$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05e17aaa-01be-3324-bd49-0195dcdc0748.roa File: 05e17aaa-01be-3324-bd49-0195dcdc0748.roa (raw, json) Hash identifier: xlQs3+AQwDtzjP3m42r8LvoUYNieCImSVlxocq3ajEY= Subject key identifier: 01:38:4A:DA:AD:A2:B2:35:8C:30:98:72:45:37:DF:3F:87:1B:EB:F8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2B9C63C1466BA85BF38780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05e17aaa-01be-3324-bd49-0195dcdc0748.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9c:63:c1:46:6b:a8:5b:f3:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=4cbb445b-a526-45fa-b7de-f5b35abbf58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:f1:17:e6:a0:b2:38:13:a9:59:a9:b9:6a: f3:c1:1d:0c:ad:6f:4b:ab:57:4b:2d:1f:58:5e:52: 2a:e7:84:bf:dc:23:fb:75:16:8c:06:45:e0:48:70: 3f:2f:cd:75:ec:69:69:3d:cb:1b:21:3f:47:77:b0: 8f:12:cc:b2:12:2c:a4:5a:f4:c1:95:97:f4:28:6a: 8c:25:8f:0e:6f:9d:f5:97:e0:68:14:9e:8c:f4:8e: 94:37:2e:30:05:d8:85:73:f7:4b:87:82:0e:12:62: e6:f2:e4:e7:3f:d4:99:f4:a9:41:8c:87:15:f8:15: c6:5c:ae:9f:25:3e:5b:b7:d6:77:d8:76:7c:9b:d8: 08:ed:24:1d:52:08:04:bc:b7:d7:58:ea:c9:1c:b5: 23:ab:d9:1f:e2:e6:7f:3f:81:a3:d9:61:ad:22:00: 3f:a0:50:94:36:8c:bc:50:05:e4:2d:47:aa:ff:fc: 87:5a:02:62:46:ad:57:3a:73:0a:28:05:91:e5:03: ac:c4:45:56:a1:7a:c1:4b:49:d7:2f:a1:b1:f9:b0: 4f:99:67:be:ec:d7:3b:ba:6f:f1:79:5e:f1:6d:3e: 68:09:ad:97:eb:61:81:e7:76:54:88:4e:2c:06:14: fd:54:ec:cf:5a:47:13:19:2e:ce:16:ec:20:06:34: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:38:4A:DA:AD:A2:B2:35:8C:30:98:72:45:37:DF:3F:87:1B:EB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/05e17aaa-01be-3324-bd49-0195dcdc0748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c6:ae:ff:bb:30:7d:e6:57:8e:c6:00:f7:f5:05:df:39:ef: 4d:45:d9:f5:f8:68:56:51:a9:d2:57:d0:84:36:ac:f6:7c:10: da:cb:5b:83:03:91:4e:db:e9:1e:2f:35:49:95:12:9c:f6:f0: 0f:00:57:91:60:9b:a1:e1:02:75:29:63:d1:da:2a:5f:1f:61: ba:78:ce:66:03:93:c9:f5:77:b5:19:b7:b9:23:92:c0:88:43: e9:d7:a1:4f:0a:bb:02:e1:13:b2:8a:15:23:40:73:6d:b8:f0: a1:00:77:b7:d6:48:65:f9:7f:21:53:ae:6e:e1:7d:5b:f8:db: 97:36:5e:c4:63:9e:96:5b:3a:e9:10:3a:03:8a:cd:03:bb:95: 16:f5:cd:85:2f:9c:5b:81:e2:7c:a2:af:67:93:70:2b:7e:d7: 3f:0d:13:c5:2c:90:59:c2:b9:30:4b:37:f1:89:3a:9f:00:97: 37:a6:7b:29:12:1a:b1:93:48:44:3e:fa:fe:71:e3:c6:6d:33: bc:f6:21:20:2c:02:c2:6d:26:7c:9e:1c:83:ab:43:9b:f7:86: 9a:ff:3f:d3:db:45:43:e2:16:4f:c8:b7:c3:ae:46:b3:db:0d: 31:c2:9e:c9:a2:70:9c:f1:5a:15:6d:02:77:8d:67:82:b7:f9: 9c:97:9b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5xjwUZrqFvzh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NGNiYjQ0NWItYTUyNi00NWZhLWI3ZGUtZjViMzVhYmJmNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMLxF+agsjgTqVmpuWrzwR0MrW9Lq1dLLR9Y XlIq54S/3CP7dRaMBkXgSHA/L8117GlpPcsbIT9Hd7CPEsyyEiykWvTBlZf0KGqM JY8Ob531l+BoFJ6M9I6UNy4wBdiFc/dLh4IOEmLm8uTnP9SZ9KlBjIcV+BXGXK6f JT5bt9Z32HZ8m9gI7SQdUggEvLfXWOrJHLUjq9kf4uZ/P4Gj2WGtIgA/oFCUNoy8 UAXkLUeq//yHWgJiRq1XOnMKKAWR5QOsxEVWoXrBS0nXL6Gx+bBPmWe+7Nc7um/x eV7xbT5oCa2X62GB53ZUiE4sBhT9VOzPWkcTGS7OFuwgBjTLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE4StqtorI1jDCYckU33z+HG+v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDVlMTdhYWEtMDFiZS0z MzI0LWJkNDktMDE5NWRjZGMwNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3Grv+7MH3mV47GAPf1Bd85701F2fX4aFZRqdJX0IQ2rPZ8ENrLW4MD kU7b6R4vNUmVEpz28A8AV5Fgm6HhAnUpY9HaKl8fYbp4zmYDk8n1d7UZt7kjksCI Q+nXoU8KuwLhE7KKFSNAc2248KEAd7fWSGX5fyFTrm7hfVv425c2XsRjnpZbOukQ OgOKzQO7lRb1zYUvnFuB4nyir2eTcCt+1z8NE8UskFnCuTBLN/GJOp8AlzemeykS GrGTSEQ++v5x48ZtM7z2ISAsAsJtJnyeHIOrQ5v3hpr/P9PbRUPiFk/It8OuRrPb DTHCnsmicJzxWhVtAneNZ4K3+ZyXm+0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:53 2025 by rpki-client