$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa File: b86920eb-93dd-3e90-94cb-78aa809d61f3.roa (raw, json) Hash identifier: hTynOfnN/TFjCdES1LDkYhkIbUvFmA8gDL9XmT6qOtU= Subject key identifier: 1A:F3:34:37:16:44:6B:53:B5:F3:B5:38:29:2A:9A:C9:9D:6D:25:E3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848D705C3475737055A74440400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa Signing time: Mon 10 Feb 2025 20:37:18 +0000 ROA not before: Mon 10 Feb 2025 20:37:18 +0000 ROA not after: Sun 11 May 2025 19:37:18 +0000 asID: 36411 IP address blocks: 104.132.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:05:c3:47:57:37:05:5a:74:44:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 10 20:37:18 2025 GMT Not After : May 11 19:37:18 2025 GMT Subject: CN=c6a2eab6-3143-450f-bea2-0bf4eda5d199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:f5:c8:8b:63:6e:80:65:7b:a0:2c:ed:7e: 3e:8e:5b:c7:5a:1f:2c:5e:24:91:64:f2:ea:bf:27: ad:43:fc:4a:c0:59:25:d7:09:17:2e:3e:ac:4f:67: 10:ad:52:4d:fa:1d:70:b2:ed:be:ff:1b:53:04:52: 10:e1:f0:ee:04:0f:ae:a4:95:f4:7f:14:c4:8e:d1: 8d:61:50:77:34:6b:90:63:6d:d9:81:e5:14:52:ea: d2:62:c0:4b:d0:ea:fa:8b:e5:ff:ae:a3:dd:89:ac: f9:ec:3f:29:ff:6c:99:9b:83:4a:53:34:40:5c:28: 5e:7a:54:c8:89:2f:7f:a3:f1:7f:c9:a1:be:7f:5e: b7:3c:f3:e2:4d:7c:7b:4c:c0:54:cb:95:e6:dc:16: 40:6f:c5:8b:0f:57:38:cd:90:e9:ca:79:40:f0:67: 36:95:39:43:ea:c8:1e:09:e6:4b:92:59:6c:2f:42: 64:18:33:63:95:2b:24:dd:da:9b:4d:c0:cc:1f:bb: 99:1c:53:73:c5:2d:6e:80:4c:af:8f:29:f3:6f:ba: 3e:93:9a:92:af:0a:c6:ed:67:7a:38:60:9a:23:70: 8d:47:f1:cd:83:31:f1:38:f3:1a:f7:4b:f2:fa:06: 68:4a:e0:37:b1:7a:26:2e:51:76:4c:ea:3d:7f:cc: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:34:37:16:44:6B:53:B5:F3:B5:38:29:2A:9A:C9:9D:6D:25:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b86920eb-93dd-3e90-94cb-78aa809d61f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:61:b7:67:cb:0a:2b:2b:ed:8d:54:04:15:fa:e4:24:59:dd: 92:93:f1:69:9d:17:40:a0:a0:c4:e3:b1:c9:78:e3:46:7c:cf: f9:b7:0b:5a:07:51:1f:12:88:97:6d:6b:f6:3a:ca:3a:3b:d2: 1c:e1:1e:3f:af:c6:42:92:c5:04:2d:9c:84:56:92:2a:e7:9c: 53:7a:de:e0:74:2f:5e:85:69:38:fc:59:75:bd:85:2f:0d:d2: 04:fb:78:91:bc:b8:25:26:35:e7:05:23:36:3f:72:b9:76:d7: d3:d0:77:93:91:c5:a2:46:63:10:17:80:90:58:d2:c5:b6:3c: 7d:3e:f3:3f:58:bc:5b:9d:c2:10:b7:86:e3:46:4a:e0:54:46: 9b:56:24:47:70:07:6a:25:90:3b:a3:99:c0:5b:e3:e4:54:b9: c1:32:08:61:8a:dd:fd:92:bc:2f:de:d1:8d:28:af:0c:20:d6: 8e:a6:5c:f0:86:03:76:55:18:ca:65:7e:0f:78:0e:a4:07:89: 84:61:f0:a8:99:38:c1:28:1e:e4:40:e3:5e:23:fd:7d:7f:82: 14:32:ff:6c:0a:c0:fe:59:2b:82:f2:55:25:64:68:d9:66:49: d1:f2:85:6f:eb:f6:fe:5f:63:ca:25:dc:6d:9a:2f:cf:f7:e0: 06:9a:ce:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXBcNHVzcFWnREBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIxMDIwMzcxOFoXDTI1MDUxMTE5MzcxOFowLzEtMCsGA1UEAxMk YzZhMmVhYjYtMzE0My00NTBmLWJlYTItMGJmNGVkYTVkMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAb1yItjboBle6As7X4+jlvHWh8sXiSRZPLq vyetQ/xKwFkl1wkXLj6sT2cQrVJN+h1wsu2+/xtTBFIQ4fDuBA+upJX0fxTEjtGN YVB3NGuQY23ZgeUUUurSYsBL0Or6i+X/rqPdiaz57D8p/2yZm4NKUzRAXCheelTI iS9/o/F/yaG+f163PPPiTXx7TMBUy5Xm3BZAb8WLD1c4zZDpynlA8Gc2lTlD6sge CeZLkllsL0JkGDNjlSsk3dqbTcDMH7uZHFNzxS1ugEyvjynzb7o+k5qSrwrG7Wd6 OGCaI3CNR/HNgzHxOPMa90vy+gZoSuA3sXomLlF2TOo9f8xQIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrzNDcWRGtTtfO1OCkqmsmdbSXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjg2OTIwZWItOTNkZC0z ZTkwLTk0Y2ItNzhhYTgwOWQ2MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtht2fLCisr7Y1UBBX65CRZ3ZKT8WmdF0CgoMTjscl440Z8z/m3C1oH UR8SiJdta/Y6yjo70hzhHj+vxkKSxQQtnIRWkirnnFN63uB0L16FaTj8WXW9hS8N 0gT7eJG8uCUmNecFIzY/crl219PQd5ORxaJGYxAXgJBY0sW2PH0+8z9YvFudwhC3 huNGSuBURptWJEdwB2olkDujmcBb4+RUucEyCGGK3f2SvC/e0Y0orwwg1o6mXPCG A3ZVGMplfg94DqQHiYRh8KiZOMEoHuRA414j/X1/ghQy/2wKwP5ZK4LyVSVkaNlm SdHyhW/r9v5fY8ol3G2aL8/34AaaziA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:12 2025 by rpki-client