$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa File: 4268df17-96c8-3b1f-b764-7fdc745f282b.roa (raw, json) Hash identifier: Z323KHX+CZOG8FiOlvVa3E3+nsBYOhTsuim8xI/mCqI= Subject key identifier: 0D:CC:21:28:CD:AA:A5:4E:CF:28:10:3A:50:D0:B4:0A:46:09:94:3E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64A0EC77DA3572AFA3380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 104.133.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4a:0e:c7:7d:a3:57:2a:fa:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=f1df0f16-4479-47a9-9e3c-4a91dbd769f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:8e:3d:a5:86:ab:d5:2e:f5:0c:3b:f4:b1: eb:65:c8:1b:9f:88:6f:4f:14:02:b7:25:3a:28:2a: c4:7e:bc:9e:ad:70:5b:fe:0e:85:f4:90:d8:eb:1d: 59:19:1a:31:da:7f:84:7c:1a:51:47:3f:cd:fb:ba: d7:ae:97:d6:d9:a3:66:d5:87:25:4f:ad:28:4d:da: f9:46:53:b6:85:9b:f3:ea:9f:e9:89:47:be:e3:06: a8:35:ce:6c:0e:b1:3a:33:b6:95:93:78:76:59:0f: 05:4f:9c:87:a1:71:e1:b0:71:f0:32:05:1d:4e:28: 5a:3a:64:71:25:59:14:76:c0:49:ea:8f:f7:81:6b: cf:da:36:7c:1b:d6:14:a8:50:85:57:d3:59:6d:28: 8d:e5:ca:a8:74:34:30:40:74:9b:e2:8e:82:07:40: 25:64:5c:69:d4:c9:62:ce:67:26:2c:bb:ed:09:e5: 5d:a8:cc:d4:84:c6:11:21:57:ce:65:d2:7f:06:e1: 44:24:2b:a9:bf:0c:67:bf:5a:6b:fd:d1:d9:4d:3d: 2b:18:b7:15:97:3d:ce:14:33:ae:81:78:4f:bc:33: c8:9e:c2:c4:92:21:00:f7:d2:e1:b3:14:c2:fc:fc: 70:e7:60:e8:9d:eb:87:06:ed:70:70:52:30:e3:6b: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:21:28:CD:AA:A5:4E:CF:28:10:3A:50:D0:B4:0A:46:09:94:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2d:cd:31:0d:ff:cb:af:50:e9:b0:0d:5b:25:7c:b0:07:29: a0:af:aa:24:c5:e4:d0:37:cf:53:dc:45:cb:2b:c8:3d:63:0a: 4e:b1:37:f7:da:66:81:1d:5c:be:e1:5e:33:46:2b:41:52:28: ce:39:31:4d:4d:fd:11:eb:ff:6e:12:78:91:44:63:a1:7a:59: 0a:a2:c6:45:f3:17:75:01:46:46:04:30:c4:97:0f:87:51:1d: ee:0f:63:ef:0e:4b:7e:8b:36:c6:f5:9c:a0:d6:f3:dc:18:4f: 45:6d:fb:f4:b6:8d:f4:97:16:71:9b:d8:7e:bf:02:27:bb:90: 20:17:29:ae:d7:08:20:ad:e8:82:a1:d9:90:a8:e7:c1:c5:91: d0:10:c1:86:a7:0d:29:c1:5f:9c:ef:6b:77:9f:a8:47:35:65: fa:0d:ae:27:15:35:e5:de:14:35:cb:65:77:e3:4d:a6:f8:2b: a2:ce:8a:02:f5:22:43:4b:ee:c7:a4:b4:81:44:de:06:87:72: 41:6b:15:13:a0:71:fb:a2:0e:89:f3:46:91:93:1e:98:c4:1e: 0e:82:ef:d6:2e:c7:e5:13:62:8f:21:03:97:20:12:ad:9b:e1: ec:e8:fd:1e:ce:47:10:9a:9d:af:a2:40:1b:1f:8d:cd:b7:2d: 6d:88:34:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9koOx32jVyr6M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZjFkZjBmMTYtNDQ3OS00N2E5LTllM2MtNGE5MWRiZDc2OWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlOOPaWGq9Uu9Qw79LHrZcgbn4hvTxQCtyU6 KCrEfryerXBb/g6F9JDY6x1ZGRox2n+EfBpRRz/N+7rXrpfW2aNm1YclT60oTdr5 RlO2hZvz6p/piUe+4waoNc5sDrE6M7aVk3h2WQ8FT5yHoXHhsHHwMgUdTihaOmRx JVkUdsBJ6o/3gWvP2jZ8G9YUqFCFV9NZbSiN5cqodDQwQHSb4o6CB0AlZFxp1Mli zmcmLLvtCeVdqMzUhMYRIVfOZdJ/BuFEJCupvwxnv1pr/dHZTT0rGLcVlz3OFDOu gXhPvDPInsLEkiEA99LhsxTC/Pxw52DoneuHBu1wcFIw42v47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3MISjNqqVOzygQOlDQtApGCZQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDI2OGRmMTctOTZjOC0z YjFmLWI3NjQtN2ZkYzc0NWYyODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACktzTEN/8uvUOmwDVslfLAHKaCvqiTF5NA3z1PcRcsryD1jCk6xN/fa ZoEdXL7hXjNGK0FSKM45MU1N/RHr/24SeJFEY6F6WQqixkXzF3UBRkYEMMSXD4dR He4PY+8OS36LNsb1nKDW89wYT0Vt+/S2jfSXFnGb2H6/Aie7kCAXKa7XCCCt6IKh 2ZCo58HFkdAQwYanDSnBX5zva3efqEc1ZfoNricVNeXeFDXLZXfjTab4K6LOigL1 IkNL7sektIFE3gaHckFrFROgcfuiDonzRpGTHpjEHg6C79Yux+UTYo8hA5cgEq2b 4ezo/R7ORxCana+iQBsfjc23LW2INJM= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:17 2025 by rpki-client