$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa File: 04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json) Hash identifier: 8KLnoiQGtCamiFD5cSahcnEePb5i3w10WupasPGMjck= Subject key identifier: B4:76:5E:D7:58:4B:16:68:2B:9A:30:9F:F9:C1:5B:BF:00:51:69:18 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FB3DBFBF2C2142428080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fb:3d:bf:bf:2c:21:42:42:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=0154fe19-9a9f-4949-abd4-b75bd1bd261e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:20:f7:9b:73:5d:38:1d:d2:39:b5:59:12: 9c:4f:0f:a9:f7:ee:15:1c:15:8c:6a:e8:3b:30:07: b5:f6:af:5f:3a:19:58:6e:dd:e7:36:c6:78:1f:d8: 75:4b:dc:78:4e:9c:72:59:d0:83:b4:ed:13:75:22: b7:92:2f:cc:81:ad:61:8e:36:96:a5:b4:5f:2d:f8: e1:7a:a9:94:7a:d1:04:c5:bc:f6:b0:e8:cd:d8:51: 1a:2e:7a:a7:a0:61:89:2a:63:fe:68:31:8f:05:25: 99:40:4d:77:ec:e5:82:3e:e3:5c:40:34:d8:67:ec: 4d:72:55:73:48:51:6a:a1:4f:97:5c:0b:85:bf:af: 09:7c:41:dc:2d:36:8e:6f:1f:d9:e3:60:24:28:11: 10:e0:6e:14:73:5e:c0:31:52:c1:9a:08:4d:14:82: f1:fb:bf:89:51:3f:d2:b3:cf:a6:23:20:82:a3:c0: 67:90:bc:24:cc:8c:b5:75:24:cd:11:57:89:b9:03: 1a:a9:e2:54:c5:3c:41:36:8a:ce:a9:a9:5a:81:35: 70:3f:00:1f:a4:37:8e:f8:05:6f:62:24:9f:4d:90: 9c:9e:a7:14:8a:bb:2d:51:c9:b9:f3:37:31:60:f6: 8a:ae:3c:b7:fa:35:d0:ce:9a:71:ba:88:3e:5d:58: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:76:5E:D7:58:4B:16:68:2B:9A:30:9F:F9:C1:5B:BF:00:51:69:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:44:19:57:15:16:74:d2:d1:ff:76:de:69:86:63:0f:10:59: 75:8a:02:ca:b8:64:5c:f0:69:25:b8:c7:23:cb:66:e6:87:22: e4:f2:67:f9:a1:24:46:fe:4f:84:84:24:11:f3:55:49:c7:15: aa:52:d0:db:a3:4d:5b:d4:f4:8e:fa:ca:44:34:54:a6:a6:3b: 08:50:4c:0c:f8:0a:d4:1e:26:cf:84:ca:3b:4a:e6:af:08:82: b3:ba:10:01:d2:da:20:3a:45:37:04:09:b0:1c:63:47:ca:be: b5:0b:dd:6e:9f:5c:c5:b1:16:1b:27:fe:69:b7:82:49:28:08: 40:12:f6:19:57:24:72:72:7c:9a:7d:b2:ad:57:e2:0b:30:c6: 70:17:d1:bf:f7:bf:a5:cb:74:c6:37:f0:f8:03:71:b3:9b:1b: 2c:81:7e:25:4b:b3:b4:29:65:8e:35:f0:fe:3e:5c:8f:7b:b8: 0d:ba:69:85:e6:84:fa:22:a0:3f:1e:6f:c0:af:10:4e:ea:7f: f0:f1:69:93:5f:98:13:5a:30:9f:e7:89:08:95:79:b1:bd:b8: cb:bd:ea:7e:6b:e2:21:48:16:a1:d8:e4:a1:1d:dc:e2:bd:bc: 02:e8:20:77:ba:43:96:56:39:e8:d4:d8:0e:43:13:67:6a:a3: e9:27:42:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPs9v78sIUJCgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MDE1NGZlMTktOWE5Zi00OTQ5LWFiZDQtYjc1YmQxYmQyNjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Eg95tzXTgd0jm1WRKcTw+p9+4VHBWMaug7 MAe19q9fOhlYbt3nNsZ4H9h1S9x4TpxyWdCDtO0TdSK3ki/Mga1hjjaWpbRfLfjh eqmUetEExbz2sOjN2FEaLnqnoGGJKmP+aDGPBSWZQE137OWCPuNcQDTYZ+xNclVz SFFqoU+XXAuFv68JfEHcLTaObx/Z42AkKBEQ4G4Uc17AMVLBmghNFILx+7+JUT/S s8+mIyCCo8BnkLwkzIy1dSTNEVeJuQMaqeJUxTxBNorOqalagTVwPwAfpDeO+AVv YiSfTZCcnqcUirstUcm58zcxYPaKrjy3+jXQzppxuog+XVgkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR2XtdYSxZoK5own/nBW78AUWkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRlNWE1ZGItM2ExOS0z MTYxLWIxODctN2FkNGNkODA4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJEGVcVFnTS0f923mmGYw8QWXWKAsq4ZFzwaSW4xyPLZuaHIuTyZ/mh JEb+T4SEJBHzVUnHFapS0NujTVvU9I76ykQ0VKamOwhQTAz4CtQeJs+EyjtK5q8I grO6EAHS2iA6RTcECbAcY0fKvrUL3W6fXMWxFhsn/mm3gkkoCEAS9hlXJHJyfJp9 sq1X4gswxnAX0b/3v6XLdMY38PgDcbObGyyBfiVLs7QpZY418P4+XI97uA26aYXm hPoioD8eb8CvEE7qf/DxaZNfmBNaMJ/niQiVebG9uMu96n5r4iFIFqHY5KEd3OK9 vALoIHe6Q5ZWOejU2A5DE2dqo+knQtw= -----END CERTIFICATE-----Generated at Sat Apr 5 04:40:54 2025 by rpki-client