$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1ae697dc-02a1-3536-ab3d-b8b1d4629b6d.roa File: 1ae697dc-02a1-3536-ab3d-b8b1d4629b6d.roa (raw, json) Hash identifier: uPaJZ5M3ewAE0qNqbTgW7JWF18iSfem3hZJLNxcTSXg= Subject key identifier: 9E:D1:C0:64:2A:4B:83:43:89:20:70:D0:35:71:94:AD:02:D2:04:42 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64BE66C08EF283F1B5140 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1ae697dc-02a1-3536-ab3d-b8b1d4629b6d.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4b:e6:6c:08:ef:28:3f:1b:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=31add7b8-847f-45c1-8f12-a8590180a7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:b5:91:3f:b2:9a:f2:fb:6e:18:c0:e2:61: 80:a8:22:7c:71:94:88:80:c4:5b:30:67:0f:db:be: 78:52:ae:12:0b:78:9b:09:b9:62:9d:16:ac:b5:1f: 94:9e:a2:ac:f2:e9:3a:fb:30:c7:ab:1e:da:7e:87: 84:ec:f2:54:ce:39:73:fd:1b:20:bc:0e:80:6d:1e: 43:f2:ab:87:d5:6b:ab:ad:51:8a:b0:98:61:c4:a2: ba:96:1a:37:6f:15:85:34:f8:3a:f9:77:7c:2f:e1: 7b:e6:d5:e9:6d:9c:84:ae:c1:cc:8d:4a:c4:44:78: cb:e1:53:39:8c:31:a9:ab:6b:cc:c5:22:84:5c:5b: 8b:b6:c6:a6:b9:b9:d3:d0:f1:48:16:4f:92:fb:dd: 37:8f:af:e0:b3:ae:a9:be:e8:e3:72:b0:7f:1a:8f: 72:74:eb:9f:20:ca:86:9e:70:35:9f:cf:a7:a8:81: db:a5:ae:7f:0f:15:9d:57:39:e9:0d:62:88:a4:5e: 6c:80:69:0d:31:ca:e7:45:c8:d7:73:c0:2c:80:5a: 6d:25:e1:9f:b1:e1:fd:ce:42:de:34:c8:2c:0d:b0: ca:c3:57:7c:5a:94:e1:20:13:c2:00:d5:71:ea:49: 7e:b6:a0:d3:9e:e2:fb:5b:46:75:f3:cc:37:8f:00: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D1:C0:64:2A:4B:83:43:89:20:70:D0:35:71:94:AD:02:D2:04:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1ae697dc-02a1-3536-ab3d-b8b1d4629b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e2:e1:10:4b:df:f7:9c:04:e6:5e:9c:f9:db:af:61:e5:1c: 0c:95:6f:64:59:f4:bd:90:5e:91:cb:af:b5:33:8b:c8:9f:3a: b4:54:ff:fa:59:97:23:b3:ce:84:23:39:d2:f4:af:90:45:35: a5:cb:2b:71:ea:26:67:b2:04:2a:a2:c4:ee:34:f3:29:f3:79: a1:13:4b:b7:a4:24:61:ee:71:2b:47:e8:92:5c:d1:14:fd:07: b4:d1:a6:52:9a:ab:86:35:54:30:1e:9e:fe:8f:5b:60:e4:6b: 7f:b7:47:7e:61:22:17:0b:68:9c:b5:2e:a2:c0:7d:50:dd:4c: 8a:fb:5d:47:50:65:4b:e0:77:03:a8:b9:61:3b:ed:a8:6f:ca: f1:dc:22:0e:1c:81:c4:34:8f:c1:66:e1:ef:48:68:65:8d:10: 87:1c:5a:82:16:08:23:9e:9b:84:ab:38:0a:d0:b5:c5:00:5e: e9:bf:03:b2:68:47:d3:d0:ad:9a:16:9e:5e:1e:86:39:84:89: a8:e1:60:d0:54:f3:98:dc:01:c0:9c:16:2c:41:71:1d:62:ee: 39:6a:f8:75:83:f4:03:1f:27:2c:10:80:13:60:40:f6:bd:48: e8:84:b4:35:cb:25:0c:36:92:17:b5:4f:67:1d:89:a2:07:9c: 06:81:bc:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kvmbAjvKD8bUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk MzFhZGQ3YjgtODQ3Zi00NWMxLThmMTItYTg1OTAxODBhN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2e1kT+ymvL7bhjA4mGAqCJ8cZSIgMRbMGcP 2754Uq4SC3ibCblinRastR+UnqKs8uk6+zDHqx7afoeE7PJUzjlz/RsgvA6AbR5D 8quH1WurrVGKsJhhxKK6lho3bxWFNPg6+Xd8L+F75tXpbZyErsHMjUrERHjL4VM5 jDGpq2vMxSKEXFuLtsamubnT0PFIFk+S+903j6/gs66pvujjcrB/Go9ydOufIMqG nnA1n8+nqIHbpa5/DxWdVznpDWKIpF5sgGkNMcrnRcjXc8AsgFptJeGfseH9zkLe NMgsDbDKw1d8WpThIBPCANVx6kl+tqDTnuL7W0Z188w3jwBp2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7RwGQqS4NDiSBw0DVxlK0C0gRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWFlNjk3ZGMtMDJhMS0z NTM2LWFiM2QtYjhiMWQ0NjI5YjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfi4RBL3/ecBOZenPnbr2HlHAyVb2RZ9L2QXpHLr7Uzi8ifOrRU//pZ lyOzzoQjOdL0r5BFNaXLK3HqJmeyBCqixO408ynzeaETS7ekJGHucStH6JJc0RT9 B7TRplKaq4Y1VDAenv6PW2Dka3+3R35hIhcLaJy1LqLAfVDdTIr7XUdQZUvgdwOo uWE77ahvyvHcIg4cgcQ0j8Fm4e9IaGWNEIccWoIWCCOem4SrOArQtcUAXum/A7Jo R9PQrZoWnl4ehjmEiajhYNBU85jcAcCcFixBcR1i7jlq+HWD9AMfJywQgBNgQPa9 SOiEtDXLJQw2khe1T2cdiaIHnAaBvAI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:43 2025 by rpki-client