$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa File: 01620e47-da9e-39c7-a15b-342b4b54372f.roa (raw, json) Hash identifier: xq4lY6CT29BRrYqoE23WSTpd/e2OJt55ECMiS4onCvY= Subject key identifier: 48:E0:05:7E:AD:CD:A0:D1:60:F1:19:03:28:3B:EE:35:60:A5:5D:37 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E5DB0C8870DC3583EA80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e5:db:0c:88:70:dc:35:83:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=032510d2-e94e-4e60-b80e-d742dfa07bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:c1:13:c1:d0:6b:5e:e3:4b:95:3f:be:06: c3:5f:df:43:f8:dc:43:ab:f0:34:79:2e:07:6a:d3: 92:ce:fb:72:d1:31:15:3f:4a:0b:7c:4c:41:5a:35: 5b:8a:cb:c2:87:af:05:7f:ed:3b:5c:b2:34:f8:be: c4:46:9e:5e:61:82:09:ca:44:ac:c3:cf:66:1c:18: ae:22:a0:4a:41:8b:d1:fe:2d:05:ad:5a:5c:6a:e7: 07:ef:ea:7d:fb:75:df:5b:68:01:9a:7c:cb:77:1c: 4d:b5:aa:c5:4e:87:31:13:0d:78:43:58:59:10:2a: ef:9f:e3:33:7b:0e:2d:10:4e:1c:dd:d1:c6:92:9e: 81:a6:2d:59:91:d1:24:15:56:5d:a2:74:fd:7c:84: 28:3a:2f:76:c1:db:7c:19:f7:16:90:79:e0:1a:7c: 2e:35:79:0f:01:53:b5:76:b3:a1:d9:9f:7a:cf:07: 30:52:bb:25:bb:bf:ed:fb:88:51:1a:0d:47:ae:e2: 2d:c0:c5:8f:d0:6e:f6:ae:b6:17:d0:4c:7e:76:32: 00:04:c1:33:61:0c:63:7c:cd:ce:8b:fa:07:c6:6c: dd:14:4c:95:78:10:61:4e:b2:54:92:c2:ac:ca:c9: 01:8e:05:ef:a0:4f:e9:8a:29:49:4d:8e:57:1c:73: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:05:7E:AD:CD:A0:D1:60:F1:19:03:28:3B:EE:35:60:A5:5D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:90:fa:fd:fa:01:e9:a8:0d:ff:a4:1e:cd:51:44:9d:b9:21: 36:1e:54:92:ae:ca:f8:7f:fa:01:54:f7:98:f5:e9:30:2e:93: cf:d9:ed:47:aa:0a:ff:12:ee:21:5c:a9:e9:39:e5:46:8d:a9: bb:d3:f1:bb:7e:58:18:92:3e:f8:a6:60:89:0e:74:2d:e7:9f: 18:25:48:2d:7f:a4:4d:f4:f0:7d:13:f0:eb:32:18:11:47:1c: fc:4a:14:40:55:3a:e1:18:8c:d6:d6:7e:91:11:06:86:9b:53: 50:20:f6:b9:05:1d:e4:49:2d:da:f9:92:11:df:f3:1d:ea:fb: e6:0e:4b:4c:c0:8e:6e:4c:3b:7e:ff:a8:5e:f7:06:ba:54:dc: 72:66:61:1c:cd:d7:e2:cb:07:10:bc:47:91:31:14:8f:82:ee: ec:57:87:30:58:08:d0:dc:ed:f9:6f:c8:26:9a:c8:10:e7:42: 6a:d3:ad:ed:59:bf:6d:84:d4:8c:49:4d:70:67:6e:68:1c:16: 8c:01:c6:9e:db:08:f5:63:d4:95:d1:ef:34:f4:99:ea:fa:28: d3:d7:6e:4d:c0:14:90:14:7b:4c:ed:78:8c:56:d0:55:45:52: 61:01:71:11:c6:97:59:d9:41:19:89:4e:fc:7c:17:2b:68:f8: 91:73:33:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOXbDIhw3DWD6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MDMyNTEwZDItZTk0ZS00ZTYwLWI4MGUtZDc0MmRmYTA3YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGPBE8HQa17jS5U/vgbDX99D+NxDq/A0eS4H atOSzvty0TEVP0oLfExBWjVbisvCh68Ff+07XLI0+L7ERp5eYYIJykSsw89mHBiu IqBKQYvR/i0FrVpcaucH7+p9+3XfW2gBmnzLdxxNtarFTocxEw14Q1hZECrvn+Mz ew4tEE4c3dHGkp6Bpi1ZkdEkFVZdonT9fIQoOi92wdt8GfcWkHngGnwuNXkPAVO1 drOh2Z96zwcwUrslu7/t+4hRGg1HruItwMWP0G72rrYX0Ex+djIABMEzYQxjfM3O i/oHxmzdFEyVeBBhTrJUksKsyskBjgXvoE/piilJTY5XHHOGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjgBX6tzaDRYPEZAyg77jVgpV03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDE2MjBlNDctZGE5ZS0z OWM3LWExNWItMzQyYjRiNTQzNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2Q+v36AemoDf+kHs1RRJ25ITYeVJKuyvh/+gFU95j16TAuk8/Z7Ueq Cv8S7iFcqek55UaNqbvT8bt+WBiSPvimYIkOdC3nnxglSC1/pE308H0T8OsyGBFH HPxKFEBVOuEYjNbWfpERBoabU1Ag9rkFHeRJLdr5khHf8x3q++YOS0zAjm5MO37/ qF73BrpU3HJmYRzN1+LLBxC8R5ExFI+C7uxXhzBYCNDc7flvyCaayBDnQmrTre1Z v22E1IxJTXBnbmgcFowBxp7bCPVj1JXR7zT0mer6KNPXbk3AFJAUe0zteIxW0FVF UmEBcRHGl1nZQRmJTvx8Fyto+JFzMz4= -----END CERTIFICATE-----Generated at Fri Mar 14 14:02:50 2025 by rpki-client