$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa File: 227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa (raw, json) Hash identifier: nQ0QoEGGchMnbjHCWNYhPE2DcHXnToNOM0JwNGwaCjA= Subject key identifier: 00:8F:8C:63:59:BD:AC:94:AF:31:BF:E1:71:A4:4D:06:CC:4F:3B:65 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F840DB93B6768E54F700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f8:40:db:93:b6:76:8e:54:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=906cb748-f2a8-41f8-ac30-a26bdecd1649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:5e:b7:42:03:83:3e:91:41:e7:df:ac:6f: 76:a7:18:af:1c:49:51:73:3b:69:60:1f:ad:4d:35: e8:1c:03:17:5b:aa:cc:47:37:52:62:26:17:05:68: 66:5c:2e:bb:9f:a1:d0:2f:bf:c5:6a:a3:94:97:1c: cf:79:70:9b:a9:02:ba:6d:5b:fa:15:f7:9b:a9:5d: c6:af:2d:6d:36:76:7d:4f:94:51:1b:2b:19:af:cd: 92:32:ad:31:ec:23:77:d7:dd:fc:a9:d8:b4:68:8d: 01:c1:37:f3:36:9e:52:a6:c9:8e:49:bc:bd:36:76: 5c:29:57:27:55:dd:78:4e:b2:14:40:d6:81:bb:88: a1:38:bf:7a:4a:32:9d:c1:dc:0f:6d:64:d6:a3:39: e9:dd:cf:5c:fb:91:aa:db:2e:ec:e9:d5:c7:84:60: 98:3d:46:7c:07:78:0d:75:27:ad:2e:9f:7f:e1:ee: d8:08:fd:5e:46:77:55:84:d7:b7:5b:98:4d:59:66: 5e:7f:ed:7d:22:2d:60:01:39:01:07:d6:59:0c:c5: 45:63:90:55:24:ab:d0:c3:67:59:fe:0a:b9:3a:f3: ae:2c:05:81:08:de:8e:3a:7f:28:2b:ad:32:23:54: d7:b3:a1:6a:d2:1c:de:c3:cd:fe:65:c7:54:89:eb: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8F:8C:63:59:BD:AC:94:AF:31:BF:E1:71:A4:4D:06:CC:4F:3B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2e:4c:28:e6:09:67:db:f2:39:2d:13:bf:47:96:93:3a:3f: 82:bf:af:e8:a2:1d:58:49:9f:bc:62:72:87:39:00:b9:85:e8: 09:df:28:72:17:d8:63:95:72:d1:8f:e6:fd:c7:85:26:32:f6: 15:34:7b:b0:99:58:43:c3:65:a7:59:ac:d2:db:9e:2e:ec:9c: 98:72:a1:aa:9d:b0:f8:47:88:bd:9e:07:7f:85:13:89:33:ac: e9:91:2f:a5:22:7c:51:df:39:59:b0:2b:49:7d:04:f1:2c:ac: 18:9a:67:c5:36:7d:11:1d:63:63:98:e8:b0:6f:17:2f:a0:9f: 05:a6:e9:ee:7f:90:18:34:f7:81:9a:56:6d:f7:a7:86:59:ba: 9b:e9:2b:22:31:8d:18:24:f0:ab:d5:99:7d:7e:ad:a8:d8:cc: 1b:9c:3f:8e:54:09:49:73:6b:53:b5:40:4c:eb:7a:0b:87:c2: 6c:80:46:87:ad:89:0e:29:41:a4:98:b7:e7:df:61:e7:75:76: 5e:e5:4c:cc:1b:77:83:32:eb:23:46:6e:fc:0a:d5:0b:80:a0: f0:f3:2f:ae:8c:a8:89:3d:de:c0:07:18:b6:e0:d2:e7:d7:df: 31:f0:27:f2:ca:c4:53:fc:d3:f4:94:b2:4d:6d:b0:d3:01:89: 4b:83:4d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPhA25O2do5U9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk OTA2Y2I3NDgtZjJhOC00MWY4LWFjMzAtYTI2YmRlY2QxNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuNet0IDgz6RQeffrG92pxivHElRcztpYB+t TTXoHAMXW6rMRzdSYiYXBWhmXC67n6HQL7/FaqOUlxzPeXCbqQK6bVv6FfebqV3G ry1tNnZ9T5RRGysZr82SMq0x7CN31938qdi0aI0BwTfzNp5SpsmOSby9NnZcKVcn Vd14TrIUQNaBu4ihOL96SjKdwdwPbWTWoznp3c9c+5Gq2y7s6dXHhGCYPUZ8B3gN dSetLp9/4e7YCP1eRndVhNe3W5hNWWZef+19Ii1gATkBB9ZZDMVFY5BVJKvQw2dZ /gq5OvOuLAWBCN6OOn8oK60yI1TXs6Fq0hzew83+ZcdUieubMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACPjGNZvayUrzG/4XGkTQbMTztlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjI3YWYxOWUtNGUxMC0z NTQwLTllMzEtYTI5ZGQ2Y2RmYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHguTCjmCWfb8jktE79HlpM6P4K/r+iiHVhJn7xicoc5ALmF6AnfKHIX 2GOVctGP5v3HhSYy9hU0e7CZWEPDZadZrNLbni7snJhyoaqdsPhHiL2eB3+FE4kz rOmRL6UifFHfOVmwK0l9BPEsrBiaZ8U2fREdY2OY6LBvFy+gnwWm6e5/kBg094Ga Vm33p4ZZupvpKyIxjRgk8KvVmX1+rajYzBucP45UCUlza1O1QEzreguHwmyARoet iQ4pQaSYt+ffYed1dl7lTMwbd4My6yNGbvwK1QuAoPDzL66MqIk93sAHGLbg0ufX 3zHwJ/LKxFP80/SUsk1tsNMBiUuDTX4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:55 2025 by rpki-client