$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa File: 2fa8ec23-64f5-30f3-8286-eea4d237e288.roa (raw, json) Hash identifier: et1zHf6e970YT0MExsURW2+wjCwXQZjZkBTndgs4//A= Subject key identifier: FF:0B:E4:12:DF:86:D0:25:D3:72:8C:D9:A0:2D:1E:90:DE:EB:AA:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DFEDBDAED4951954FC00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:df:ed:bd:ae:d4:95:19:54:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=6d500209-f5f5-45a4-8da4-7b2b3d7b38ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:b8:f3:e4:6d:86:08:38:db:09:1d:81:4e: 79:1b:0e:ef:b4:ed:be:bb:87:74:7b:f8:3f:52:53: 43:12:f0:93:0d:f9:a8:5d:a6:46:13:d9:f7:af:e0: 31:b1:fd:36:4a:72:07:a8:86:e3:ea:7e:c4:3f:a7: 8c:3b:0e:85:83:9c:06:de:3c:17:3c:64:cf:b9:9c: fd:38:4c:73:ab:19:e1:d7:b4:06:0e:2f:aa:66:a4: 5f:f7:3d:5c:10:8c:ec:1e:13:42:55:da:5f:44:af: 4a:34:c1:35:09:a1:81:71:28:6e:e6:33:17:56:c6: 50:d9:58:10:c9:9f:fa:35:6c:4d:6a:2f:3b:2c:eb: 5f:59:19:91:cf:5e:c6:84:71:ac:e0:dc:c9:62:96: 82:c8:c3:03:70:d3:2f:d5:f8:d6:e7:11:d5:bd:8d: 20:93:fb:f9:dc:25:9f:7b:4e:f3:a8:fc:11:e6:a0: 06:5a:ef:b3:9c:01:12:59:a5:62:0d:f9:23:5f:15: c4:7b:73:ee:8c:11:84:4f:e0:93:d1:04:a3:e5:3d: 90:f8:96:fa:11:d4:e8:4b:93:cb:81:58:7c:34:eb: f4:ca:d4:d6:55:8f:55:31:46:b7:9b:89:a2:ee:c7: b3:02:fd:b8:04:4b:08:08:0b:73:94:a3:c5:cc:14: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0B:E4:12:DF:86:D0:25:D3:72:8C:D9:A0:2D:1E:90:DE:EB:AA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:62:1e:8f:58:ee:a2:7d:09:ec:37:0d:a7:4d:33:65:12:56: 83:d8:8a:d1:c3:f9:d7:cb:3b:bf:eb:63:f1:b5:c6:3b:88:8b: 1c:39:29:32:e2:93:f6:0c:92:28:54:03:6f:9d:b8:1d:30:b6: 22:aa:b6:21:b7:07:4c:f0:8e:a5:04:ea:4e:f3:c8:d9:c2:ab: cb:4c:1a:26:64:a2:01:31:e2:07:27:c0:e3:e8:da:14:4b:fc: b2:95:46:86:72:a7:c3:6b:09:1f:da:9d:4b:a1:6b:7a:32:70: 04:6b:dd:7b:1c:a3:a3:8f:7b:bd:3f:45:c2:c0:3a:1b:97:22: 8a:36:8e:d2:84:13:a3:ea:6f:7d:8c:e7:1b:76:dc:cf:47:ac: be:22:4d:b0:40:1e:b5:55:e0:b9:a6:3f:c7:7e:38:3f:4c:22: 51:e6:2a:14:a1:08:2d:a0:8c:98:cc:ed:72:2c:fc:84:ad:82: b5:ab:91:e4:42:36:4a:d8:ec:54:37:0f:e7:25:b4:c0:3e:f9: af:7a:a0:f6:db:56:a8:92:b2:e8:7b:2a:4c:5d:14:a5:91:47: ac:4a:3b:b2:52:38:ce:83:57:cd:e8:d7:b9:5c:2c:15:85:ea: 93:92:8d:0e:4b:f6:cd:60:80:8b:8c:b8:73:62:98:f0:0a:ab: ef:1f:37:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN/tva7UlRlU/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NmQ1MDAyMDktZjVmNS00NWE0LThkYTQtN2IyYjNkN2IzOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokq48+Rthgg42wkdgU55Gw7vtO2+u4d0e/g/ UlNDEvCTDfmoXaZGE9n3r+Axsf02SnIHqIbj6n7EP6eMOw6Fg5wG3jwXPGTPuZz9 OExzqxnh17QGDi+qZqRf9z1cEIzsHhNCVdpfRK9KNME1CaGBcShu5jMXVsZQ2VgQ yZ/6NWxNai87LOtfWRmRz17GhHGs4NzJYpaCyMMDcNMv1fjW5xHVvY0gk/v53CWf e07zqPwR5qAGWu+znAESWaViDfkjXxXEe3PujBGET+CT0QSj5T2Q+Jb6EdToS5PL gVh8NOv0ytTWVY9VMUa3m4mi7sezAv24BEsICAtzlKPFzBQVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8L5BLfhtAl03KM2aAtHpDe66q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmZhOGVjMjMtNjRmNS0z MGYzLTgyODYtZWVhNGQyMzdlMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxiHo9Y7qJ9Cew3DadNM2USVoPYitHD+dfLO7/rY/G1xjuIixw5KTLi k/YMkihUA2+duB0wtiKqtiG3B0zwjqUE6k7zyNnCq8tMGiZkogEx4gcnwOPo2hRL /LKVRoZyp8NrCR/anUuha3oycARr3Xsco6OPe70/RcLAOhuXIoo2jtKEE6Pqb32M 5xt23M9HrL4iTbBAHrVV4LmmP8d+OD9MIlHmKhShCC2gjJjM7XIs/IStgrWrkeRC NkrY7FQ3D+cltMA++a96oPbbVqiSsuh7KkxdFKWRR6xKO7JSOM6DV83o17lcLBWF 6pOSjQ5L9s1ggIuMuHNimPAKq+8fN5A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:18 2025 by rpki-client