$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8573ec5-3e18-3e00-919e-85b8f58e8f9e.roa File: f8573ec5-3e18-3e00-919e-85b8f58e8f9e.roa (raw, json) Hash identifier: QXGiUa02f+O2pW2p0DfW9QS6n9ToG2QIvtdQW0f5F40= Subject key identifier: E2:5B:89:BE:AD:C0:2B:39:8B:13:45:CC:69:D3:C4:62:73:FC:67:D2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858498E64B3E12DF0A7CB336B8880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8573ec5-3e18-3e00-919e-85b8f58e8f9e.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 41264 IP address blocks: 104.132.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:b3:e1:2d:f0:a7:cb:33:6b:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=35a4fa66-3886-442a-9446-3d41102c22cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:0c:f8:48:d3:4e:56:d3:e0:90:5b:55:38: 89:0d:2f:83:cd:33:48:a9:fd:e6:98:d8:41:82:75: 0e:81:ad:48:a8:da:28:dc:00:4b:42:0d:4e:b6:22: f9:48:b9:17:4b:09:dc:0f:d6:0e:9f:7e:6b:d6:df: de:c8:09:f2:85:4e:e8:62:3b:e8:69:e1:72:d5:e7: e8:db:f0:c5:14:b2:e1:2e:b3:17:b9:24:67:16:4e: 81:ff:e2:4b:ba:3b:2d:82:52:51:aa:22:d5:91:03: 02:18:ca:f2:43:e1:8b:2c:b5:4b:79:9e:3b:a2:67: ba:67:d2:2d:a6:89:4c:65:e6:d2:5c:d0:d4:9b:2d: ee:e7:66:b9:bc:e7:eb:cb:5b:74:7e:98:f0:0d:da: e8:dd:1e:08:4a:e3:03:a5:95:3f:e0:b1:6f:6d:18: fa:fa:54:a9:87:b3:5f:57:2f:81:24:9c:96:da:5b: a8:a9:2d:85:78:d6:3c:61:c8:e3:9f:c2:8c:3a:be: fc:ba:0c:9a:42:f7:07:6a:b1:eb:e8:bb:78:a9:84: 7f:8e:d5:ba:c3:da:e4:8f:79:b9:1b:62:22:75:5e: 8e:82:a9:d4:47:78:40:23:bc:53:f1:fd:22:4d:dc: e4:21:4d:79:6f:ac:7d:f5:c2:fa:52:11:83:bc:55: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5B:89:BE:AD:C0:2B:39:8B:13:45:CC:69:D3:C4:62:73:FC:67:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8573ec5-3e18-3e00-919e-85b8f58e8f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:42:33:52:4f:2e:7a:cb:b1:4e:cb:ef:2d:be:6c:78:87:01: 9b:d5:8b:e6:36:cd:1e:70:5d:9e:8d:60:20:ec:7c:31:3d:6d: c6:03:3e:11:a4:57:1d:0a:4c:e4:98:19:e7:f4:b9:ba:fb:85: de:b8:37:ae:be:58:23:ab:31:e1:1c:51:ca:e5:f6:46:1a:72: c8:fc:e0:7a:de:60:76:38:a0:58:1d:ab:ce:3d:05:a5:b8:8b: ea:d8:92:35:32:ab:eb:52:85:fc:e5:5c:b5:08:36:2a:aa:87: 56:36:f0:63:99:76:06:19:d1:e8:0b:0a:45:ab:be:8b:fc:95: 7f:d7:91:20:c1:bd:0d:a6:14:37:e5:cc:e8:22:2f:c9:3d:94: cc:bd:0f:37:31:3d:ef:c7:3f:cc:6c:f3:a4:39:f8:fd:0d:2d: f6:01:e2:55:8f:71:20:53:0f:f5:85:66:3d:5e:0e:9f:ba:d9: 28:b1:ff:7e:9d:58:f5:66:10:b8:db:bc:7b:1e:18:62:86:30: e8:e9:6c:db:ca:13:44:14:4b:3a:be:d8:8a:ed:19:af:b7:ae: 39:0c:30:a3:f2:81:14:4c:05:5f:91:70:99:fa:54:b6:d4:e2: 1e:d2:66:f2:74:2d:70:66:70:08:c9:36:77:3c:7b:64:83:3f: c4:60:1e:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZLPhLfCnyzNriIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk MzVhNGZhNjYtMzg4Ni00NDJhLTk0NDYtM2Q0MTEwMmMyMmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfwM+EjTTlbT4JBbVTiJDS+DzTNIqf3mmNhB gnUOga1IqNoo3ABLQg1OtiL5SLkXSwncD9YOn35r1t/eyAnyhU7oYjvoaeFy1efo 2/DFFLLhLrMXuSRnFk6B/+JLujstglJRqiLVkQMCGMryQ+GLLLVLeZ47ome6Z9It polMZebSXNDUmy3u52a5vOfry1t0fpjwDdro3R4ISuMDpZU/4LFvbRj6+lSph7Nf Vy+BJJyW2luoqS2FeNY8Ycjjn8KMOr78ugyaQvcHarHr6Lt4qYR/jtW6w9rkj3m5 G2IidV6OgqnUR3hAI7xT8f0iTdzkIU15b6x99cL6UhGDvFXN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJbib6twCs5ixNFzGnTxGJz/GfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjg1NzNlYzUtM2UxOC0z ZTAwLTkxOWUtODViOGY1OGU4ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIS7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRCM1JPLnrLsU7L7y2+bHiHAZvVi+Y2zR5wXZ6NYCDsfDE9bcYDPhGk Vx0KTOSYGef0ubr7hd64N66+WCOrMeEcUcrl9kYacsj84HreYHY4oFgdq849BaW4 i+rYkjUyq+tShfzlXLUINiqqh1Y28GOZdgYZ0egLCkWrvov8lX/XkSDBvQ2mFDfl zOgiL8k9lMy9DzcxPe/HP8xs86Q5+P0NLfYB4lWPcSBTD/WFZj1eDp+62Six/36d WPVmELjbvHseGGKGMOjpbNvKE0QUSzq+2IrtGa+3rjkMMKPygRRMBV+RcJn6VLbU 4h7SZvJ0LXBmcAjJNnc8e2SDP8RgHkY= -----END CERTIFICATE-----Generated at Sun May 4 20:35:34 2025 by rpki-client