$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa File: 16f0dc12-1d8d-394f-9b50-2a3247b35075.roa (raw, json) Hash identifier: vGaRWmpFU/C6NyBdcvkZkfk4/Zsj5sewzQKkukl8zXU= Subject key identifier: CE:91:D9:A0:E5:CC:AB:41:85:80:70:67:A4:5D:65:E6:BA:C3:A1:EF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E73010219500858F0600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e7:30:10:21:95:00:85:8f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=b56c1933-94bb-4175-9fe1-849dea761147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:74:a1:04:30:61:30:76:64:4d:bb:d4:bf: 23:d0:60:25:29:32:0f:e7:18:ee:88:d3:42:b3:79: 43:43:79:e8:cd:48:0d:00:9a:1c:9a:61:7d:a8:c5: 42:20:02:d5:f8:d8:fe:76:65:af:59:da:85:de:50: a6:4a:0e:4c:f7:65:22:c6:97:f1:a4:a9:e1:e2:14: ce:0e:36:71:72:1a:3c:41:4f:89:32:93:ed:8b:85: ff:3b:84:44:c4:6a:29:ec:c3:fe:98:93:c4:70:f6: 5d:4c:88:78:ab:21:5d:69:9a:54:56:e1:f8:c2:2d: a8:32:5d:06:d4:73:78:60:ee:57:4d:51:29:42:51: d6:8f:c3:2e:68:8a:ff:2b:3f:31:a0:a7:fc:06:f0: 5a:11:19:e7:6e:77:4e:2a:c0:87:8b:49:16:92:59: 60:bf:1a:d5:59:e8:6b:39:c7:99:4a:0a:d4:6e:2e: 88:76:74:80:f8:13:d2:e8:02:46:2e:a3:dd:8a:45: c6:7c:8f:4c:1c:40:f1:36:7e:9c:83:c5:c9:a1:15: 62:8b:dc:57:45:be:c0:39:a3:65:fc:89:a1:a1:bd: d1:e3:61:e6:db:44:1a:ec:45:48:38:be:3a:bb:35: e4:01:24:43:f3:c5:1e:96:b8:18:0c:01:69:d4:ca: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:D9:A0:E5:CC:AB:41:85:80:70:67:A4:5D:65:E6:BA:C3:A1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:cf:cc:11:a2:d4:f0:3b:82:86:a5:bb:40:76:5e:dc:f0:ac: a7:e6:b4:80:bf:77:db:16:d1:f8:0f:05:13:1f:34:0c:f1:55: 1a:35:7e:f8:d0:7e:46:96:bb:61:51:9a:3d:a6:f7:ff:42:31: 61:57:0b:6e:11:7a:06:c5:12:61:71:4d:db:a7:83:15:43:29: 85:16:7e:ef:6a:4d:5a:e3:80:91:17:3f:33:74:63:e7:9e:74: d8:ad:73:15:8c:98:62:a4:84:51:b4:48:b1:a6:f2:2a:5c:62: 5a:18:80:5e:1b:0e:cc:20:37:62:d1:ba:96:e3:bf:f5:61:5a: 4f:fc:96:e5:db:46:d5:2e:3f:35:21:0c:27:95:b0:6e:da:2f: 85:3c:19:6d:f9:7a:d0:da:b8:0c:8b:8c:ba:58:34:4b:1a:75: 8a:70:f1:99:fb:7b:f2:0e:da:aa:ee:f2:d6:6d:b2:7a:80:ae: a3:f9:91:f9:b7:cb:1e:ca:50:37:71:91:5e:35:05:fe:21:d9: 33:17:09:cf:bf:6c:56:f4:bf:57:20:fd:bc:c5:da:bd:f9:6f: 6b:07:6e:5e:56:89:20:cc:5f:b3:87:9e:31:c6:56:75:79:cf: 56:88:c2:a6:4b:9a:55:87:97:86:75:43:e9:e9:cc:08:14:72: 49:ea:62:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOcwECGVAIWPBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YjU2YzE5MzMtOTRiYi00MTc1LTlmZTEtODQ5ZGVhNzYxMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfB0oQQwYTB2ZE271L8j0GAlKTIP5xjuiNNC s3lDQ3nozUgNAJocmmF9qMVCIALV+Nj+dmWvWdqF3lCmSg5M92UixpfxpKnh4hTO DjZxcho8QU+JMpPti4X/O4RExGop7MP+mJPEcPZdTIh4qyFdaZpUVuH4wi2oMl0G 1HN4YO5XTVEpQlHWj8MuaIr/Kz8xoKf8BvBaERnnbndOKsCHi0kWkllgvxrVWehr OceZSgrUbi6IdnSA+BPS6AJGLqPdikXGfI9MHEDxNn6cg8XJoRVii9xXRb7AOaNl /Imhob3R42Hm20Qa7EVIOL46uzXkASRD88UelrgYDAFp1Mr50wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6R2aDlzKtBhYBwZ6RdZea6w6HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTZmMGRjMTItMWQ4ZC0z OTRmLTliNTAtMmEzMjQ3YjM1MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvPzBGi1PA7goalu0B2XtzwrKfmtIC/d9sW0fgPBRMfNAzxVRo1fvjQ fkaWu2FRmj2m9/9CMWFXC24RegbFEmFxTdungxVDKYUWfu9qTVrjgJEXPzN0Y+ee dNitcxWMmGKkhFG0SLGm8ipcYloYgF4bDswgN2LRupbjv/VhWk/8luXbRtUuPzUh DCeVsG7aL4U8GW35etDauAyLjLpYNEsadYpw8Zn7e/IO2qru8tZtsnqArqP5kfm3 yx7KUDdxkV41Bf4h2TMXCc+/bFb0v1cg/bzF2r35b2sHbl5WiSDMX7OHnjHGVnV5 z1aIwqZLmlWHl4Z1Q+npzAgUcknqYhc= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:32 2025 by rpki-client