$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa File: 201dc264-73e9-3451-a68e-1cafec19dd3f.roa (raw, json) Hash identifier: CC4J0K+iRxPpK500SBbJJpEBNKGmMdKyJRJQvjZeGSE= Subject key identifier: C6:DC:B4:C2:97:41:71:D6:F0:C5:80:E8:81:2A:FA:41:CF:47:54:63 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E9DA045B9FF3C5E65980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e9:da:04:5b:9f:f3:c5:e6:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=df4c048a-7734-4403-bfea-1f01d725eb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:5f:19:36:8e:14:40:6b:e1:6a:d3:df:55: eb:b8:85:6d:28:3b:fc:62:d8:f2:7b:c5:66:42:43: e2:ee:3a:13:55:01:62:79:7c:01:f1:72:dc:59:9e: 5e:49:5f:42:1a:3d:af:69:9c:64:22:dd:79:25:82: 40:61:fa:6a:69:40:6b:a3:ac:8a:34:05:8d:d5:b9: 3a:6e:ed:e0:61:ae:3c:51:f9:23:0f:ad:16:5c:59: 11:d0:2b:5e:f4:21:fd:64:d4:df:18:ef:88:77:de: 03:80:fd:83:7a:5c:48:4f:6b:65:ef:b2:19:07:6c: b3:cf:83:78:b4:2d:89:0c:d8:d1:8a:12:0b:4e:83: bf:60:96:54:6f:9f:ab:a8:d4:4f:5e:86:ef:38:4e: 58:5d:ca:c8:bd:39:18:96:d0:eb:87:1b:bf:3f:5e: 49:56:1c:91:89:0f:3f:c5:c5:6d:0b:45:41:30:ae: 39:54:bf:f3:4d:18:a1:a7:0a:fa:38:0a:76:42:b8: 86:64:82:bb:44:d8:d9:e6:2c:8b:20:58:4f:b3:a8: 40:da:2f:f3:7b:14:f8:3c:2f:7e:7b:ea:37:58:76: dd:19:48:49:a5:1e:44:1c:89:85:1f:a5:65:00:58: f7:9b:88:15:17:1f:d8:a0:6e:a4:f1:04:4c:d4:df: 58:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DC:B4:C2:97:41:71:D6:F0:C5:80:E8:81:2A:FA:41:CF:47:54:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/201dc264-73e9-3451-a68e-1cafec19dd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:76:a0:ac:70:65:fa:f1:5e:0c:ca:e2:f7:e2:2c:b7:da:24: 8e:4e:a5:12:80:d8:ef:e6:8c:12:dd:a8:5e:c0:e4:12:1a:68: 0e:0d:be:85:40:50:19:c8:ce:40:c6:0d:7b:5a:42:88:e5:8b: 1c:07:02:e6:5e:04:2a:c4:af:dc:04:fd:03:60:4b:48:60:18: 2d:e9:e7:72:ce:bb:53:7a:79:10:a0:47:46:3c:dd:ac:b6:d1: 2a:a5:49:ae:e7:19:5a:e2:bc:2f:31:f3:67:70:a0:b7:32:4d: 74:8e:43:79:4e:a4:3b:02:2a:f7:73:a2:f9:0f:8f:a8:df:50: 6f:13:3a:72:80:04:22:d8:b6:96:80:d2:de:a0:c2:7b:0e:69: 06:38:bb:3e:c3:16:5d:0d:58:05:94:ce:37:35:29:d0:a3:d1: a4:a4:07:ef:d0:f2:14:49:60:eb:ac:ad:2e:16:cb:66:fa:b2: ec:61:71:be:1e:f7:97:d9:33:22:26:e5:d1:e9:f3:fa:cd:64: d3:a3:cd:ca:82:82:62:0b:70:be:e2:2a:6b:f3:49:ab:bf:e4: d8:bf:a8:a7:b5:d6:04:a3:6a:b9:31:c2:8f:c7:51:66:43:2d: 84:a1:83:c2:de:76:67:25:85:b2:6b:c9:d4:c7:6c:26:94:68: 47:b8:b0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOnaBFuf88XmWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZGY0YzA0OGEtNzczNC00NDAzLWJmZWEtMWYwMWQ3MjVlYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7pfGTaOFEBr4WrT31XruIVtKDv8Ytjye8Vm QkPi7joTVQFieXwB8XLcWZ5eSV9CGj2vaZxkIt15JYJAYfpqaUBro6yKNAWN1bk6 bu3gYa48UfkjD60WXFkR0Cte9CH9ZNTfGO+Id94DgP2DelxIT2tl77IZB2yzz4N4 tC2JDNjRihILToO/YJZUb5+rqNRPXobvOE5YXcrIvTkYltDrhxu/P15JVhyRiQ8/ xcVtC0VBMK45VL/zTRihpwr6OAp2QriGZIK7RNjZ5iyLIFhPs6hA2i/zexT4PC9+ e+o3WHbdGUhJpR5EHImFH6VlAFj3m4gVFx/YoG6k8QRM1N9YGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbctMKXQXHW8MWA6IEq+kHPR1RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjAxZGMyNjQtNzNlOS0z NDUxLWE2OGUtMWNhZmVjMTlkZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN2oKxwZfrxXgzK4vfiLLfaJI5OpRKA2O/mjBLdqF7A5BIaaA4NvoVA UBnIzkDGDXtaQojlixwHAuZeBCrEr9wE/QNgS0hgGC3p53LOu1N6eRCgR0Y83ay2 0SqlSa7nGVrivC8x82dwoLcyTXSOQ3lOpDsCKvdzovkPj6jfUG8TOnKABCLYtpaA 0t6gwnsOaQY4uz7DFl0NWAWUzjc1KdCj0aSkB+/Q8hRJYOusrS4Wy2b6suxhcb4e 95fZMyIm5dHp8/rNZNOjzcqCgmILcL7iKmvzSau/5Ni/qKe11gSjarkxwo/HUWZD LYShg8LedmclhbJrydTHbCaUaEe4sOw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:18 2025 by rpki-client