$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40c7d4ba-5eed-364b-b214-e924513aa37b.roa File: 40c7d4ba-5eed-364b-b214-e924513aa37b.roa (raw, json) Hash identifier: gQLu2atB2xJeFxQV0jEHv2RGjwapPxNfLFfq0SOfEoY= Subject key identifier: D0:D8:A2:EB:BF:FA:B6:B5:33:24:E0:92:2D:21:EF:2A:C4:C6:AF:96 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F65A80BDD340AEB4EAF860 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40c7d4ba-5eed-364b-b214-e924513aa37b.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:5a:80:bd:d3:40:ae:b4:ea:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=53598468-5697-427e-8f30-e2b2ad530393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:bc:56:d4:99:38:80:45:32:5e:c1:91:9d: 41:1f:06:28:b7:96:26:86:c7:de:89:bf:e1:60:91: f1:31:8e:ea:a7:b5:62:11:92:8c:13:b7:89:08:d6: 3c:a3:a5:17:37:44:50:6b:2a:77:66:a3:50:f6:6c: 86:94:b2:92:cf:17:23:e0:2d:4e:16:b4:cb:10:d7: 03:1d:b7:6f:ed:8d:4e:16:5c:56:42:64:99:7e:12: bc:b3:58:93:b6:42:e4:ca:53:dc:46:f6:78:a6:37: 91:b6:95:0d:94:ee:6c:35:32:9d:cd:b1:09:d1:2c: 2c:e0:aa:7c:ec:17:5b:bb:e4:df:23:96:02:61:27: cd:a8:f6:7b:f8:78:b5:a9:90:fd:01:12:db:15:f7: 6c:29:70:3a:3a:b3:55:cf:78:bc:44:7f:10:f9:f0: de:6b:90:ff:ea:1d:5c:ef:e1:e0:28:37:5c:5f:2a: 3b:2e:47:37:2a:6a:ee:0f:40:ef:29:40:7a:57:1b: 68:72:b8:68:20:dd:1a:b5:01:83:67:65:cb:3d:86: 85:b4:e3:8f:fe:74:a9:1a:b1:c5:a4:da:61:e6:29: 8c:f0:eb:68:b3:5f:f5:ae:87:d8:bc:ec:a2:ef:d1: b9:f1:da:9d:43:cb:40:63:14:03:1f:76:63:46:1c: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:A2:EB:BF:FA:B6:B5:33:24:E0:92:2D:21:EF:2A:C4:C6:AF:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40c7d4ba-5eed-364b-b214-e924513aa37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:eb:d4:11:27:b4:9a:16:1a:e5:b0:95:84:2b:ce:93:7e:52: 4a:50:1b:31:51:50:10:6d:aa:4d:86:b4:dc:3f:b7:80:29:5f: c6:aa:d8:82:68:ca:a8:f4:4e:03:72:26:0d:96:0a:31:fc:9e: 69:2b:a4:4d:bb:f5:1d:a6:6b:75:73:1a:18:ca:23:bd:78:2c: 6a:fb:f1:ec:e4:c8:ef:e3:75:35:5a:04:05:a5:e0:7b:20:9c: d4:ac:22:4e:aa:e6:6b:14:fe:f9:e2:93:a5:47:ff:2a:8d:2a: 14:df:0d:12:64:91:32:5e:23:51:6c:db:15:1d:61:d0:c6:94: 17:56:1f:c1:f3:b1:1c:f8:1a:de:0b:ab:9a:dd:a8:11:6d:8a: 89:fd:bf:43:4f:b2:8c:d1:f6:0e:69:c0:76:a8:4e:18:c5:48: 22:65:4d:ae:88:0b:e8:b3:fb:f8:16:c6:a4:03:e4:6b:1e:3b: 2d:c8:85:41:ea:b5:27:c4:48:1e:6c:65:c2:99:7b:a5:77:61: 15:d5:20:23:26:12:1a:ab:fa:83:38:18:9e:9f:4e:7d:50:57: a7:96:7c:f6:31:68:fb:81:4b:2e:d8:6f:0f:f7:7d:36:57:96: 4b:4c:40:53:4f:de:f5:0e:10:30:eb:0a:55:48:a1:07:96:0f: 8b:42:15:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lqAvdNArrTq+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NTM1OTg0NjgtNTY5Ny00MjdlLThmMzAtZTJiMmFkNTMwMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPe8VtSZOIBFMl7BkZ1BHwYot5Ymhsfeib/h YJHxMY7qp7ViEZKME7eJCNY8o6UXN0RQayp3ZqNQ9myGlLKSzxcj4C1OFrTLENcD Hbdv7Y1OFlxWQmSZfhK8s1iTtkLkylPcRvZ4pjeRtpUNlO5sNTKdzbEJ0Sws4Kp8 7Bdbu+TfI5YCYSfNqPZ7+Hi1qZD9ARLbFfdsKXA6OrNVz3i8RH8Q+fDea5D/6h1c 7+HgKDdcXyo7Lkc3KmruD0DvKUB6VxtocrhoIN0atQGDZ2XLPYaFtOOP/nSpGrHF pNph5imM8Otos1/1rofYvOyi79G58dqdQ8tAYxQDH3ZjRhyxHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDYouu/+ra1MyTgki0h7yrExq+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDBjN2Q0YmEtNWVlZC0z NjRiLWIyMTQtZTkyNDUxM2FhMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjr1BEntJoWGuWwlYQrzpN+UkpQGzFRUBBtqk2GtNw/t4ApX8aq2IJo yqj0TgNyJg2WCjH8nmkrpE279R2ma3VzGhjKI714LGr78ezkyO/jdTVaBAWl4Hsg nNSsIk6q5msU/vnik6VH/yqNKhTfDRJkkTJeI1Fs2xUdYdDGlBdWH8HzsRz4Gt4L q5rdqBFtion9v0NPsozR9g5pwHaoThjFSCJlTa6IC+iz+/gWxqQD5GseOy3IhUHq tSfESB5sZcKZe6V3YRXVICMmEhqr+oM4GJ6fTn1QV6eWfPYxaPuBSy7Ybw/3fTZX lktMQFNP3vUOEDDrClVIoQeWD4tCFfE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:10:59 2025 by rpki-client