$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa File: 1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa (raw, json) Hash identifier: eCv7nvOK0Cwb9b4STQxru8SND8pXZ8Lxy51ccwnPRNI= Subject key identifier: 65:5B:5B:82:C5:68:72:09:48:32:F7:81:D9:D9:8B:EC:9B:86:FB:AD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E928311CABA9FF111EC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e9:28:31:1c:ab:a9:ff:11:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=559b052d-cab6-48f1-ad85-4fcecf82c099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:1c:6e:a2:45:47:db:7c:1b:5e:85:3a:1e: 06:d1:83:c8:21:10:46:1a:a8:01:c5:db:52:46:9e: c9:e0:25:5c:4c:4d:f8:af:fc:60:50:2c:85:b6:5f: 90:8a:d9:70:94:73:b8:6c:62:52:34:5f:8e:ff:74: dc:01:9c:38:9f:05:0c:84:c7:c4:37:53:9a:4f:d1: 42:ab:77:10:af:ac:23:d0:03:5d:c4:83:42:d8:09: 50:33:4f:14:3b:2e:c3:76:a7:ff:70:a8:90:66:7e: bd:20:50:95:3d:f3:db:1c:4c:cc:df:ef:2b:5d:5a: 64:3f:c4:cf:48:34:70:d0:ae:82:76:6e:c2:0a:0f: 25:18:10:6a:41:1e:5d:40:83:41:19:91:42:95:37: 2e:6e:44:c7:33:96:c3:72:d9:64:ec:86:c6:44:50: d2:11:98:64:c1:15:2d:57:8e:56:14:43:44:3c:d2: 60:50:40:a9:52:0d:71:30:3c:79:0f:78:a0:e2:48: 73:50:ff:04:ff:97:1b:37:d5:a1:48:e6:15:d8:5b: 40:bf:ec:06:b6:cd:f5:00:49:f6:ac:09:a2:0c:c1: 9b:f2:14:c0:04:dd:4a:f3:0c:fe:4e:a9:3c:95:d5: b1:2b:74:ed:56:6c:0b:b9:27:4e:49:1d:b5:93:31: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5B:5B:82:C5:68:72:09:48:32:F7:81:D9:D9:8B:EC:9B:86:FB:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:85:24:33:0c:9e:66:fe:6e:6a:33:08:e5:ca:87:cc:76:7c: 94:6a:1f:ae:87:89:9e:e9:85:71:10:ec:56:b4:95:03:79:42: c7:de:24:af:6b:87:99:b3:72:5e:4b:04:99:fd:f6:d7:c2:62: dc:be:42:b5:61:74:e3:17:9b:c1:1a:81:09:fa:4a:79:79:3f: 99:d4:5f:02:1a:e6:a8:59:9c:ea:70:93:d4:86:4a:a9:d9:e5: 79:58:60:2c:f0:d0:ce:86:85:d2:7e:a8:55:bc:5f:43:3f:4a: 65:ef:d8:c7:71:d2:eb:ea:7a:0c:7b:bf:b6:d3:23:f9:2a:b5: f0:96:30:1c:71:c6:92:1f:38:2e:fd:39:2a:87:73:e7:87:82: c2:0a:6e:42:d7:29:d6:a4:c8:c4:5b:10:2e:d6:29:a5:6d:7d: 8d:e7:09:35:03:50:72:b2:2b:4e:33:22:1f:bd:95:d2:1c:7e: 84:42:ac:df:89:97:df:e9:0f:0a:91:6a:1c:f5:f9:b3:40:3d: a6:ac:c7:74:48:87:41:10:4b:a0:60:c0:b7:89:c7:29:24:56: de:7e:c1:76:cb:05:d7:a3:b2:27:0d:94:2e:f5:5e:81:2a:98: ce:1c:b7:2f:a3:bd:1c:7e:4e:7f:a4:7e:9b:11:06:3d:4c:1a: 32:14:79:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOkoMRyrqf8RHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NTU5YjA1MmQtY2FiNi00OGYxLWFkODUtNGZjZWNmODJjMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdwcbqJFR9t8G16FOh4G0YPIIRBGGqgBxdtS Rp7J4CVcTE34r/xgUCyFtl+QitlwlHO4bGJSNF+O/3TcAZw4nwUMhMfEN1OaT9FC q3cQr6wj0ANdxINC2AlQM08UOy7Ddqf/cKiQZn69IFCVPfPbHEzM3+8rXVpkP8TP SDRw0K6Cdm7CCg8lGBBqQR5dQINBGZFClTcubkTHM5bDctlk7IbGRFDSEZhkwRUt V45WFENEPNJgUECpUg1xMDx5D3ig4khzUP8E/5cbN9WhSOYV2FtAv+wGts31AEn2 rAmiDMGb8hTABN1K8wz+Tqk8ldWxK3TtVmwLuSdOSR21kzERhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVbW4LFaHIJSDL3gdnZi+ybhvutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWU0ZWQ0MzEtNGI5YS0z OTcxLWJkMWUtNGIyMGQ1YjM0MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2FJDMMnmb+bmozCOXKh8x2fJRqH66HiZ7phXEQ7Fa0lQN5QsfeJK9r h5mzcl5LBJn99tfCYty+QrVhdOMXm8EagQn6Snl5P5nUXwIa5qhZnOpwk9SGSqnZ 5XlYYCzw0M6GhdJ+qFW8X0M/SmXv2Mdx0uvqegx7v7bTI/kqtfCWMBxxxpIfOC79 OSqHc+eHgsIKbkLXKdakyMRbEC7WKaVtfY3nCTUDUHKyK04zIh+9ldIcfoRCrN+J l9/pDwqRahz1+bNAPaasx3RIh0EQS6BgwLeJxykkVt5+wXbLBdejsicNlC71XoEq mM4cty+jvRx+Tn+kfpsRBj1MGjIUeZo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:41 2025 by rpki-client