$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa File: 39d05664-addf-360b-a99c-36ec6279d45b.roa (raw, json) Hash identifier: 1SmOR9cusPf0Rr2cZRwM11CZ8aw51nOtqPS3VC2S9IQ= Subject key identifier: 16:9D:87:27:9C:E4:B0:3D:23:1F:7E:C6:95:9F:5A:B4:42:8D:68:EA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F5AF496E926A5794B680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f5:af:49:6e:92:6a:57:94:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=27cbbaab-2424-46a6-9649-933d53bb30bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:39:59:6b:36:9d:f3:24:2a:12:d2:94:b4: 94:37:4a:c4:43:b5:05:db:fb:8a:ad:28:96:8c:bf: 0c:26:8d:8d:4a:59:c0:ed:9c:c9:ec:0e:a7:07:1e: d2:1a:b8:df:17:fe:3b:da:c1:bb:cc:86:8b:5f:bb: 01:22:4b:bc:a6:36:12:aa:cf:98:a3:67:02:a3:28: 22:d9:f9:f3:30:a6:76:84:51:7d:2a:b0:05:f5:8c: 70:39:37:75:15:bf:af:c0:82:47:9e:33:ab:9b:04: db:0a:76:45:32:2c:d1:08:8d:b0:c1:3f:0f:27:0e: 19:99:32:8c:48:b8:4f:a4:39:6c:66:9f:ca:12:42: 7d:9a:88:df:12:e9:07:f5:e6:f9:be:f2:af:08:18: 37:f0:61:bd:13:a4:74:18:2c:b0:15:8b:4e:31:36: 99:81:0f:31:80:df:5a:54:5d:a7:c5:1c:d2:8f:a3: 7d:0e:91:7e:ec:0f:95:e4:3d:25:56:2e:8c:f0:e9: ad:c7:c9:af:43:12:77:e7:d9:c4:ff:74:2a:88:9c: 44:49:54:dd:7f:fe:55:b2:b7:1b:41:d9:77:f9:2e: ca:6c:71:93:e6:e4:35:ff:92:08:55:60:eb:89:e2: 24:a4:50:26:02:36:fb:cb:5f:6f:38:0c:fe:29:72: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9D:87:27:9C:E4:B0:3D:23:1F:7E:C6:95:9F:5A:B4:42:8D:68:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:14:9b:4a:ab:eb:b3:f1:b3:96:55:6b:29:7a:10:26:91:af: 57:7c:b2:44:0e:7a:b5:ac:20:fa:19:a4:54:db:ee:dc:04:cc: b3:f5:48:b3:e4:07:95:8c:3d:de:c2:cd:89:1d:a4:23:be:54: 76:a2:c8:2a:7a:15:8b:dc:5c:2b:4b:81:21:8a:33:ac:c4:69: a5:f5:12:45:7d:bb:c4:f3:a8:55:98:1e:cf:70:a7:2d:37:49: 8a:dc:39:23:4a:b3:f5:f5:f1:bc:58:1b:ae:47:72:42:02:2b: 14:a4:ea:7e:22:82:2f:2d:df:54:bf:3c:52:e3:cf:87:61:12: f2:e0:8b:0e:78:9b:fe:c4:2f:db:e1:64:c6:ed:55:7e:9e:f7: 69:ee:c8:d0:2a:4d:4d:fc:18:56:e1:be:ee:e2:af:55:81:e5: 1b:76:58:3c:48:af:92:1b:49:0b:29:55:5f:4d:8f:75:93:cd: 4d:51:16:08:43:7d:a5:74:5d:fe:24:26:ba:42:82:81:a7:e7: 93:59:f8:ab:23:02:d8:f5:bc:6a:88:7b:fa:2f:fa:1a:85:68: 0c:3d:f3:80:e4:af:03:50:45:5e:a0:f4:72:67:d2:32:0e:c6: ae:13:fd:e5:ae:ff:fb:ad:69:70:16:04:56:8d:ee:1c:43:36: c6:3d:d6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPWvSW6SaleUtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MjdjYmJhYWItMjQyNC00NmE2LTk2NDktOTMzZDUzYmIzMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Y5WWs2nfMkKhLSlLSUN0rEQ7UF2/uKrSiW jL8MJo2NSlnA7ZzJ7A6nBx7SGrjfF/472sG7zIaLX7sBIku8pjYSqs+Yo2cCoygi 2fnzMKZ2hFF9KrAF9YxwOTd1Fb+vwIJHnjOrmwTbCnZFMizRCI2wwT8PJw4ZmTKM SLhPpDlsZp/KEkJ9mojfEukH9eb5vvKvCBg38GG9E6R0GCywFYtOMTaZgQ8xgN9a VF2nxRzSj6N9DpF+7A+V5D0lVi6M8Omtx8mvQxJ359nE/3QqiJxESVTdf/5Vsrcb Qdl3+S7KbHGT5uQ1/5IIVWDrieIkpFAmAjb7y19vOAz+KXKMqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBadhyec5LA9Ix9+xpWfWrRCjWjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzlkMDU2NjQtYWRkZi0z NjBiLWE5OWMtMzZlYzYyNzlkNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsUm0qr67Pxs5ZVayl6ECaRr1d8skQOerWsIPoZpFTb7twEzLP1SLPk B5WMPd7CzYkdpCO+VHaiyCp6FYvcXCtLgSGKM6zEaaX1EkV9u8TzqFWYHs9wpy03 SYrcOSNKs/X18bxYG65HckICKxSk6n4igi8t31S/PFLjz4dhEvLgiw54m/7EL9vh ZMbtVX6e92nuyNAqTU38GFbhvu7ir1WB5Rt2WDxIr5IbSQspVV9Nj3WTzU1RFghD faV0Xf4kJrpCgoGn55NZ+KsjAtj1vGqIe/ov+hqFaAw984DkrwNQRV6g9HJn0jIO xq4T/eWu//utaXAWBFaN7hxDNsY91jU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:23:59 2025 by rpki-client