:22:8b:24:bb:78:36:19:7f:e7:aa:5c: 61:2f:05:4a:e8:25:0f:0b:d9:44:97:93:d8:52:25: 69:2a:e4:ea:a5:6a:a6:f3:4f:13:4e:f9:16:03:61: f7:47:70:fd:e4:7f:e5:e2:6e:58:ab:75:76:c7:f2: ef:4c:e1:78:dc:bd:be:f2:05:5d:7e:a6:7f:85:8e: cd:32:49:28:ce:48:b1:83:63:5e:59:32:cd:96:d2: f3:36:2d:84:c7:47:3c:ba:b1:7f:b5:4b:2a:00:73: 4b:b9:32:5c:86:ff:5d:61:18:cf:e4:10:e3:18:1e: 41:38:ba:87:83:73:fc:08:b6:29:21:14:06:bb:56: c0:8f:27:1b:ba:84:9f:be:e5:04:2e:92:f3:53:1a: 61:2c:a4:ae:96:ab:fc:96:d7:91:cc:37:5d:05:17: 89:fd:82:c8:e1:68:23:79:1d:77:58:2a:a2:38:83: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BB:8A:9A:56:05:3E:48:43:C5:85:05:B8:1F:D7:17:EF:0A:36:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:78:74:9f:84:7b:1f:08:18:1d:97:7e:bf:dd:f1:b7:31:0d: 61:be:ad:39:10:c4:36:5b:52:27:5b:c9:2d:2c:2d:37:16:bb: f7:a2:cd:2a:8b:2d:e9:96:bf:de:2a:ba:71:d3:3f:62:ee:28: 3b:5f:5e:65:9a:59:0e:cf:7d:10:dd:3d:8c:ff:42:eb:0e:be: 81:c1:4f:24:18:e1:7b:be:ee:f4:73:fe:0d:ed:6b:44:c4:c4: c0:b0:76:b8:2f:3b:ec:e1:92:37:63:65:8c:ba:7f:03:05:7f: 9c:88:de:98:5a:12:2b:a5:d5:ca:01:7d:7e:ab:c9:1a:0c:9b: e8:38:04:47:11:b5:15:6d:e4:21:26:fc:77:c5:fe:35:72:00: 8c:a4:e8:c3:a1:86:1a:15:db:62:9b:d9:8d:6c:4e:bd:dd:58: 31:b5:98:fa:7d:61:f2:3d:61:1b:9d:d0:8f:8b:d0:a0:1c:c1: 83:73:bc:8c:f5:d9:9e:06:32:17:17:7d:e7:04:15:c2:2f:71: 17:8d:1f:54:e8:94:5e:06:f7:0b:14:e0:70:8a:fc:ad:4d:d9: a7:81:4e:e3:17:d7:12:e1:59:22:12:3d:06:54:7b:eb:56:77: 2f:5f:35:ef:08:fe:da:ad:60:d4:c7:80:1e:4b:d9:9e:88:5d: b6:d8:2f:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e3l2PRhOE+AkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NWFiMTE4OWEtMjEwMC00ZTRlLWEwNWMtMDkzMGUxNDQ3MTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCYjfepfkdLrQ6Wd5sS7jK8VnG2qHo86ngGc CrUIH9T1MwEN2u0nqwkhBfp/3b7WQPtzNjGP9nQGIetGHVYPDLAyrlnuMyw0AP6R Yq0SIosku3g2GX/nqlxhLwVK6CUPC9lEl5PYUiVpKuTqpWqm808TTvkWA2H3R3D9 5H/l4m5Yq3V2x/LvTOF43L2+8gVdfqZ/hY7NMkkozkixg2NeWTLNltLzNi2Ex0c8 urF/tUsqAHNLuTJchv9dYRjP5BDjGB5BOLqHg3P8CLYpIRQGu1bAjycbuoSfvuUE LpLzUxphLKSulqv8lteRzDddBReJ/YLI4WgjeR13WCqiOINN3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG7ippWBT5IQ8WFBbgf1xfvCjb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWY1NWRkZDAtZDRmZS0z ODM4LTliYTEtZDQwNjQ3OTc1NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC14dJ+Eex8IGB2Xfr/d8bcxDWG+rTkQxDZbUidbyS0sLTcWu/eizSqL LemWv94qunHTP2LuKDtfXmWaWQ7PfRDdPYz/QusOvoHBTyQY4Xu+7vRz/g3ta0TE xMCwdrgvO+zhkjdjZYy6fwMFf5yI3phaEiul1coBfX6ryRoMm+g4BEcRtRVt5CEm /HfF/jVyAIyk6MOhhhoV22Kb2Y1sTr3dWDG1mPp9YfI9YRud0I+L0KAcwYNzvIz1 2Z4GMhcXfecEFcIvcReNH1TolF4G9wsU4HCK/K1N2aeBTuMX1xLhWSISPQZUe+tW dy9fNe8I/tqtYNTHgB5L2Z6IXbbYL/4= -----END CERTIFICATE-----Generated at Sun May 4 10:41:34 2025 by rpki-client