$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa File: 41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa (raw, json) Hash identifier: JjwjvHS8ePTdtIAsFYsJvahImWK7NB5DOxS2vruQufM= Subject key identifier: CD:FD:CB:37:23:32:15:64:29:AC:14:92:48:90:97:F4:23:57:45:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F647B6ABB4785CF2E9B2E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:47:b6:ab:b4:78:5c:f2:e9:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=f4474540-ab95-4de0-8dad-5fc2e19f6df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f6:ba:f6:ea:62:07:7e:dc:99:8f:fc:95:96: ca:a7:9d:e5:a5:2b:56:75:7a:ed:73:40:78:6b:e8: 37:ac:e1:cd:62:e4:64:a3:6c:90:9e:8e:e9:6f:3f: b7:41:61:65:ca:56:17:de:26:9f:ca:61:83:56:4d: 0f:20:c8:4a:5b:04:ba:bd:6e:1f:82:36:12:a7:2f: 20:d1:bd:8f:88:77:42:f2:a3:90:bf:11:a9:39:ff: 16:71:8b:82:8d:d9:19:a9:26:83:84:a2:31:2b:a9: f6:9e:de:9a:7a:5a:6f:6d:be:3a:34:9b:42:43:c3: e7:31:ff:f4:fa:95:33:c8:8c:49:b5:8f:35:f7:ff: b7:49:c4:f1:df:d0:5d:1f:96:9b:e1:27:61:98:c4: 56:ca:86:d1:c5:bc:2f:b4:37:91:b5:bf:af:6a:01: e1:ed:d7:eb:43:e8:69:57:63:78:a6:4e:d2:36:67: e5:8b:da:b9:82:46:60:38:a4:96:52:74:a8:60:59: 66:e0:c5:4a:67:4d:a3:4d:87:f3:6e:1b:ca:e7:4e: 34:ec:9a:ac:4e:bb:fc:84:7f:ef:89:30:33:62:51: 6f:e1:8b:37:47:39:94:07:8e:e9:22:73:58:bc:76: a7:92:b7:92:6e:b1:e6:2c:37:a1:b5:f8:c7:2d:6d: 19:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FD:CB:37:23:32:15:64:29:AC:14:92:48:90:97:F4:23:57:45:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41b1a80e-73c2-3f25-9649-6fb5ee622d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:48:b3:37:84:a2:e0:7d:74:77:75:b5:90:bc:1c:b4:4e:aa: e8:09:eb:33:9d:3e:df:a3:52:87:03:23:c0:cd:20:72:61:7c: d6:de:c2:f2:5d:88:be:61:51:31:2f:2c:9c:50:34:f4:20:b0: b0:c7:8b:ae:86:c3:0a:3d:d3:d6:86:b8:45:de:fd:46:a2:53: d1:a5:b0:3a:62:fd:fa:46:7c:e6:d3:c2:d1:24:35:f7:e9:a4: 03:f7:c6:4b:fd:1a:5e:be:7c:8a:67:73:f0:6f:53:2a:87:a3: fe:28:0c:36:87:68:13:d0:30:63:b3:3f:00:38:3f:89:6c:ac: ee:4d:92:46:34:08:a5:af:61:c6:a7:f4:21:9a:20:51:84:b2: e9:e5:ed:6b:e5:fc:51:26:c5:51:40:33:e8:e8:ba:f3:8c:57: 0c:78:f7:55:57:81:a1:2b:2e:16:fd:b2:0a:a2:8d:de:96:5c: f4:d0:c8:32:19:f7:06:d3:d3:b7:19:44:f6:47:fc:76:fc:b2: 85:45:d8:93:fd:37:51:9c:4e:48:d8:a9:88:b8:42:91:a0:65: 57:2c:12:cd:9a:05:87:c6:5d:40:d6:b5:bc:e5:ed:c8:81:bb: c0:68:3c:11:04:6e:9a:06:2b:83:fd:e5:78:e2:1d:bc:bd:1d: 45:a2:bd:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ke2q7R4XPLpsuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ0NzQ1NDAtYWI5NS00ZGUwLThkYWQtNWZjMmUxOWY2ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkva69upiB37cmY/8lZbKp53lpStWdXrtc0B4 a+g3rOHNYuRko2yQno7pbz+3QWFlylYX3iafymGDVk0PIMhKWwS6vW4fgjYSpy8g 0b2PiHdC8qOQvxGpOf8WcYuCjdkZqSaDhKIxK6n2nt6aelpvbb46NJtCQ8PnMf/0 +pUzyIxJtY819/+3ScTx39BdH5ab4SdhmMRWyobRxbwvtDeRtb+vagHh7dfrQ+hp V2N4pk7SNmfli9q5gkZgOKSWUnSoYFlm4MVKZ02jTYfzbhvK50407JqsTrv8hH/v iTAzYlFv4Ys3RzmUB47pInNYvHankreSbrHmLDehtfjHLW0ZBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM39yzcjMhVkKawUkkiQl/QjV0VMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFiMWE4MGUtNzNjMi0z ZjI1LTk2NDktNmZiNWVlNjIyZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpIszeEouB9dHd1tZC8HLROqugJ6zOdPt+jUocDI8DNIHJhfNbewvJd iL5hUTEvLJxQNPQgsLDHi66Gwwo909aGuEXe/UaiU9GlsDpi/fpGfObTwtEkNffp pAP3xkv9Gl6+fIpnc/BvUyqHo/4oDDaHaBPQMGOzPwA4P4lsrO5NkkY0CKWvYcan 9CGaIFGEsunl7Wvl/FEmxVFAM+jouvOMVwx491VXgaErLhb9sgqijd6WXPTQyDIZ 9wbT07cZRPZH/Hb8soVF2JP9N1GcTkjYqYi4QpGgZVcsEs2aBYfGXUDWtbzl7ciB u8BoPBEEbpoGK4P95XjiHby9HUWivUM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:41 2025 by rpki-client