$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa File: 206860e2-e972-3b6c-a4c3-e144604e1ae9.roa (raw, json) Hash identifier: rV/dNZ0qxPuEEZtO7uPDpHZBlrKiE+kyXpRqZ0KCwBg= Subject key identifier: 66:42:A2:3C:CD:31:5B:58:AD:DE:B7:67:26:F7:7A:9C:00:57:03:3C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBCBDC4E4CA752B0239EA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 395973 IP address blocks: 104.134.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cb:dc:4e:4c:a7:52:b0:23:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=0318d956-9a66-4fc0-bdf9-fc70f18e277b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:6e:99:e3:4c:0e:54:5d:5f:a0:35:29:bb: f7:65:80:92:55:4a:49:ac:0c:57:f1:1a:9d:0a:2f: 4c:b5:60:d2:05:97:80:68:63:0b:82:e3:83:fc:37: af:2b:54:12:67:a8:a7:8c:49:cf:29:4f:6a:11:64: eb:9b:4e:20:cf:be:25:e5:2f:82:f3:17:b0:75:82: 34:45:cd:a1:25:68:10:c3:64:39:46:4e:9e:10:aa: fb:5b:3c:52:c9:1a:c2:6a:0e:92:58:39:8b:83:a8: bd:8d:4b:16:82:16:e5:8e:35:6f:8d:40:a0:d1:92: 33:7f:8c:11:41:13:2b:2e:1d:f0:be:4d:2b:52:f4: 9a:91:b1:52:58:70:bb:c3:73:bd:0c:9e:b6:1e:7c: 44:99:0d:3e:c7:55:16:cf:0f:2b:41:05:bb:00:8b: f6:2e:45:50:1b:ad:85:e4:f3:46:cc:e6:64:27:b4: 62:7c:37:6b:ca:7a:2e:d8:d4:e5:ff:4f:5d:a3:e8: b6:17:56:34:e0:82:99:bc:04:ec:3f:a4:8e:f1:87: 0e:20:1d:b5:0b:86:1f:1d:06:96:c2:72:dd:57:1d: 01:df:b3:30:99:71:8e:13:11:2e:bb:c7:8a:75:13: 51:6f:73:5f:b6:5d:9f:95:ab:9f:89:5a:d5:2f:44: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:42:A2:3C:CD:31:5B:58:AD:DE:B7:67:26:F7:7A:9C:00:57:03:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0a:7f:e5:a2:49:23:7f:6b:bc:b7:2d:d9:4d:09:18:b8:d9: 16:ca:3c:a5:8f:40:aa:29:44:ef:b0:15:a5:b7:82:d3:eb:df: f4:01:9b:7f:b6:a6:4b:7a:c6:9d:70:4c:7a:d2:7d:f2:17:2d: 1e:9c:90:8b:58:36:5f:32:53:80:cc:b5:b7:da:ab:d7:aa:96: f4:07:e7:4e:eb:4e:1a:d8:89:63:42:8a:16:2e:34:37:f9:22: e6:12:e3:12:ca:cd:ec:aa:67:d2:72:66:c3:72:63:12:10:e0: 6d:2a:1c:e8:6c:86:dc:9d:eb:d5:2b:02:22:9d:0f:6e:b5:8d: 4e:80:51:a8:b4:f3:f7:9e:f3:6f:29:12:8d:76:4f:fc:a7:dc: a7:7b:f1:b9:8f:cc:81:8d:3b:27:56:b2:ff:63:d3:dc:e3:2d: 2e:b9:42:e7:e6:c9:93:ba:ff:95:63:c6:8d:ea:e9:54:46:a3: d7:c9:bf:7f:c7:c4:9c:8d:dd:fb:c6:b8:ea:67:f2:ac:e3:cb: a8:ed:f1:fd:a0:2c:87:3c:45:c7:d2:38:a7:4d:ae:08:bb:5a: ee:52:5b:75:ce:4e:61:c1:a4:e2:35:66:28:b2:49:a2:9f:ec: cc:56:e5:59:00:6a:c7:ab:13:62:63:5b:4d:f8:86:70:95:97: 0b:69:ab:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68vcTkynUrAjnqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MDMxOGQ5NTYtOWE2Ni00ZmMwLWJkZjktZmM3MGYxOGUyNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArixumeNMDlRdX6A1Kbv3ZYCSVUpJrAxX8Rqd Ci9MtWDSBZeAaGMLguOD/DevK1QSZ6injEnPKU9qEWTrm04gz74l5S+C8xewdYI0 Rc2hJWgQw2Q5Rk6eEKr7WzxSyRrCag6SWDmLg6i9jUsWghbljjVvjUCg0ZIzf4wR QRMrLh3wvk0rUvSakbFSWHC7w3O9DJ62HnxEmQ0+x1UWzw8rQQW7AIv2LkVQG62F 5PNGzOZkJ7RifDdrynou2NTl/09do+i2F1Y04IKZvATsP6SO8YcOIB21C4YfHQaW wnLdVx0B37MwmXGOExEuu8eKdRNRb3Nftl2flaufiVrVL0SzdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZCojzNMVtYrd63Zyb3epwAVwM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjA2ODYwZTItZTk3Mi0z YjZjLWE0YzMtZTE0NDYwNGUxYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsKf+WiSSN/a7y3LdlNCRi42RbKPKWPQKopRO+wFaW3gtPr3/QBm3+2 pkt6xp1wTHrSffIXLR6ckItYNl8yU4DMtbfaq9eqlvQH507rThrYiWNCihYuNDf5 IuYS4xLKzeyqZ9JyZsNyYxIQ4G0qHOhshtyd69UrAiKdD261jU6AUai08/ee828p Eo12T/yn3Kd78bmPzIGNOydWsv9j09zjLS65QufmyZO6/5Vjxo3q6VRGo9fJv3/H xJyN3fvGuOpn8qzjy6jt8f2gLIc8RcfSOKdNrgi7Wu5SW3XOTmHBpOI1ZiiySaKf 7MxW5VkAaserE2JjW034hnCVlwtpq2g= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:25 2025 by rpki-client