$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa File: 3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa (raw, json) Hash identifier: i0pymMFuAWNVaxot3ndSPaIGNdCH64QCO5vhastTvDw= Subject key identifier: 51:C1:E0:E3:91:4D:5E:6E:D5:F1:4F:4F:10:D4:4E:12:85:80:C8:27 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBBD47FA47A5E94728D280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bd:47:fa:47:a5:e9:47:28:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=a62e3046-0512-4fcb-a7ab-a207e13c2c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:57:93:57:bc:e1:a0:79:49:ac:00:00:5e: 20:3b:00:09:88:d1:52:fe:91:cb:f6:ab:50:c4:7a: bc:25:1b:53:33:ad:4a:ca:7f:96:d8:40:8c:a9:20: ca:0f:66:59:d1:09:61:87:26:23:b6:59:85:d5:49: f3:a6:53:bc:b5:93:9a:09:23:15:5d:de:40:e8:f6: 0d:6c:0a:09:c7:b3:64:be:5d:43:af:81:cc:bb:d1: a2:92:2e:8c:89:11:e4:a1:1d:78:6b:07:29:7f:ef: 84:74:bc:2a:c9:a0:a6:6b:0b:46:99:82:e5:ec:a1: 19:51:d6:b4:25:48:f4:00:01:c7:e0:56:25:39:ca: 28:a4:b8:98:92:d9:6f:69:3c:5d:d9:b8:92:12:61: 34:e4:c1:98:94:43:b8:c0:ed:d1:37:08:32:be:3c: 76:50:c5:21:7c:98:bf:58:b6:e8:f2:15:64:fb:6d: b1:b5:ce:39:27:e2:95:18:3f:35:39:06:81:85:63: 43:dc:bc:b6:76:ee:44:cb:02:ea:1e:fd:ee:69:7e: 81:52:d3:31:c4:f0:ae:2e:11:fa:3b:e4:8a:69:0d: 08:0e:db:bd:54:8a:88:bc:e9:c1:4f:a7:b3:59:ff: 62:98:91:bd:aa:3b:c4:7a:5d:ab:b6:53:1c:e9:fc: 56:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C1:E0:E3:91:4D:5E:6E:D5:F1:4F:4F:10:D4:4E:12:85:80:C8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c7:9e:c9:b4:c9:80:31:10:7c:37:24:ac:2c:93:90:f8:b9: fa:9f:1f:97:e6:9f:d6:d8:ce:42:a5:79:a3:08:1d:03:ef:7a: 1d:0c:a8:d7:67:39:74:c1:6b:f1:ad:68:85:06:d3:e0:a5:19: 93:18:86:5e:9b:7d:ad:52:41:c8:bd:7b:9d:90:57:d3:78:f5: 61:e5:a5:27:1d:f6:49:aa:9b:fe:e2:d8:98:ba:28:84:5a:9c: 49:43:8a:91:6f:a8:32:5c:f3:d6:22:9a:85:bb:b3:7a:bf:e5: cb:e6:14:a5:48:47:ee:4b:d2:3e:54:8e:eb:46:b6:a7:9d:8b: 4a:32:4a:e6:94:68:ed:a2:91:5f:67:94:97:1d:27:0b:a6:ae: 61:47:70:e8:52:a0:bf:ab:ae:c2:06:a5:ec:d0:4c:3b:2c:14: 62:5a:27:fa:c6:5f:36:79:84:c3:03:1b:44:30:55:4b:8c:87: ea:18:00:df:c1:fa:68:74:6e:c2:b1:cc:be:37:2a:96:66:99: d7:87:ff:da:0c:30:a4:dd:bf:59:e7:6e:b7:ec:a8:f2:d7:73: 27:7e:a2:fa:1b:5b:22:95:3e:e1:bc:0f:46:71:ba:0f:e8:77: 37:b3:12:ba:f0:a7:52:4a:7b:c7:2b:d4:67:31:78:ba:51:0d: 71:49:85:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/671H+kel6Uco0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YTYyZTMwNDYtMDUxMi00ZmNiLWE3YWItYTIwN2UxM2MyYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ahXk1e84aB5SawAAF4gOwAJiNFS/pHL9qtQ xHq8JRtTM61Kyn+W2ECMqSDKD2ZZ0QlhhyYjtlmF1UnzplO8tZOaCSMVXd5A6PYN bAoJx7Nkvl1Dr4HMu9Giki6MiRHkoR14awcpf++EdLwqyaCmawtGmYLl7KEZUda0 JUj0AAHH4FYlOcoopLiYktlvaTxd2biSEmE05MGYlEO4wO3RNwgyvjx2UMUhfJi/ WLbo8hVk+22xtc45J+KVGD81OQaBhWND3Ly2du5EywLqHv3uaX6BUtMxxPCuLhH6 O+SKaQ0IDtu9VIqIvOnBT6ezWf9imJG9qjvEel2rtlMc6fxWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHB4OORTV5u1fFPTxDUThKFgMgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2NmZmFlNDAtNjI2MS0z NWVlLTlmZjktNmRlM2Y2ZWUzOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrHnsm0yYAxEHw3JKwsk5D4ufqfH5fmn9bYzkKleaMIHQPveh0MqNdn OXTBa/GtaIUG0+ClGZMYhl6bfa1SQci9e52QV9N49WHlpScd9kmqm/7i2Ji6KIRa nElDipFvqDJc89YimoW7s3q/5cvmFKVIR+5L0j5UjutGtqedi0oySuaUaO2ikV9n lJcdJwumrmFHcOhSoL+rrsIGpezQTDssFGJaJ/rGXzZ5hMMDG0QwVUuMh+oYAN/B +mh0bsKxzL43KpZmmdeH/9oMMKTdv1nnbrfsqPLXcyd+ovobWyKVPuG8D0Zxug/o dzezErrwp1JKe8cr1GcxeLpRDXFJhXI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:59 2025 by rpki-client