$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b93c92b-9d86-3878-a27a-7a22acc547fb.roa File: 2b93c92b-9d86-3878-a27a-7a22acc547fb.roa (raw, json) Hash identifier: 6uFWprUtNpB0tGkyUTVaQ3uvFkn10nblseCG1YEAMNA= Subject key identifier: 65:02:A9:B9:F4:58:3F:A0:80:76:29:67:BC:63:AF:FF:98:DD:AE:80 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DE3B7D559562516EC7C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b93c92b-9d86-3878-a27a-7a22acc547fb.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:de:3b:7d:55:95:62:51:6e:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=6b75dcde-f8fd-49e9-9182-bc6028d4a66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:4d:99:b8:94:2c:8a:94:01:3c:75:05:b6: ad:6c:2d:a5:87:77:99:95:96:f2:83:80:6d:92:a1: da:f5:72:da:a5:8a:77:bc:63:0f:47:43:41:1e:5f: eb:44:9c:06:e8:39:b8:d6:d4:63:f0:73:7c:59:e7: b0:9a:02:51:f3:00:7e:e7:b8:07:6e:c1:73:7d:80: 36:f3:65:b2:d1:0b:d4:9d:b8:14:f4:cf:96:95:05: e0:71:8c:57:11:aa:ab:18:a1:93:4c:62:23:8e:8c: ab:a3:61:c1:c7:07:27:83:9a:45:59:77:9e:a2:91: 14:79:88:29:cd:2a:a2:c1:3c:95:d1:3d:5e:a8:5b: 1a:be:56:e1:f5:3a:1c:8e:92:95:44:00:a5:e0:af: 6f:d4:f7:09:16:17:14:81:7d:5c:28:65:70:7f:f4: cf:55:8e:bc:2b:8b:e2:74:7d:02:a8:23:93:23:b9: 4c:21:f7:bb:5d:83:52:4e:47:a7:3c:e8:8d:c7:2b: 05:5b:b4:31:39:81:b9:13:7c:9d:ba:54:22:31:ee: d4:c7:40:40:1f:93:7b:4e:d3:41:96:de:a5:a5:ae: ac:ae:07:2f:a1:52:ed:d6:db:25:07:31:38:5b:18: 98:b2:66:02:3d:80:e2:b6:07:d7:2b:7d:5c:eb:4c: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:02:A9:B9:F4:58:3F:A0:80:76:29:67:BC:63:AF:FF:98:DD:AE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b93c92b-9d86-3878-a27a-7a22acc547fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:db:2b:39:d7:0a:32:ef:4a:40:75:ad:97:17:cf:7f:59:99: d1:77:9b:9f:2f:24:86:13:9e:e1:0a:e7:60:cf:cf:0a:17:40: ac:23:df:26:a3:e0:09:2b:09:b2:4c:9a:41:28:ea:31:22:54: f8:72:e7:d6:22:44:61:90:34:4e:f0:5d:a6:ec:7b:99:df:9f: be:92:00:f0:af:b3:46:a0:03:e1:74:c0:76:ab:89:65:7b:2a: 67:2b:83:8d:c7:b3:1f:58:65:9c:f1:ef:e1:af:d9:66:af:03: b8:ca:64:8d:00:07:fb:b9:12:88:04:ac:6b:71:4e:a6:29:b2: 15:38:a1:2e:69:4d:f7:9a:e0:6b:78:e2:68:a1:0d:4d:34:9c: 50:71:7a:9d:6c:d3:eb:c4:99:19:e0:22:18:3d:f0:43:31:58: 08:ac:9a:4a:27:2c:db:b4:47:fd:c8:b6:17:89:09:08:bc:8d: ca:f8:1e:94:dd:66:4b:01:07:a7:04:07:ed:a1:13:4b:74:9a: 5c:b6:bd:3b:3f:63:15:eb:2e:95:1c:97:19:1c:6a:e5:25:1c: c8:b1:c7:76:e8:9c:ef:5d:f3:d2:17:5e:ab:42:65:e0:4c:01: e4:81:64:83:53:51:86:59:20:72:a3:4d:dd:f4:89:0f:a5:64: 48:7c:8e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN47fVWVYlFux8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NmI3NWRjZGUtZjhmZC00OWU5LTkxODItYmM2MDI4ZDRhNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3NNmbiULIqUATx1BbatbC2lh3eZlZbyg4Bt kqHa9XLapYp3vGMPR0NBHl/rRJwG6Dm41tRj8HN8WeewmgJR8wB+57gHbsFzfYA2 82Wy0QvUnbgU9M+WlQXgcYxXEaqrGKGTTGIjjoyro2HBxwcng5pFWXeeopEUeYgp zSqiwTyV0T1eqFsavlbh9TocjpKVRACl4K9v1PcJFhcUgX1cKGVwf/TPVY68K4vi dH0CqCOTI7lMIfe7XYNSTkenPOiNxysFW7QxOYG5E3ydulQiMe7Ux0BAH5N7TtNB lt6lpa6srgcvoVLt1tslBzE4WxiYsmYCPYDitgfXK31c60zDwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUCqbn0WD+ggHYpZ7xjr/+Y3a6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmI5M2M5MmItOWQ4Ni0z ODc4LWEyN2EtN2EyMmFjYzU0N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrbKznXCjLvSkB1rZcXz39ZmdF3m58vJIYTnuEK52DPzwoXQKwj3yaj 4AkrCbJMmkEo6jEiVPhy59YiRGGQNE7wXabse5nfn76SAPCvs0agA+F0wHariWV7 Kmcrg43Hsx9YZZzx7+Gv2WavA7jKZI0AB/u5EogErGtxTqYpshU4oS5pTfea4Gt4 4mihDU00nFBxep1s0+vEmRngIhg98EMxWAismkonLNu0R/3ItheJCQi8jcr4HpTd ZksBB6cEB+2hE0t0mly2vTs/YxXrLpUclxkcauUlHMixx3bonO9d89IXXqtCZeBM AeSBZINTUYZZIHKjTd30iQ+lZEh8jsQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:38:40 2025 by rpki-client