$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f57a898d-e398-3bd2-a198-5fb554e9a355.roa File: f57a898d-e398-3bd2-a198-5fb554e9a355.roa (raw, json) Hash identifier: PdsgfyXZEnZ2sebrfzMwTtsDtD41TCchiR54FzTkuH0= Subject key identifier: 89:17:93:DB:EA:6B:F9:EA:D5:AF:6B:65:A7:EC:DA:E9:F5:90:6D:09 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993F9F9ABEDB23585D086F580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f57a898d-e398-3bd2-a198-5fb554e9a355.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:f9:ab:ed:b2:35:85:d0:86:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=9454ce95-60a7-4c3d-9516-924c30727bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:f2:a8:ab:bc:65:58:2d:c5:62:95:35:f3: 42:26:87:12:82:28:4e:bf:1d:95:d0:78:be:a1:06: cd:15:b0:a0:74:48:b9:fa:83:9f:4f:8b:6e:4a:70: 33:69:15:e8:ea:48:7c:7b:4f:e0:eb:c7:1e:bf:66: 6e:22:86:7d:c5:89:36:0e:ad:fa:2d:57:34:32:3a: 0a:53:29:22:26:52:e1:d4:91:af:10:7a:2d:75:78: 60:5f:5d:a9:d2:05:bc:ef:73:4c:68:98:6a:84:3c: c0:1f:49:a7:6c:24:5a:08:ab:ae:be:3c:cf:c0:fd: d0:a0:ec:c5:3f:6e:53:0a:6a:4b:2c:26:88:7a:ca: c5:c8:9d:4f:9c:8f:08:9d:e8:a7:85:4b:53:a6:52: 85:f8:c9:85:9d:1d:66:be:82:14:f0:c3:28:f4:ad: 3e:16:0f:73:ed:d6:41:31:21:1e:ba:d0:04:7e:db: 66:63:a9:3e:3c:a7:3c:61:29:83:9e:70:a0:82:33: 62:8f:95:21:0b:d9:70:6d:03:a0:89:9a:f9:13:5c: 9b:f6:5e:f7:2e:5c:e2:78:e7:b5:bc:72:9c:25:f2: 84:7a:d3:05:47:ec:3f:e0:45:99:69:99:1d:0b:5c: 94:7e:3b:20:2f:00:62:40:30:7c:89:31:98:12:31: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:93:DB:EA:6B:F9:EA:D5:AF:6B:65:A7:EC:DA:E9:F5:90:6D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f57a898d-e398-3bd2-a198-5fb554e9a355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a0:ab:95:eb:e1:5a:92:9b:ff:fc:22:ae:5f:10:37:a1:7e: c3:f4:81:68:da:34:c2:82:13:54:8a:de:a9:3d:7c:46:b5:1c: 31:3b:c3:e3:00:77:ec:5d:eb:0c:f6:11:dc:80:26:41:28:e6: 22:16:91:ff:ec:49:eb:40:e5:9b:fe:78:06:86:29:11:65:6a: 2c:be:c7:10:85:ad:6c:f8:7e:13:0f:cb:3b:76:29:93:8a:87: 78:a5:5b:35:c8:57:9b:07:b0:7d:12:48:9c:eb:d7:e4:10:46: e7:06:bd:ce:69:bb:a3:d3:c9:1e:bc:12:2d:e6:33:07:88:3e: 2a:4c:ff:8a:c0:fd:3e:83:b8:1c:f0:ff:39:90:e7:da:42:17: 9f:63:97:b5:9d:93:13:a0:3b:cc:fe:60:c1:f0:86:91:7d:79: 93:6f:3f:1a:f6:65:53:61:6d:71:7f:21:4f:46:98:30:69:7c: 15:fc:d7:0f:56:6d:b8:f0:6f:c1:f1:bd:2d:5b:88:55:6b:a7: 84:b1:de:61:1b:a8:1f:63:84:cb:4f:3d:a9:fe:b7:43:33:c9: 1a:f5:28:e6:e3:79:e5:aa:d0:d0:10:3d:44:77:b5:2f:7f:58: 49:13:ab:fe:68:0c:e1:b3:8c:67:2d:4c:f2:73:b7:36:7a:c4: 11:6f:5f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fmr7bI1hdCG9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk OTQ1NGNlOTUtNjBhNy00YzNkLTk1MTYtOTI0YzMwNzI3YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOTyqKu8ZVgtxWKVNfNCJocSgihOvx2V0Hi+ oQbNFbCgdEi5+oOfT4tuSnAzaRXo6kh8e0/g68cev2ZuIoZ9xYk2Dq36LVc0MjoK UykiJlLh1JGvEHotdXhgX12p0gW873NMaJhqhDzAH0mnbCRaCKuuvjzPwP3QoOzF P25TCmpLLCaIesrFyJ1PnI8IneinhUtTplKF+MmFnR1mvoIU8MMo9K0+Fg9z7dZB MSEeutAEfttmY6k+PKc8YSmDnnCggjNij5UhC9lwbQOgiZr5E1yb9l73LlzieOe1 vHKcJfKEetMFR+w/4EWZaZkdC1yUfjsgLwBiQDB8iTGYEjGCwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkXk9vqa/nq1a9rZafs2un1kG0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjU3YTg5OGQtZTM5OC0z YmQyLWExOTgtNWZiNTU0ZTlhMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESgq5Xr4VqSm//8Iq5fEDehfsP0gWjaNMKCE1SK3qk9fEa1HDE7w+MA d+xd6wz2EdyAJkEo5iIWkf/sSetA5Zv+eAaGKRFlaiy+xxCFrWz4fhMPyzt2KZOK h3ilWzXIV5sHsH0SSJzr1+QQRucGvc5pu6PTyR68Ei3mMweIPipM/4rA/T6DuBzw /zmQ59pCF59jl7WdkxOgO8z+YMHwhpF9eZNvPxr2ZVNhbXF/IU9GmDBpfBX81w9W bbjwb8HxvS1biFVrp4Sx3mEbqB9jhMtPPan+t0MzyRr1KObjeeWq0NAQPUR3tS9/ WEkTq/5oDOGzjGctTPJztzZ6xBFvX/o= -----END CERTIFICATE-----Generated at Sun May 4 18:47:18 2025 by rpki-client