$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa File: 40fc80eb-657f-34a3-8e76-07ca3891476f.roa (raw, json) Hash identifier: 6epAIq8Y0C98jDsbZNJoSqUG5b4wrmunX6bKG1lS7t0= Subject key identifier: 10:80:88:97:22:5C:2D:39:2D:5C:07:3C:48:50:D2:76:52:07:90:B1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F649E59541DFD2E011EFE0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:49:e5:95:41:df:d2:e0:11:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=e6e76b99-b059-4f2e-810d-cf3b0f785c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:4a:fb:d5:33:99:38:fc:ea:7d:80:97:bb: 31:bc:73:a9:0a:ce:7e:78:fb:6d:63:50:b5:cb:a0: 2e:f9:d2:e8:5a:5b:41:0c:9f:22:70:1c:58:62:f6: c7:f8:35:f4:66:14:f5:0a:df:58:48:2d:ea:cb:cd: e9:97:31:e9:81:55:d8:5e:7d:96:c4:fd:c8:4c:50: 69:52:ab:d0:c8:8e:1e:e9:f8:70:7d:73:76:c8:bc: b3:5e:90:f4:5f:fb:eb:20:2e:dd:0a:66:f9:df:8f: 71:f1:59:a5:82:47:a3:2e:f5:db:bf:60:8b:92:c0: ea:f2:59:f6:05:3a:5c:ca:25:7a:3f:b0:38:33:32: a8:5b:57:08:a1:d9:5a:cb:c2:2a:7f:99:db:ae:5a: 98:f4:a1:71:fb:60:f3:dc:df:0e:26:cd:94:64:30: 07:fb:f7:09:27:72:ec:ad:23:26:43:88:d5:e9:cf: 6d:58:ca:a9:0b:3a:3e:a6:43:06:fa:ae:ab:e1:68: 96:d9:89:1f:39:bd:86:f0:33:b4:e9:b7:c7:ec:03: 5a:c4:eb:a4:21:f8:f4:75:3e:f3:d9:10:58:3c:35: 78:92:36:ec:c0:a1:63:8f:67:ef:14:3f:f3:11:a4: a4:39:a0:8a:f2:25:12:01:f7:02:55:ce:8f:1e:cb: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:80:88:97:22:5C:2D:39:2D:5C:07:3C:48:50:D2:76:52:07:90:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bc:2d:3a:46:44:1d:11:40:ed:2f:68:0c:ef:e1:ac:bc:cb: fc:1d:41:42:83:07:81:14:70:05:e1:97:38:bf:9b:e1:1d:d9: 89:90:84:2d:a5:b4:31:13:d9:0e:68:80:ba:ca:88:da:82:2f: 41:51:72:9a:06:51:00:d5:01:dc:1c:fa:7d:e2:c9:38:a5:a9: 6e:3c:8e:ea:2a:10:82:5a:94:6a:7c:04:bc:5e:8f:98:49:f4: 5d:66:a3:f8:94:50:82:da:c8:0a:fc:71:e3:d4:9f:aa:40:a8: 0d:45:6a:7c:f0:6e:5e:fc:ea:f2:1e:6a:3e:41:b6:1c:62:aa: de:e5:87:8b:5a:2e:9a:d7:51:b6:eb:ac:54:0a:bb:c9:00:b5: 8a:39:a8:f0:75:0c:98:41:c1:1f:f0:3a:b9:3c:61:b2:62:56: a1:82:50:7f:4e:ee:41:f8:5a:46:8e:df:7f:81:bd:ac:c5:a4: ff:17:99:ae:9f:76:39:e6:c5:7c:e3:4a:f7:6c:11:2b:16:56: 73:c3:5d:a8:92:1d:dc:09:26:13:50:ef:7a:22:cd:ac:95:11: 34:cf:66:db:39:c8:83:91:b3:93:9a:f2:bb:20:84:02:69:9e: 07:6d:0d:eb:b7:2c:b3:f8:69:a7:0e:87:a8:e4:52:70:d9:0b: c0:27:0f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9knllUHf0uAR7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZTZlNzZiOTktYjA1OS00ZjJlLTgxMGQtY2YzYjBmNzg1YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql1K+9UzmTj86n2Al7sxvHOpCs5+ePttY1C1 y6Au+dLoWltBDJ8icBxYYvbH+DX0ZhT1Ct9YSC3qy83plzHpgVXYXn2WxP3ITFBp UqvQyI4e6fhwfXN2yLyzXpD0X/vrIC7dCmb5349x8VmlgkejLvXbv2CLksDq8ln2 BTpcyiV6P7A4MzKoW1cIodlay8Iqf5nbrlqY9KFx+2Dz3N8OJs2UZDAH+/cJJ3Ls rSMmQ4jV6c9tWMqpCzo+pkMG+q6r4WiW2YkfOb2G8DO06bfH7ANaxOukIfj0dT7z 2RBYPDV4kjbswKFjj2fvFD/zEaSkOaCK8iUSAfcCVc6PHst7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCAiJciXC05LVwHPEhQ0nZSB5CxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDBmYzgwZWItNjU3Zi0z NGEzLThlNzYtMDdjYTM4OTE0NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi8LTpGRB0RQO0vaAzv4ay8y/wdQUKDB4EUcAXhlzi/m+Ed2YmQhC2l tDET2Q5ogLrKiNqCL0FRcpoGUQDVAdwc+n3iyTilqW48juoqEIJalGp8BLxej5hJ 9F1mo/iUUILayAr8cePUn6pAqA1Fanzwbl786vIeaj5Bthxiqt7lh4taLprXUbbr rFQKu8kAtYo5qPB1DJhBwR/wOrk8YbJiVqGCUH9O7kH4WkaO33+BvazFpP8Xma6f djnmxXzjSvdsESsWVnPDXaiSHdwJJhNQ73oizayVETTPZts5yIORs5Oa8rsghAJp ngdtDeu3LLP4aacOh6jkUnDZC8AnD+I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:11 2025 by rpki-client