$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa File: 2e33a78a-a08a-30af-89e7-9b336e2d0057.roa (raw, json) Hash identifier: 4SD8UPgGAk1uBtjRP5FpAzIeTGhEZMqzHJ+0qiiIVY0= Subject key identifier: BF:5E:65:29:3F:81:33:2D:24:63:19:79:F5:71:F7:79:29:45:4B:AE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DD281C90834C0CFFE700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:dd:28:1c:90:83:4c:0c:ff:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=57c5c219-3a4b-4633-9b63-fa3c93b2e63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:da:e1:96:2e:82:59:6b:77:5e:7c:2a:1a: 37:62:81:7d:3c:51:32:8f:84:06:3d:75:71:00:10: dc:22:c6:04:95:5f:6b:f0:8b:b9:68:00:12:b7:60: c3:f3:2d:e5:fd:d1:fb:3c:f3:d9:a4:f9:29:f1:8a: 4f:2c:5e:e7:ca:7d:38:6b:3a:ee:c6:8e:52:53:d5: 0d:e9:bc:c2:de:71:0e:d3:22:ea:a9:63:cd:67:cf: 16:f7:fb:5f:82:04:50:5d:73:dc:17:0a:32:6c:9f: 8e:7a:8c:6d:f2:46:ee:80:a9:6d:d2:1e:dd:35:f6: df:97:83:dc:99:f2:50:0c:60:e9:c2:5e:96:d9:04: 9b:01:21:d6:7a:2f:80:ea:2e:46:69:f3:78:ef:ab: e9:a9:01:7f:ec:f4:00:e8:3f:b0:76:78:01:0e:9a: 56:53:63:fd:7b:e9:67:62:da:9c:0a:ab:8e:b5:00: 19:3a:68:2e:61:42:c0:f7:cf:80:94:41:9c:08:5a: e8:b0:4c:27:75:33:3b:9d:f9:0e:3e:69:0a:92:63: 1f:41:a5:3f:52:4a:4a:41:d3:ee:62:e0:01:a4:1b: 4e:57:ed:d5:d4:f6:d3:c4:d9:94:0e:78:d7:67:c8: 19:9b:53:60:b7:38:10:0b:ef:85:33:83:11:87:c5: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:65:29:3F:81:33:2D:24:63:19:79:F5:71:F7:79:29:45:4B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:3a:82:d1:0c:36:db:03:13:9b:5b:60:0d:5a:f8:83:32:e0: ce:62:c7:5e:d5:7d:09:7a:34:d1:58:1c:9c:ca:ac:c1:66:6d: db:e5:cb:f7:13:6d:3e:b3:40:83:09:62:76:f0:00:b1:dc:48: 03:6f:c7:20:4e:49:50:a7:b4:6a:34:5f:3b:53:c9:29:34:3f: 18:98:fd:13:63:05:07:0c:a0:69:a5:70:84:30:cc:ee:34:7c: 7f:ae:78:7b:f0:ac:57:4d:b5:cf:02:68:06:08:37:2f:c1:42: 2d:f3:5c:90:7a:b1:91:aa:35:12:56:1f:21:04:58:55:d5:39: 65:32:1f:11:3e:89:56:b5:b5:c1:83:8d:72:31:7b:0c:e7:5c: ee:89:cf:4c:e3:f9:ce:86:83:aa:9d:42:d0:d5:40:96:3d:88: 80:96:d6:ba:3a:4b:cd:ac:11:af:98:f9:ef:48:2f:03:9d:e5: fe:14:22:ea:14:84:7b:4c:7c:6b:be:6e:b7:58:54:e4:20:dc: 87:ab:18:fa:b5:5d:8e:bc:6b:a3:cc:b3:fe:a3:5b:a8:a0:97: 16:d8:c7:0a:65:dc:fc:1c:a0:0d:89:47:48:ae:83:7f:04:3b: c0:0f:05:19:ee:07:37:06:0b:ef:66:f9:b8:67:3b:b2:82:76: f9:60:91:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN0oHJCDTAz/5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NTdjNWMyMTktM2E0Yi00NjMzLTliNjMtZmEzYzkzYjJlNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTHa4ZYugllrd158Kho3YoF9PFEyj4QGPXVx ABDcIsYElV9r8Iu5aAASt2DD8y3l/dH7PPPZpPkp8YpPLF7nyn04azruxo5SU9UN 6bzC3nEO0yLqqWPNZ88W9/tfggRQXXPcFwoybJ+Oeoxt8kbugKlt0h7dNfbfl4Pc mfJQDGDpwl6W2QSbASHWei+A6i5GafN476vpqQF/7PQA6D+wdngBDppWU2P9e+ln YtqcCquOtQAZOmguYULA98+AlEGcCFrosEwndTM7nfkOPmkKkmMfQaU/UkpKQdPu YuABpBtOV+3V1PbTxNmUDnjXZ8gZm1NgtzgQC++FM4MRh8VcYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9eZSk/gTMtJGMZefVx93kpRUuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmUzM2E3OGEtYTA4YS0z MGFmLTg5ZTctOWIzMzZlMmQwMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALU6gtEMNtsDE5tbYA1a+IMy4M5ix17VfQl6NNFYHJzKrMFmbdvly/cT bT6zQIMJYnbwALHcSANvxyBOSVCntGo0XztTySk0PxiY/RNjBQcMoGmlcIQwzO40 fH+ueHvwrFdNtc8CaAYINy/BQi3zXJB6sZGqNRJWHyEEWFXVOWUyHxE+iVa1tcGD jXIxewznXO6Jz0zj+c6Gg6qdQtDVQJY9iICW1ro6S82sEa+Y+e9ILwOd5f4UIuoU hHtMfGu+brdYVOQg3IerGPq1XY68a6PMs/6jW6iglxbYxwpl3PwcoA2JR0iug38E O8APBRnuBzcGC+9m+bhnO7KCdvlgkXM= -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:07 2025 by rpki-client