$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa File: 3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa (raw, json) Hash identifier: C7O63I5GhWMh0GgirQgPc2Vjc2SpMUHk3DeM/leFlJA= Subject key identifier: BF:8F:5D:15:22:62:92:30:71:FB:31:2A:EF:11:A9:8E:4B:21:93:B3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBAFDDBDC07DF8B8CB1AC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:af:dd:bd:c0:7d:f8:b8:cb:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=3f1fcf52-be52-441c-bf7e-032563c72469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:0b:63:d8:5d:93:c9:e9:ed:0a:b3:8d:7e: ba:43:9f:d6:e3:01:7a:1c:80:c4:09:4c:2c:dc:b9: 61:9e:bc:38:2f:98:d2:2b:a1:c3:c8:ba:80:a4:cc: ff:34:78:6e:a3:f6:3c:dd:87:bb:2b:5a:8d:44:9d: 89:01:15:07:02:b2:8d:8d:d4:a1:b0:09:19:12:8f: 73:02:22:38:54:4d:c9:69:37:25:2b:af:3b:2d:89: 2b:fd:7c:ae:b8:5b:6e:8c:2e:94:12:ca:cb:b4:3a: 3d:b4:1e:61:66:38:af:df:11:57:d0:5d:de:3d:0d: cb:01:86:ea:fa:cc:4e:92:58:a4:8a:79:38:f5:6e: 0c:ef:5a:af:41:71:e2:0c:52:f5:d9:f9:7b:23:1c: bf:ba:dd:f2:d8:3a:73:2e:8a:c2:d6:98:29:d0:a5: 80:8f:b0:47:cb:98:e3:f6:0a:37:2a:3a:85:3c:31: 0f:0f:7a:59:f3:1f:4a:89:9f:0c:86:e2:34:5f:b1: d0:17:69:a0:34:6b:98:e4:b0:59:e7:6b:3f:3d:49: e4:78:45:9c:f4:e0:e5:a5:09:4d:c3:9b:ae:db:4f: f7:a8:da:40:20:2d:f0:03:9d:61:75:e8:72:54:41: cf:73:73:29:5c:49:44:1f:02:0e:7f:1b:b7:4a:db: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:5D:15:22:62:92:30:71:FB:31:2A:EF:11:A9:8E:4B:21:93:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d9:c9:60:7d:c0:f2:34:25:be:cc:0d:ac:55:f0:d7:71:1a: 3d:27:32:e9:3a:1a:31:32:0c:10:b5:4a:35:38:a4:3a:ff:58: 8a:40:9c:2f:f8:c9:07:ea:d6:b1:98:f5:cc:16:3c:7a:20:0b: 98:48:52:c4:79:6d:46:23:0a:92:64:83:c5:a7:92:c4:f1:a6: 75:98:f9:a0:db:88:07:b9:d3:59:73:93:98:9e:27:98:9b:d0: 2a:d6:f2:4e:8f:b3:0d:a7:50:22:dc:5c:c5:b2:53:d6:36:4d: 6a:cc:28:3e:28:ff:c2:fa:29:ca:53:6c:9e:35:16:6e:61:00: a5:5c:12:6a:20:71:72:90:4d:af:da:7b:e2:b8:da:a7:d0:49: 78:fb:3f:d3:b7:13:04:2c:78:ed:f9:d8:bb:c6:fa:1f:ce:04: 54:42:91:73:69:f8:5e:03:47:a6:a3:f6:80:e7:b1:4e:c3:c4: f4:6d:6d:8b:b7:33:9d:41:19:43:fd:bd:3a:ad:a3:d6:05:96: 94:8f:c2:cb:60:c5:ab:27:78:20:74:5b:94:15:5b:d7:c0:7c: 7b:66:9d:d7:c7:2a:a6:b2:53:da:c2:f3:40:17:51:19:bd:20: ee:fe:38:8d:b7:06:62:a0:e3:b1:e0:f0:f9:be:f5:56:9a:ca: 54:ca:71:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66/dvcB9+LjLGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk M2YxZmNmNTItYmU1Mi00NDFjLWJmN2UtMDMyNTYzYzcyNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0cLY9hdk8np7QqzjX66Q5/W4wF6HIDECUws 3Llhnrw4L5jSK6HDyLqApMz/NHhuo/Y83Ye7K1qNRJ2JARUHArKNjdShsAkZEo9z AiI4VE3JaTclK687LYkr/XyuuFtujC6UEsrLtDo9tB5hZjiv3xFX0F3ePQ3LAYbq +sxOklikink49W4M71qvQXHiDFL12fl7Ixy/ut3y2DpzLorC1pgp0KWAj7BHy5jj 9go3KjqFPDEPD3pZ8x9KiZ8MhuI0X7HQF2mgNGuY5LBZ52s/PUnkeEWc9ODlpQlN w5uu20/3qNpAIC3wA51hdehyVEHPc3MpXElEHwIOfxu3Stt3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+PXRUiYpIwcfsxKu8RqY5LIZOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM0MWJiZmUtMDYwMi0z YmNlLWE3YTItZDcyMTMyMWQ2YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHZyWB9wPI0Jb7MDaxV8NdxGj0nMuk6GjEyDBC1SjU4pDr/WIpAnC/4 yQfq1rGY9cwWPHogC5hIUsR5bUYjCpJkg8WnksTxpnWY+aDbiAe501lzk5ieJ5ib 0CrW8k6Psw2nUCLcXMWyU9Y2TWrMKD4o/8L6KcpTbJ41Fm5hAKVcEmogcXKQTa/a e+K42qfQSXj7P9O3EwQseO352LvG+h/OBFRCkXNp+F4DR6aj9oDnsU7DxPRtbYu3 M51BGUP9vTqto9YFlpSPwstgxasneCB0W5QVW9fAfHtmndfHKqayU9rC80AXURm9 IO7+OI23BmKg47Hg8Pm+9VaaylTKcWQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:25 2025 by rpki-client