$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fc41368-956b-32a6-aa63-67503ce8f40c.roa File: 2fc41368-956b-32a6-aa63-67503ce8f40c.roa (raw, json) Hash identifier: NHAUavYPfm6xiA9RyKBAf93MVmuyJ4j/hk+kqTOoYcw= Subject key identifier: 62:81:61:00:37:0A:AC:86:4E:3D:6E:15:55:AE:DD:5E:84:D6:82:8F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64D570C92D5ED210FDAC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fc41368-956b-32a6-aa63-67503ce8f40c.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4d:57:0c:92:d5:ed:21:0f:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=a6e4fab4-475c-49b1-931f-9e3da1df4815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:b1:d0:dc:7f:43:a2:39:d6:c3:e7:c6:8a: c1:1d:00:3a:ca:6c:84:35:4d:d8:4c:71:fb:d5:f1: 76:61:85:ef:f5:46:93:22:47:d5:ff:e6:d0:9a:07: 5d:f6:10:bc:9c:bb:4e:7e:db:73:1d:06:74:22:25: 3b:45:90:76:32:0c:8c:3b:51:34:d6:e1:df:f9:c7: 3b:d1:fb:6d:03:bc:d2:a5:74:3f:c0:e0:e8:16:dd: 2a:a1:2b:3c:a7:e3:e9:c6:e3:13:59:83:ba:43:87: c7:f4:c0:77:eb:a2:42:60:54:8a:d3:d9:b6:8d:2c: 2f:a1:2e:5b:59:a5:fa:4d:5d:f6:ac:8d:74:35:c0: a3:1f:16:8b:19:62:8c:58:ae:3c:ec:7a:a3:ff:3d: 33:f9:21:34:73:03:8e:d1:3b:2f:d7:a2:bf:31:77: 69:29:0b:16:54:0c:27:71:55:20:51:5e:c9:0f:1b: 6f:d3:35:9f:e7:d3:f0:d2:ba:5f:7d:1e:7e:b1:3c: 8e:e4:6e:d3:eb:33:74:e5:d3:5c:22:9e:dc:a9:13: ff:85:e5:e0:ad:f6:fe:6a:79:4b:ed:5f:3a:8f:9a: c9:ac:b1:ec:c5:a2:fc:d8:14:6e:e7:55:1d:10:60: 06:18:19:93:5a:2f:33:34:ce:a6:27:29:b3:d9:e9: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:81:61:00:37:0A:AC:86:4E:3D:6E:15:55:AE:DD:5E:84:D6:82:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fc41368-956b-32a6-aa63-67503ce8f40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:92:d8:95:65:ca:13:53:ee:e9:ca:0b:cd:a3:31:35:4f:d1: ae:dc:d7:51:d8:69:41:25:88:a3:92:94:01:e1:6e:69:f3:e0: f8:0d:7c:b5:05:be:d3:30:2c:64:4c:d0:99:d2:35:a0:61:7c: a2:89:91:b5:42:bc:c1:9f:35:dc:12:eb:0e:e0:95:70:52:e5: 22:df:a5:10:e3:d2:69:ad:38:a6:ef:aa:92:95:bf:cc:57:2e: 12:c7:39:c6:a9:c8:46:6e:b1:90:40:5a:2b:d7:7d:2c:fc:53: 27:62:67:a4:b7:82:c0:61:ed:ed:21:22:1b:25:30:86:c5:16: 87:5f:95:51:fb:36:47:cc:5d:1e:c3:98:b0:e1:5a:c6:51:12: 3f:e8:cd:0a:e7:d8:cc:fb:34:32:c0:77:3e:d7:8f:09:13:1f: dc:e5:ea:ca:c2:cc:7c:54:eb:6c:c2:55:f1:81:6a:83:a3:0b: 09:9b:0e:73:7e:9e:a2:42:50:75:3a:48:b1:47:20:a7:bc:71: ac:ba:ae:8c:b8:14:fe:13:a3:d3:25:45:c3:09:70:df:cf:00: fb:e1:e5:66:7d:c6:58:1f:2e:a8:f5:05:eb:43:5e:69:11:32: 27:e4:d2:b6:f0:3d:f3:48:97:b3:92:6b:6d:5c:ca:05:ca:a3: 0f:10:f2:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9k1XDJLV7SEP2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk YTZlNGZhYjQtNDc1Yy00OWIxLTkzMWYtOWUzZGExZGY0ODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoux0Nx/Q6I51sPnxorBHQA6ymyENU3YTHH7 1fF2YYXv9UaTIkfV/+bQmgdd9hC8nLtOfttzHQZ0IiU7RZB2MgyMO1E01uHf+cc7 0fttA7zSpXQ/wODoFt0qoSs8p+PpxuMTWYO6Q4fH9MB366JCYFSK09m2jSwvoS5b WaX6TV32rI10NcCjHxaLGWKMWK487Hqj/z0z+SE0cwOO0Tsv16K/MXdpKQsWVAwn cVUgUV7JDxtv0zWf59Pw0rpffR5+sTyO5G7T6zN05dNcIp7cqRP/heXgrfb+anlL 7V86j5rJrLHsxaL82BRu51UdEGAGGBmTWi8zNM6mJymz2engHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKBYQA3CqyGTj1uFVWu3V6E1oKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmZjNDEzNjgtOTU2Yi0z MmE2LWFhNjMtNjc1MDNjZThmNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+S2JVlyhNT7unKC82jMTVP0a7c11HYaUEliKOSlAHhbmnz4PgNfLUF vtMwLGRM0JnSNaBhfKKJkbVCvMGfNdwS6w7glXBS5SLfpRDj0mmtOKbvqpKVv8xX LhLHOcapyEZusZBAWivXfSz8UydiZ6S3gsBh7e0hIhslMIbFFodflVH7NkfMXR7D mLDhWsZREj/ozQrn2Mz7NDLAdz7XjwkTH9zl6srCzHxU62zCVfGBaoOjCwmbDnN+ nqJCUHU6SLFHIKe8cay6roy4FP4To9MlRcMJcN/PAPvh5WZ9xlgfLqj1BetDXmkR Mifk0rbwPfNIl7OSa21cygXKow8Q8l0= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:17 2025 by rpki-client