$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/29f8757b-01f4-30be-a463-2d97e32f18b7.roa File: 29f8757b-01f4-30be-a463-2d97e32f18b7.roa (raw, json) Hash identifier: bcFkegbQ9RuxJJFZRmwb7wxFiBs546cU4bmOYsoZ6eQ= Subject key identifier: E5:83:E0:87:28:FC:A1:39:86:48:84:47:BD:1A:23:CA:45:57:B4:1B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F65831DB7CBDD789939240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/29f8757b-01f4-30be-a463-2d97e32f18b7.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:58:31:db:7c:bd:d7:89:93:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=ba59074d-d966-4dba-b6ed-15c3380a9f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1e:51:5e:1f:ff:32:6c:5c:0e:ed:03:7d:19: 17:0f:a3:a0:44:43:d4:08:ca:ba:c4:18:c2:65:84: ec:94:4a:68:3f:16:3e:e2:34:f2:83:76:19:18:dd: e6:95:14:37:45:b5:f0:24:8b:a0:bf:0d:44:88:c0: fb:fe:aa:fc:a8:b0:f7:60:05:60:ae:94:4b:21:b2: b4:2a:65:20:a6:e5:78:8b:11:af:60:19:5d:90:70: e7:88:a9:8a:1d:6b:3c:f1:bc:8a:9e:58:54:76:2d: a3:2a:54:fb:f2:e0:1e:ae:45:50:ce:e5:83:01:f5: 75:14:ea:7a:dc:ad:e5:2d:3b:50:7e:5a:a8:54:84: dd:ee:e0:59:31:5c:61:50:dc:66:51:7b:4a:fd:20: 40:c4:84:37:07:f3:d8:8e:d8:f6:77:43:31:05:61: a5:37:89:82:cf:4f:3b:26:ba:3b:2d:fb:27:c0:f5: f9:d3:2b:a4:5e:a8:27:a3:45:d9:a2:8a:59:bd:68: e7:db:f4:50:3c:4d:ae:24:7e:06:d1:1a:a7:f7:11: 33:09:a8:63:e4:53:bb:f9:3f:08:08:d1:f1:e3:54: 8a:9c:7c:8d:3c:82:9d:d2:90:5d:bc:9d:9a:a6:da: c0:1a:96:c3:33:cc:8f:66:55:19:2b:10:26:54:21: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:E0:87:28:FC:A1:39:86:48:84:47:BD:1A:23:CA:45:57:B4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/29f8757b-01f4-30be-a463-2d97e32f18b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a3:da:7c:37:71:fb:24:2c:59:7f:fd:75:2f:e0:14:da:30: c1:28:6f:40:83:d0:4f:9b:a0:f4:a6:00:b8:0d:8a:0e:5b:e6: 62:19:30:ff:c3:3a:07:99:1b:c7:ea:6e:b7:c3:ed:af:98:b6: 25:08:19:86:f9:46:e5:cd:73:f5:c1:96:68:12:73:90:55:7e: 2e:98:c4:16:18:d3:c0:ae:7d:b7:4c:90:61:bb:89:ba:5f:31: 20:65:b5:3a:24:ff:19:c6:53:d5:b7:e3:7e:c9:00:e6:5b:c7: 6b:4b:cf:7a:06:b1:48:dc:14:49:9c:1b:15:c2:68:4e:f1:81: 20:44:bc:5e:07:f9:e9:d9:ac:d0:4f:a9:b9:10:4c:5c:61:6f: 53:83:08:4f:0f:ca:35:97:25:81:20:9f:bc:53:7e:32:83:eb: 8a:25:bf:78:1d:d5:98:4d:f1:b2:af:8b:1b:06:bc:c6:85:28: 66:0b:fe:b3:7b:f0:95:e5:48:59:1c:1c:e4:54:c4:22:e4:cb: 3b:ff:df:4a:5a:e9:0f:dd:1f:0d:ed:c6:50:7b:9b:49:32:7c: 73:09:fc:4a:86:63:b2:99:38:19:cd:56:91:34:f8:67:49:80: cb:e0:37:b7:eb:a9:cd:88:55:bf:77:74:02:03:e3:6b:cf:fc: c8:01:69:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lgx23y914mTkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk YmE1OTA3NGQtZDk2Ni00ZGJhLWI2ZWQtMTVjMzM4MGE5ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh5RXh//MmxcDu0DfRkXD6OgREPUCMq6xBjC ZYTslEpoPxY+4jTyg3YZGN3mlRQ3RbXwJIugvw1EiMD7/qr8qLD3YAVgrpRLIbK0 KmUgpuV4ixGvYBldkHDniKmKHWs88byKnlhUdi2jKlT78uAerkVQzuWDAfV1FOp6 3K3lLTtQflqoVITd7uBZMVxhUNxmUXtK/SBAxIQ3B/PYjtj2d0MxBWGlN4mCz087 Jro7LfsnwPX50yukXqgno0XZoopZvWjn2/RQPE2uJH4G0Rqn9xEzCahj5FO7+T8I CNHx41SKnHyNPIKd0pBdvJ2aptrAGpbDM8yPZlUZKxAmVCFrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWD4Ico/KE5hkiER70aI8pFV7QbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjlmODc1N2ItMDFmNC0z MGJlLWE0NjMtMmQ5N2UzMmYxOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWj2nw3cfskLFl//XUv4BTaMMEob0CD0E+boPSmALgNig5b5mIZMP/D OgeZG8fqbrfD7a+YtiUIGYb5RuXNc/XBlmgSc5BVfi6YxBYY08CufbdMkGG7ibpf MSBltTok/xnGU9W3437JAOZbx2tLz3oGsUjcFEmcGxXCaE7xgSBEvF4H+enZrNBP qbkQTFxhb1ODCE8PyjWXJYEgn7xTfjKD64olv3gd1ZhN8bKvixsGvMaFKGYL/rN7 8JXlSFkcHORUxCLkyzv/30pa6Q/dHw3txlB7m0kyfHMJ/EqGY7KZOBnNVpE0+GdJ gMvgN7frqc2IVb93dAID42vP/MgBaQ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:10 2025 by rpki-client