$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa File: 100d407b-0506-34eb-b5f6-2bf73b584406.roa (raw, json) Hash identifier: UY5nQfm1kkpC9VVHOyVsGU8rcq1hE0rgtNexz33rT+k= Subject key identifier: BC:CF:E2:5E:E3:88:30:1E:31:48:57:89:F6:FF:F1:E4:7F:90:FD:39 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E9FB9FC8531DF2C2BD00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e9:fb:9f:c8:53:1d:f2:c2:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=d7b9d14b-520e-4ca9-8b0e-4cf377c8c56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:30:14:0e:c7:e9:48:8e:67:b3:c6:75:1f: 1a:29:3c:aa:7d:c2:75:52:ec:c4:e8:a5:c7:cd:e4: 9c:18:f2:88:4a:1a:6c:92:ba:9b:59:d6:c5:bc:6d: b8:d5:eb:4c:af:76:59:3c:e8:f9:7d:eb:af:d5:f1: 50:0f:d8:6a:d8:2c:7c:c8:24:af:b8:30:62:cc:d6: 04:b3:da:4a:d3:4d:0b:88:81:aa:61:a5:7c:17:e4: 09:05:81:3b:72:bd:de:d6:1a:23:af:d7:05:79:56: c4:8c:1f:7f:4c:6f:2d:fd:51:c0:7f:6b:48:6a:0d: b2:fc:69:74:bb:e9:71:03:7e:27:31:47:ab:22:b3: 77:42:a1:8e:1a:19:75:4a:a5:75:1f:fa:59:76:9f: 2d:a5:26:9d:fc:ae:37:00:b3:85:a6:56:33:ea:dd: c4:a9:a8:c0:47:da:a0:06:ac:e8:5b:15:23:69:a4: c4:03:e3:34:ef:cd:44:0e:6a:11:f6:59:e2:dc:4d: c4:71:62:ae:a8:ed:37:95:4a:f6:9d:6a:79:2c:d6: 6c:c0:39:a6:2c:69:9b:7b:e8:81:7e:6a:d2:49:b0: 31:3f:d6:d9:e5:77:c6:1f:fe:3d:c0:ce:56:e3:f2: 3a:ed:32:90:a1:5e:c7:50:4b:8b:7f:a2:4d:e7:d2: d6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CF:E2:5E:E3:88:30:1E:31:48:57:89:F6:FF:F1:E4:7F:90:FD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/100d407b-0506-34eb-b5f6-2bf73b584406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:8d:44:58:a3:58:41:ba:f4:42:4e:4d:6e:69:f7:cc:ff:be: 36:b7:65:3e:b2:4a:9c:eb:cc:70:40:99:9e:a1:12:90:c4:5e: 50:b2:e9:58:2d:6d:a0:ae:32:39:ba:01:e1:34:ec:21:0a:00: 72:88:fa:61:7d:00:a9:78:c4:d2:d9:8a:b9:88:2e:56:5c:8d: 75:85:4e:6f:46:d0:12:74:8f:43:b3:25:e3:5a:e6:d9:c4:65: be:dc:6b:5d:d4:25:1e:0b:a2:be:e0:76:71:6f:20:ff:f6:6c: c5:19:6e:e4:df:c0:01:9b:1b:5d:61:fb:6d:e5:5a:ba:c5:16: 5c:df:48:2d:16:54:37:73:0c:53:9d:e5:db:60:45:68:37:3c: 6d:8d:ac:98:de:63:ab:54:e5:be:47:4e:cc:98:cd:1e:3b:96: 95:1e:78:0a:83:69:19:72:fd:38:fe:10:b7:ac:93:3a:44:4a: 7f:52:3b:96:79:7a:bf:1f:9d:f9:50:32:42:0d:41:53:b5:cf: a6:83:2d:42:f4:9f:58:1d:27:ac:bc:bc:df:a0:40:fa:21:b8: cf:81:c6:1c:b6:0e:97:28:0d:67:72:1d:62:2d:db:7e:e8:0b: ee:3d:eb:1f:b9:d4:e6:ba:26:89:63:35:52:8c:55:f2:79:c8: e6:d2:37:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOn7n8hTHfLCvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZDdiOWQxNGItNTIwZS00Y2E5LThiMGUtNGNmMzc3YzhjNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nkwFA7H6UiOZ7PGdR8aKTyqfcJ1UuzE6KXH zeScGPKIShpskrqbWdbFvG241etMr3ZZPOj5feuv1fFQD9hq2Cx8yCSvuDBizNYE s9pK000LiIGqYaV8F+QJBYE7cr3e1hojr9cFeVbEjB9/TG8t/VHAf2tIag2y/Gl0 u+lxA34nMUerIrN3QqGOGhl1SqV1H/pZdp8tpSad/K43ALOFplYz6t3EqajAR9qg BqzoWxUjaaTEA+M0781EDmoR9lni3E3EcWKuqO03lUr2nWp5LNZswDmmLGmbe+iB fmrSSbAxP9bZ5XfGH/49wM5W4/I67TKQoV7HUEuLf6JN59LWhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzP4l7jiDAeMUhXifb/8eR/kP05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTAwZDQwN2ItMDUwNi0z NGViLWI1ZjYtMmJmNzNiNTg0NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGNRFijWEG69EJOTW5p98z/vja3ZT6ySpzrzHBAmZ6hEpDEXlCy6Vgt baCuMjm6AeE07CEKAHKI+mF9AKl4xNLZirmILlZcjXWFTm9G0BJ0j0OzJeNa5tnE Zb7ca13UJR4Lor7gdnFvIP/2bMUZbuTfwAGbG11h+23lWrrFFlzfSC0WVDdzDFOd 5dtgRWg3PG2NrJjeY6tU5b5HTsyYzR47lpUeeAqDaRly/Tj+ELeskzpESn9SO5Z5 er8fnflQMkINQVO1z6aDLUL0n1gdJ6y8vN+gQPohuM+Bxhy2DpcoDWdyHWIt237o C+496x+51Oa6JoljNVKMVfJ5yObSN/I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:23 2025 by rpki-client