$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa File: 41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa (raw, json) Hash identifier: vFfIArrI5iJ7JBQRYEg5GMABPDMoGJspPVpEXLS+zRw= Subject key identifier: 31:17:3C:9B:87:95:81:28:16:A4:0F:D6:90:09:06:EB:7A:52:9A:82 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F659DA539A07C8FC4B5FC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:59:da:53:9a:07:c8:fc:4b:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=768e8de3-ef4c-4479-b097-911d73429e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:19:75:a1:a7:aa:1d:d0:66:12:60:96:45: 98:22:bb:75:15:47:8a:d6:07:d2:b7:0c:20:88:a3: ef:de:fa:cb:8b:02:1b:8b:f4:55:42:2a:c4:08:a2: 8e:7e:d6:5a:5c:c2:72:f3:e8:f2:43:51:0b:68:a2: af:77:d9:4c:bc:61:a3:0a:b0:52:79:a1:0e:9d:db: dd:88:d8:5e:2a:47:fe:e5:f2:27:2d:9e:c2:c3:b5: 70:3d:09:89:a0:c2:3b:35:63:df:c2:07:48:9c:ee: d3:7b:7a:0a:2f:8f:4c:c2:3d:d6:8f:1d:07:8a:b9: 78:0a:2f:7d:da:c8:c4:db:b6:14:57:80:1d:48:67: b3:2f:29:98:5c:92:17:ac:78:d1:36:15:9c:30:24: 94:d0:80:a2:f6:f1:73:16:f5:d0:41:86:66:0d:23: 5d:24:6a:c4:9e:ab:d1:48:24:6e:a8:cd:b9:17:e9: 7e:cc:c5:12:54:c9:9d:11:38:82:22:91:db:60:52: 8d:f8:6f:20:0e:c4:64:a0:da:d1:6a:a7:fc:1c:81: 3b:f2:a8:cd:a4:c5:32:85:35:5f:f5:00:50:b9:60: c1:cb:2e:a5:71:4b:03:96:dc:a6:22:f7:3c:5a:e5: 3a:82:b9:6c:2e:27:73:68:b6:4b:8d:9c:60:ca:1d: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:3C:9B:87:95:81:28:16:A4:0F:D6:90:09:06:EB:7A:52:9A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ee:e9:8e:d1:92:ef:4b:73:b1:1b:ac:60:c1:84:e2:9c:b3: 03:ec:a8:e4:4b:59:50:da:97:4f:96:9f:9b:00:3b:c1:1d:0d: 60:d7:ee:60:78:72:7c:d6:3a:75:fe:0d:ef:47:7e:48:25:72: de:09:0c:de:fb:32:29:0c:9e:3a:3b:d9:13:a3:2c:81:52:35: 20:71:2c:91:35:13:6e:da:89:a0:d9:10:ba:1f:16:57:3b:68: 61:21:86:8e:3b:6e:3f:06:f0:60:82:53:a7:66:65:72:6f:15: 04:71:c8:14:34:fd:b9:7b:4d:14:77:35:ec:ec:b7:30:cc:a7: d2:f5:43:82:a9:cb:67:3b:be:e9:6f:cd:e3:fe:79:86:62:b5: 64:ad:2b:9d:5b:cc:30:73:17:df:7c:0a:90:f5:7b:b6:eb:08: 5f:79:42:bb:04:25:0c:63:c5:2e:3c:7c:07:2c:61:69:c2:d5: d5:2b:75:15:92:f8:47:6f:c1:8c:06:2d:f7:4f:83:fe:02:54: f1:4a:1a:13:3e:22:bd:67:00:4d:f1:17:fd:aa:09:78:37:08: 4f:9e:73:66:4b:4d:df:1e:b0:a4:47:ce:64:c4:a5:06:07:d2: c8:38:91:65:1a:a3:d0:71:e7:c5:79:a1:41:79:81:b6:eb:1d: 6d:04:ed:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lnaU5oHyPxLX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NzY4ZThkZTMtZWY0Yy00NDc5LWIwOTctOTExZDczNDI5ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktUZdaGnqh3QZhJglkWYIrt1FUeK1gfStwwg iKPv3vrLiwIbi/RVQirECKKOftZaXMJy8+jyQ1ELaKKvd9lMvGGjCrBSeaEOndvd iNheKkf+5fInLZ7Cw7VwPQmJoMI7NWPfwgdInO7Te3oKL49Mwj3Wjx0Hirl4Ci99 2sjE27YUV4AdSGezLymYXJIXrHjRNhWcMCSU0ICi9vFzFvXQQYZmDSNdJGrEnqvR SCRuqM25F+l+zMUSVMmdETiCIpHbYFKN+G8gDsRkoNrRaqf8HIE78qjNpMUyhTVf 9QBQuWDByy6lcUsDltymIvc8WuU6grlsLidzaLZLjZxgyh0nDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEXPJuHlYEoFqQP1pAJBut6UpqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFjZjBiNjctNTcwYS0z MGQ2LWI4Y2MtZTg0ZmJkYjE2MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADu6Y7Rku9Lc7EbrGDBhOKcswPsqORLWVDal0+Wn5sAO8EdDWDX7mB4 cnzWOnX+De9Hfkglct4JDN77MikMnjo72ROjLIFSNSBxLJE1E27aiaDZELofFlc7 aGEhho47bj8G8GCCU6dmZXJvFQRxyBQ0/bl7TRR3NezstzDMp9L1Q4Kpy2c7vulv zeP+eYZitWStK51bzDBzF998CpD1e7brCF95QrsEJQxjxS48fAcsYWnC1dUrdRWS +EdvwYwGLfdPg/4CVPFKGhM+Ir1nAE3xF/2qCXg3CE+ec2ZLTd8esKRHzmTEpQYH 0sg4kWUao9Bx58V5oUF5gbbrHW0E7RA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:28 2025 by rpki-client