$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/203e8a93-398f-3df7-a4a8-9242815b6152.roa File: 203e8a93-398f-3df7-a4a8-9242815b6152.roa (raw, json) Hash identifier: BqMFNGuNGMDqGQW/4dfxISjXrDbAX8pj+8/sM0Jf3K4= Subject key identifier: 25:26:7F:3A:A7:67:81:E9:3B:2F:F2:04:1B:BF:E8:CA:58:C8:02:D5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2B9B576D71B9326261F500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/203e8a93-398f-3df7-a4a8-9242815b6152.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9b:57:6d:71:b9:32:62:61:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=d48a656d-ed6e-44af-8bf9-5643091d7a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:89:d5:93:ac:81:f5:76:54:37:f2:8f:bb: d9:30:5a:8e:17:b3:ee:6d:d7:82:74:07:36:10:32: a0:a3:d5:55:b1:8c:bb:62:d7:c4:d4:ba:ec:83:e1: b5:7d:18:9f:7d:3b:57:7b:23:67:7f:9b:d0:3e:87: 7c:51:59:8f:f4:9d:38:28:bc:38:dd:83:40:8d:05: d7:27:c9:3b:a3:2b:4a:51:c5:5f:ec:05:15:36:59: e3:8b:98:18:c5:f7:57:dc:de:40:e0:46:a3:c3:22: 5e:04:12:db:a8:ad:9f:d4:54:6f:58:77:93:3b:dc: fc:21:7e:e4:73:62:b3:8f:a8:d2:92:30:d0:1d:79: 63:a9:47:33:d6:57:ad:c7:c2:e9:b4:5f:d6:0a:01: 56:97:90:6e:8a:77:a0:18:2c:2a:26:20:09:38:7f: 73:2b:ff:9e:7d:eb:5a:4f:3e:92:90:a2:b3:62:1f: a8:b3:e9:86:68:6a:af:67:f4:67:b1:6c:55:81:37: 6b:87:fc:1c:96:87:63:ad:79:89:56:89:d8:72:0c: 3a:fb:47:de:4b:19:e2:8a:8b:34:89:9e:6b:fa:7a: 0e:af:e1:c6:ea:f1:a5:9a:35:08:56:77:f5:20:c1: e2:32:16:8b:f4:ef:3e:7d:9b:f3:72:e4:9f:a8:b6: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:7F:3A:A7:67:81:E9:3B:2F:F2:04:1B:BF:E8:CA:58:C8:02:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/203e8a93-398f-3df7-a4a8-9242815b6152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:07:29:f1:9a:68:91:a2:0f:d1:52:f5:c5:65:77:90:26:0f: 6f:bc:3a:08:fd:95:ed:fc:2e:de:b1:be:fb:bc:06:e5:ad:87: f1:f7:e8:67:77:da:3e:b7:f5:3c:49:1d:4a:c1:28:51:60:bd: 73:2d:0d:80:31:a5:6c:89:7e:3f:85:a9:0f:a9:b7:6f:d1:45: dd:0c:13:b9:76:d5:b4:63:14:4f:ad:19:1d:f1:26:39:63:ef: 42:24:0b:53:a7:fe:ca:e6:35:9d:4f:00:d3:a6:23:5e:a4:57: b4:59:f8:a9:22:2e:24:9b:56:83:67:86:0c:c9:d2:31:e1:e0: dd:3d:7f:67:de:d7:a0:78:23:5a:10:97:a9:f3:db:1c:66:de: c7:a4:c8:b5:33:fe:8a:e1:84:f0:27:4b:99:20:74:76:75:e2: 54:c0:e9:75:d0:7c:52:24:86:90:a6:58:8c:93:ae:ba:fb:80: 21:f9:0b:51:0f:6a:b9:a9:2f:1a:cd:a7:60:2e:ae:45:d6:1a: fc:5f:d0:05:cd:67:82:7e:df:f3:72:a5:4b:1a:7a:50:28:ea: f4:06:6b:9d:d7:9d:e3:62:b0:5c:3d:fd:d6:a9:2c:ed:e2:82: ed:52:83:6b:86:c3:09:e7:c7:1a:f7:1f:02:86:15:25:57:18: 20:8a:c2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5tXbXG5MmJh9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDQ4YTY1NmQtZWQ2ZS00NGFmLThiZjktNTY0MzA5MWQ3YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyGJ1ZOsgfV2VDfyj7vZMFqOF7PubdeCdAc2 EDKgo9VVsYy7YtfE1Lrsg+G1fRiffTtXeyNnf5vQPod8UVmP9J04KLw43YNAjQXX J8k7oytKUcVf7AUVNlnji5gYxfdX3N5A4EajwyJeBBLbqK2f1FRvWHeTO9z8IX7k c2Kzj6jSkjDQHXljqUcz1letx8LptF/WCgFWl5BuinegGCwqJiAJOH9zK/+efeta Tz6SkKKzYh+os+mGaGqvZ/RnsWxVgTdrh/wclodjrXmJVonYcgw6+0feSxniios0 iZ5r+noOr+HG6vGlmjUIVnf1IMHiMhaL9O8+fZvzcuSfqLY6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUmfzqnZ4HpOy/yBBu/6MpYyALVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjAzZThhOTMtMzk4Zi0z ZGY3LWE0YTgtOTI0MjgxNWI2MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUHKfGaaJGiD9FS9cVld5AmD2+8Ogj9le38Lt6xvvu8BuWth/H36Gd3 2j639TxJHUrBKFFgvXMtDYAxpWyJfj+FqQ+pt2/RRd0ME7l21bRjFE+tGR3xJjlj 70IkC1On/srmNZ1PANOmI16kV7RZ+KkiLiSbVoNnhgzJ0jHh4N09f2fe16B4I1oQ l6nz2xxm3sekyLUz/orhhPAnS5kgdHZ14lTA6XXQfFIkhpCmWIyTrrr7gCH5C1EP armpLxrNp2AurkXWGvxf0AXNZ4J+3/NypUsaelAo6vQGa53XneNisFw9/dapLO3i gu1Sg2uGwwnnxxr3HwKGFSVXGCCKwgM= -----END CERTIFICATE-----Generated at Sat Apr 5 08:39:46 2025 by rpki-client