$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/11035e37-5ecb-3460-a669-1831a850869e.roa File: 11035e37-5ecb-3460-a669-1831a850869e.roa (raw, json) Hash identifier: whhxP3L004OabTrU6aFfFxnMs0vOdBpN0RXbNDFEIsQ= Subject key identifier: 7E:DF:08:43:70:5F:4B:5E:6E:29:57:5E:E8:6B:D6:5B:F4:61:6B:EC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64643E4661CA435717300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/11035e37-5ecb-3460-a669-1831a850869e.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:46:43:e4:66:1c:a4:35:71:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=6897e332-007d-4e02-b35f-95bfeb19dc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:70:7a:bd:03:12:56:7c:d0:63:3d:a1:0f: 06:59:46:2b:e9:fd:9c:32:8b:6b:f1:37:d9:d9:60: 05:bf:da:9d:20:69:74:c7:5d:c2:70:ec:ae:ac:20: 20:90:4f:00:65:d9:d1:04:97:cf:a2:63:f2:45:43: c9:6a:d2:f4:32:c9:8f:91:8d:ac:7c:18:00:d5:e7: 91:e3:9b:a5:09:97:4f:a2:dc:80:7d:1e:f3:fe:c3: b0:9b:e2:a9:64:bb:de:e7:ac:ce:79:c2:a2:8e:28: 5e:bb:7e:21:07:87:ce:e2:80:43:57:ee:93:ae:b6: 78:67:bb:e2:be:95:0b:68:23:cb:a7:c3:05:70:39: 83:46:dd:b8:bf:54:79:62:e4:3d:87:6c:fc:f2:62: 9f:5e:68:7f:db:50:2a:fe:65:8d:f8:7b:02:14:52: b5:d2:01:62:c2:db:05:93:ba:c5:d0:1b:fe:44:7f: 78:c7:11:ab:a9:c2:f2:8c:dd:46:1e:35:66:06:d1: ba:80:b8:ed:2b:58:10:92:a0:28:4d:b3:01:f4:f4: 94:33:c4:a8:18:2d:d7:2f:61:23:ec:49:9c:56:64: 86:a1:67:30:7b:6e:67:3f:24:57:fb:eb:07:f4:ed: c4:44:19:c8:34:c5:10:23:aa:ec:7d:02:2c:f6:73: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DF:08:43:70:5F:4B:5E:6E:29:57:5E:E8:6B:D6:5B:F4:61:6B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/11035e37-5ecb-3460-a669-1831a850869e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ce:59:46:f3:45:1d:1f:92:1c:44:2b:09:45:e6:8a:76:11: c9:02:b5:7a:fa:35:df:ac:13:e0:e1:51:74:c6:1d:de:c3:d5: e4:4b:b6:77:88:a3:b0:34:f4:65:5e:37:93:21:1d:81:36:b4: 6d:e5:16:54:43:97:75:ca:41:57:94:41:e4:a2:34:87:f9:e1: 10:55:bf:1e:ce:54:44:26:92:23:69:76:fb:e5:4d:d7:b9:cd: 31:3d:67:d3:09:f0:a6:7f:08:5c:6f:93:72:e8:5d:2c:dc:2a: dc:88:8a:c7:61:a6:9c:5d:7a:ef:67:cc:68:64:63:d2:90:00: 73:2e:99:c1:d0:3c:9d:18:c3:3f:01:8d:fd:ea:34:34:f9:91: d1:d9:39:ad:82:88:90:31:34:69:69:9f:83:ba:6b:9d:bc:82: 0c:67:08:12:83:2e:e3:3e:07:9b:33:78:db:3f:03:30:48:5e: 12:13:60:0e:ec:5b:fd:0e:07:04:03:a5:e9:6c:99:ba:a8:35: 4e:f9:06:15:0c:0e:f0:0a:f3:70:f1:fe:37:bf:6b:10:ae:3b: c3:4a:6a:e0:8b:f2:17:62:36:83:09:74:c6:82:e9:34:94:f1: 84:e5:1f:c0:db:0a:49:dc:43:d2:b2:a3:89:e8:25:77:e9:50: e8:1f:2c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kZD5GYcpDVxcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk Njg5N2UzMzItMDA3ZC00ZTAyLWIzNWYtOTViZmViMTlkYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Rwer0DElZ80GM9oQ8GWUYr6f2cMotr8TfZ 2WAFv9qdIGl0x13CcOyurCAgkE8AZdnRBJfPomPyRUPJatL0MsmPkY2sfBgA1eeR 45ulCZdPotyAfR7z/sOwm+KpZLve56zOecKijiheu34hB4fO4oBDV+6TrrZ4Z7vi vpULaCPLp8MFcDmDRt24v1R5YuQ9h2z88mKfXmh/21Aq/mWN+HsCFFK10gFiwtsF k7rF0Bv+RH94xxGrqcLyjN1GHjVmBtG6gLjtK1gQkqAoTbMB9PSUM8SoGC3XL2Ej 7EmcVmSGoWcwe25nPyRX++sH9O3ERBnINMUQI6rsfQIs9nN3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7fCENwX0tebilXXuhr1lv0YWvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTEwMzVlMzctNWVjYi0z NDYwLWE2NjktMTgzMWE4NTA4NjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXOWUbzRR0fkhxEKwlF5op2EckCtXr6Nd+sE+DhUXTGHd7D1eRLtneI o7A09GVeN5MhHYE2tG3lFlRDl3XKQVeUQeSiNIf54RBVvx7OVEQmkiNpdvvlTde5 zTE9Z9MJ8KZ/CFxvk3LoXSzcKtyIisdhppxdeu9nzGhkY9KQAHMumcHQPJ0Ywz8B jf3qNDT5kdHZOa2CiJAxNGlpn4O6a528ggxnCBKDLuM+B5szeNs/AzBIXhITYA7s W/0OBwQDpelsmbqoNU75BhUMDvAK83Dx/je/axCuO8NKauCL8hdiNoMJdMaC6TSU 8YTlH8DbCkncQ9Kyo4noJXfpUOgfLGY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:39 2025 by rpki-client