$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18f8331d-8a96-3d7e-82c0-94e8247ba45e.roa File: 18f8331d-8a96-3d7e-82c0-94e8247ba45e.roa (raw, json) Hash identifier: k1FgcQvP6zEdHEQphnhj5tMy6qhBvuSMGLSIq0g6Kr8= Subject key identifier: 14:D4:BE:08:00:5A:61:05:20:77:A3:63:52:F3:54:C4:06:60:68:35 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBD224C1C90F61872FAE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18f8331d-8a96-3d7e-82c0-94e8247ba45e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 41264 IP address blocks: 104.135.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d2:24:c1:c9:0f:61:87:2f:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=bcb38b6d-7ce0-4644-9e20-205bbc73f850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:5b:8b:7f:e1:16:41:a2:9f:58:56:3f:6e: 7a:a5:3e:6b:9d:95:8b:1c:4f:dc:0a:ed:aa:86:0e: 66:e1:dc:dc:fd:27:8b:6d:08:c6:2c:74:58:39:1d: 43:7a:1c:70:29:56:40:93:a1:ca:52:1a:a5:8f:80: ab:7c:a8:f0:fe:f1:c9:bd:d6:eb:31:83:d5:e9:54: 63:dc:11:eb:29:4c:2c:85:b5:cc:20:9f:90:38:74: 26:66:1b:b2:0d:02:5a:5a:62:9e:ba:ea:ab:24:02: 36:93:ef:ff:33:39:b0:0f:e8:eb:87:22:44:63:63: 38:cb:17:ca:aa:f6:3f:bd:df:25:29:1b:7c:85:d5: b0:55:79:70:26:ed:fd:ee:b1:70:60:f3:54:78:3c: 46:e9:e3:1f:d1:92:c4:b2:cd:67:16:38:22:57:9e: e2:6e:06:d3:29:34:60:dd:48:06:65:27:be:19:e1: e4:0b:ae:48:b6:98:e2:30:40:72:0d:ba:1f:a7:9b: 4c:23:10:01:3b:a5:5a:30:2f:f3:dc:16:c9:b4:96: fc:f2:54:c5:ca:52:6e:c0:33:f8:9d:ff:f0:24:93: 48:de:be:3f:01:21:06:e2:71:4c:60:94:2b:aa:9f: 8a:22:55:f7:0f:0c:6c:e2:3f:9c:28:6f:1a:a1:a8: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:BE:08:00:5A:61:05:20:77:A3:63:52:F3:54:C4:06:60:68:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18f8331d-8a96-3d7e-82c0-94e8247ba45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:24:5a:d8:26:6b:40:09:90:b4:c9:f6:06:bf:17:04:75:d8: a9:11:e3:27:e2:18:ec:06:fb:5a:21:d7:16:eb:91:df:97:85: 94:1a:43:9c:c7:17:cc:91:2a:2a:cf:a6:7d:6e:40:b1:e1:e6: d2:f3:61:74:dc:27:c5:93:98:7c:fd:59:59:91:c8:26:e1:f8: fc:bb:00:33:5f:40:8c:dd:bd:bb:c6:85:27:b0:7b:44:fd:08: b4:a3:42:41:2f:85:be:d1:2d:34:b9:39:5a:9e:91:c6:59:50: 32:6e:51:df:f7:6c:e0:17:f9:9f:bc:76:06:cd:71:75:82:a9: d0:f9:d3:1e:c8:d3:f1:7f:42:52:96:3a:a1:6e:c7:7c:aa:ff: fe:86:30:70:95:a7:a1:11:ad:b2:dd:4a:92:99:48:d7:2b:a3: 67:4c:b1:44:72:4f:8b:a7:b0:48:11:35:43:fd:43:5a:b3:dd: 53:64:29:f8:75:4f:39:76:1d:e3:b8:e3:19:c7:c4:28:33:db: 59:a0:48:33:77:c0:40:8d:73:bd:5a:cc:0f:97:84:6b:0d:1e: 47:05:81:8f:74:23:7e:97:2b:3f:fb:cf:44:0b:2d:02:29:3d: a0:ad:03:70:3a:4f:47:a5:89:f5:2c:57:fa:83:f8:d6:56:68: 16:d4:4b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69IkwckPYYcvrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YmNiMzhiNmQtN2NlMC00NjQ0LTllMjAtMjA1YmJjNzNmODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncJbi3/hFkGin1hWP256pT5rnZWLHE/cCu2q hg5m4dzc/SeLbQjGLHRYOR1DehxwKVZAk6HKUhqlj4CrfKjw/vHJvdbrMYPV6VRj 3BHrKUwshbXMIJ+QOHQmZhuyDQJaWmKeuuqrJAI2k+//MzmwD+jrhyJEY2M4yxfK qvY/vd8lKRt8hdWwVXlwJu397rFwYPNUeDxG6eMf0ZLEss1nFjgiV57ibgbTKTRg 3UgGZSe+GeHkC65ItpjiMEByDbofp5tMIxABO6VaMC/z3BbJtJb88lTFylJuwDP4 nf/wJJNI3r4/ASEG4nFMYJQrqp+KIlX3Dwxs4j+cKG8aoaiaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTUvggAWmEFIHejY1LzVMQGYGg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMThmODMzMWQtOGE5Ni0z ZDdlLTgyYzAtOTRlODI0N2JhNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIelMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQkWtgma0AJkLTJ9ga/FwR12KkR4yfiGOwG+1oh1xbrkd+XhZQaQ5zH F8yRKirPpn1uQLHh5tLzYXTcJ8WTmHz9WVmRyCbh+Py7ADNfQIzdvbvGhSewe0T9 CLSjQkEvhb7RLTS5OVqekcZZUDJuUd/3bOAX+Z+8dgbNcXWCqdD50x7I0/F/QlKW OqFux3yq//6GMHCVp6ERrbLdSpKZSNcro2dMsURyT4unsEgRNUP9Q1qz3VNkKfh1 Tzl2HeO44xnHxCgz21mgSDN3wECNc71azA+XhGsNHkcFgY90I36XKz/7z0QLLQIp PaCtA3A6T0elifUsV/qD+NZWaBbUS/o= -----END CERTIFICATE-----Generated at Fri Mar 14 13:45:30 2025 by rpki-client