$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c395da3-9429-35a5-a856-aff256a33aa9.roa File: 2c395da3-9429-35a5-a856-aff256a33aa9.roa (raw, json) Hash identifier: 2kKUJhpaSR73hH/s6/SaH+7/T7LxsUzGAx0hA1gJ/r4= Subject key identifier: E3:0B:F8:BD:A8:4B:D2:99:4D:68:D2:D6:02:1B:B9:A1:41:DC:18:D0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FA4FC4D5E1FFE6DE0100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c395da3-9429-35a5-a856-aff256a33aa9.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fa:4f:c4:d5:e1:ff:e6:de:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=c166b20f-fa19-4eb5-889c-fc4592a3f240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:86:90:80:39:ae:28:2d:78:27:d8:d3:64: e5:ec:be:d4:09:9d:96:19:12:53:36:f3:2f:e4:58: 92:fd:4e:07:58:d9:60:0b:61:ab:a3:94:bb:6b:2a: e2:0c:74:6d:9c:2d:07:0d:9a:27:23:38:64:fb:4f: 0f:4d:1b:99:f1:f6:18:68:4e:bb:13:bc:07:8c:66: eb:10:7d:7b:3d:06:4b:e5:50:39:c5:6b:f1:49:15: f3:8b:3d:0e:49:ef:d3:d8:1d:42:48:87:db:14:88: 37:38:d9:3d:b0:e4:65:77:88:d4:4f:83:70:3e:10: 9f:ab:41:2b:be:fa:a9:ca:37:63:ae:b6:96:48:eb: 04:bf:7e:db:15:a3:68:d4:60:4e:59:ef:5d:50:d5: 11:17:6c:79:5c:9c:1f:c3:2f:81:e6:94:73:b3:ab: 2a:e5:b4:68:34:5b:d6:f4:94:87:00:3e:e4:eb:bd: d2:15:08:1a:16:1e:8f:81:d4:5f:25:cd:7a:cd:e5: 81:76:5b:91:ad:4a:13:55:26:82:70:9a:29:2e:4f: e7:ba:45:04:de:a7:d7:09:10:a9:7e:d6:2d:76:a6: ce:75:f6:c4:68:46:c8:a2:25:09:f2:2c:ae:40:d3: f2:02:97:7d:2a:68:d7:40:99:cf:67:07:84:43:fa: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0B:F8:BD:A8:4B:D2:99:4D:68:D2:D6:02:1B:B9:A1:41:DC:18:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c395da3-9429-35a5-a856-aff256a33aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f7:e2:d1:b4:d2:bf:27:8e:4c:95:a9:5b:8b:8a:68:2c:cd: 3a:80:cb:6b:1c:d7:46:fe:8d:92:26:f0:58:81:a7:40:93:bd: 23:2a:9e:0a:22:02:5d:a8:86:c4:32:12:f8:4c:99:74:43:e4: d9:73:39:42:54:e0:1d:77:05:55:d9:5d:16:27:a0:80:5f:4c: a8:e3:ee:60:9c:6e:fd:b9:1a:45:1a:17:29:90:a3:c1:0c:36: 2d:52:43:bf:6a:91:95:9e:ee:4d:58:24:ec:18:94:6b:28:4d: 88:a8:1e:65:c1:d3:6a:49:7e:b2:ea:07:fe:ca:85:3a:76:1a: cb:90:9f:03:34:9a:21:5e:a5:cf:06:59:c2:59:f9:57:54:ae: f4:4c:21:d2:08:fc:a0:81:e4:2c:fd:50:7c:32:73:02:b2:7c: 44:fb:cc:ae:1e:fd:e3:75:bb:2c:21:46:03:aa:08:70:f5:30: 03:4a:72:b7:37:b4:56:4c:9a:7e:66:41:34:1f:78:30:b2:39: fb:27:b3:10:6b:59:3e:98:a3:04:e3:7e:f2:5a:ba:1c:a3:83: 4f:2c:fa:10:59:17:7b:65:b1:22:46:e6:78:9d:2b:a0:eb:86: 00:59:e3:f3:87:74:47:2d:90:86:78:0e:8b:e8:85:58:60:d7: 00:9e:3e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPpPxNXh/+beAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YzE2NmIyMGYtZmExOS00ZWI1LTg4OWMtZmM0NTkyYTNmMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVCGkIA5rigteCfY02Tl7L7UCZ2WGRJTNvMv 5FiS/U4HWNlgC2Gro5S7ayriDHRtnC0HDZonIzhk+08PTRuZ8fYYaE67E7wHjGbr EH17PQZL5VA5xWvxSRXziz0OSe/T2B1CSIfbFIg3ONk9sORld4jUT4NwPhCfq0Er vvqpyjdjrraWSOsEv37bFaNo1GBOWe9dUNURF2x5XJwfwy+B5pRzs6sq5bRoNFvW 9JSHAD7k673SFQgaFh6PgdRfJc16zeWBdluRrUoTVSaCcJopLk/nukUE3qfXCRCp ftYtdqbOdfbEaEbIoiUJ8iyuQNPyApd9KmjXQJnPZweEQ/oDEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOML+L2oS9KZTWjS1gIbuaFB3BjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmMzOTVkYTMtOTQyOS0z NWE1LWE4NTYtYWZmMjU2YTMzYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj34tG00r8njkyVqVuLimgszTqAy2sc10b+jZIm8FiBp0CTvSMqngoi Al2ohsQyEvhMmXRD5NlzOUJU4B13BVXZXRYnoIBfTKjj7mCcbv25GkUaFymQo8EM Ni1SQ79qkZWe7k1YJOwYlGsoTYioHmXB02pJfrLqB/7KhTp2GsuQnwM0miFepc8G WcJZ+VdUrvRMIdII/KCB5Cz9UHwycwKyfET7zK4e/eN1uywhRgOqCHD1MANKcrc3 tFZMmn5mQTQfeDCyOfsnsxBrWT6YowTjfvJauhyjg08s+hBZF3tlsSJG5nidK6Dr hgBZ4/OHdEctkIZ4DovohVhg1wCePog= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:50 2025 by rpki-client