$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/416a016f-79e7-3740-8a48-d6d0330ed271.roa File: 416a016f-79e7-3740-8a48-d6d0330ed271.roa (raw, json) Hash identifier: o2fsncF5kWAcH5A4UTnttQ4rx8+SFajyV/oOgYmK3Z4= Subject key identifier: 5C:7E:C7:D8:CD:C5:74:8B:05:EB:6C:E0:14:37:27:94:C3:BD:98:0C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E0AB7A4EB246FFBAD500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/416a016f-79e7-3740-8a48-d6d0330ed271.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e0:ab:7a:4e:b2:46:ff:ba:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=644b9722-0cb0-4b11-80e3-1ab309dd5233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:ff:b3:36:64:37:fb:f1:b9:c1:73:71:2c: 1e:c1:9c:ab:37:c7:d9:33:b8:c5:59:b5:17:cd:16: 28:9f:e1:51:58:b3:f5:e9:af:3b:58:e8:b2:2f:c6: 29:8d:ff:8f:d6:26:f8:0c:72:bd:d5:34:f6:85:49: 5d:a4:2f:16:a5:b2:a4:55:32:9b:60:83:9b:cc:95: d9:91:a2:7b:31:fd:7e:fb:24:b4:85:77:bc:28:31: c7:08:9b:56:1f:7a:11:3f:f1:7d:9a:08:da:0b:65: 51:b3:76:c9:81:30:5d:f2:c6:d2:41:7e:12:a0:a7: b5:d3:ec:9a:70:f8:4b:fc:61:20:ed:ea:e9:bc:cd: 77:75:1e:b3:76:b5:75:29:da:11:ed:7d:d3:23:f8: 92:b6:e9:7c:c0:53:cd:56:f3:ad:1d:53:51:32:ad: 94:34:bf:a3:02:6c:63:83:2e:1e:5f:64:10:36:82: b9:3d:b0:3d:a2:00:74:c8:4c:0a:4c:2a:9a:91:b6: c4:8f:0b:5d:1b:ea:c0:e6:51:2e:69:af:8b:d3:5d: 84:23:9c:4c:06:9f:ca:18:d0:ed:c9:2e:98:5a:6f: 45:de:e2:f6:32:14:08:5e:bf:66:f3:cd:f8:d8:63: 45:ad:a2:8a:fa:81:6f:91:50:da:15:26:1c:20:9a: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7E:C7:D8:CD:C5:74:8B:05:EB:6C:E0:14:37:27:94:C3:BD:98:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/416a016f-79e7-3740-8a48-d6d0330ed271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5e:70:97:12:c4:57:b4:82:0c:2d:18:3e:2b:98:34:03:61: f5:6f:b2:0c:b7:65:94:9d:20:79:24:0c:e3:d4:1a:22:2d:24: 78:72:f9:4d:fe:86:2b:23:93:34:d4:71:6b:72:e8:e4:6c:f1: 84:fe:24:52:9f:cf:04:0c:ef:a9:66:79:81:91:c7:16:96:ee: bc:4b:d3:c6:e2:35:e6:94:73:4f:6e:79:00:b4:a1:90:9e:84: 2e:02:00:a1:96:ed:25:79:cd:63:d9:ab:79:19:bf:92:9d:0a: bf:a2:e4:f3:5d:3b:dc:1b:8d:65:5d:2e:e5:e8:5f:ac:53:f0: 8e:63:f6:85:69:f8:ea:db:e2:aa:e8:d2:ee:6d:a6:cd:c6:a3: 0a:9b:ec:67:71:34:55:02:49:ea:54:3a:59:2b:06:cb:32:ed: a6:9f:15:3c:2b:a1:94:a3:e8:6e:39:5c:f8:5f:47:c5:35:81: db:ca:fe:b1:e4:0e:d5:9d:18:b2:57:45:af:77:81:29:15:7e: 31:91:2d:09:86:c3:f0:6c:f6:71:a2:2a:d9:b7:91:b9:e5:d3: a4:ac:1c:00:85:38:90:a1:51:8f:5b:3b:60:3b:9a:77:63:6a: ed:61:20:ca:06:3d:00:57:8c:45:27:41:8f:2e:ff:20:2f:c3: 26:d8:72:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOCrek6yRv+61QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NjQ0Yjk3MjItMGNiMC00YjExLTgwZTMtMWFiMzA5ZGQ1MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3/szZkN/vxucFzcSwewZyrN8fZM7jFWbUX zRYon+FRWLP16a87WOiyL8Ypjf+P1ib4DHK91TT2hUldpC8WpbKkVTKbYIObzJXZ kaJ7Mf1++yS0hXe8KDHHCJtWH3oRP/F9mgjaC2VRs3bJgTBd8sbSQX4SoKe10+ya cPhL/GEg7erpvM13dR6zdrV1KdoR7X3TI/iStul8wFPNVvOtHVNRMq2UNL+jAmxj gy4eX2QQNoK5PbA9ogB0yEwKTCqakbbEjwtdG+rA5lEuaa+L012EI5xMBp/KGNDt yS6YWm9F3uL2MhQIXr9m88342GNFraKK+oFvkVDaFSYcIJqW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFx+x9jNxXSLBets4BQ3J5TDvZgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDE2YTAxNmYtNzllNy0z NzQwLThhNDgtZDZkMDMzMGVkMjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtecJcSxFe0ggwtGD4rmDQDYfVvsgy3ZZSdIHkkDOPUGiItJHhy+U3+ hisjkzTUcWty6ORs8YT+JFKfzwQM76lmeYGRxxaW7rxL08biNeaUc09ueQC0oZCe hC4CAKGW7SV5zWPZq3kZv5KdCr+i5PNdO9wbjWVdLuXoX6xT8I5j9oVp+Orb4qro 0u5tps3Gowqb7GdxNFUCSepUOlkrBssy7aafFTwroZSj6G45XPhfR8U1gdvK/rHk DtWdGLJXRa93gSkVfjGRLQmGw/Bs9nGiKtm3kbnl06SsHACFOJChUY9bO2A7mndj au1hIMoGPQBXjEUnQY8u/yAvwybYcsc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:51 2025 by rpki-client