$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa File: 481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa (raw, json) Hash identifier: Po9tHGivtHONn4JX53rDssOppTuGMVf4FDNsDYc8nYs= Subject key identifier: 54:EC:2B:04:6B:2D:0D:FC:BB:68:17:15:58:68:9A:0F:EB:B0:BE:49 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F61C4145025C55563A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f6:1c:41:45:02:5c:55:56:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=a3b81805-c52e-46d6-be19-ab7468d76429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:42:e8:77:0f:dd:ed:25:87:29:38:3e:33: c0:07:c7:5c:63:8b:ee:49:5b:6a:60:14:b4:69:f0: 87:9d:47:66:26:5a:96:5e:4f:5c:3c:75:9f:b1:33: 9e:e7:da:b2:f1:5d:22:4c:8b:63:76:cd:f7:e7:6e: 24:41:57:7c:41:19:3d:4e:b8:cd:c8:d4:2b:e5:0b: 63:b7:a2:a0:05:f8:20:44:06:ba:13:82:59:44:9f: 22:ba:05:18:bb:2e:07:36:ca:73:82:8e:68:bc:35: d8:43:8f:69:05:c7:54:98:5f:bc:c0:93:e4:91:cd: 0e:c4:32:1a:67:b3:7e:3c:d4:dd:3f:5f:c8:24:07: ef:8a:9b:93:a0:2d:4c:60:97:a0:97:bd:85:c6:63: b4:d4:d2:ed:0e:7a:b5:6d:10:3f:5d:0b:76:62:e4: bd:e3:34:ae:d4:48:a7:ed:25:23:36:f9:df:a9:4f: fb:63:01:b5:b5:62:02:79:90:d6:c0:10:86:26:5d: a5:e2:47:b1:22:41:ad:7d:ea:e7:26:c6:b7:82:93: 3f:1b:83:00:a6:67:22:34:1f:01:0a:40:29:62:e7: 62:ec:cb:e9:00:f5:7f:58:c8:ed:77:35:bf:76:35: 78:43:24:d3:f8:a1:7b:90:17:75:9d:61:d7:67:ba: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:2B:04:6B:2D:0D:FC:BB:68:17:15:58:68:9A:0F:EB:B0:BE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fa:f9:ec:02:07:12:63:b5:6c:6b:3c:63:85:10:ac:36:a2: 8b:94:b3:6a:55:4f:82:62:4b:6b:5e:d6:e7:6c:06:93:d6:46: 73:ef:63:8c:94:c1:fb:ae:d7:3b:69:44:31:ab:45:14:9e:54: 81:3b:c4:40:55:e6:64:92:66:bc:d0:e6:05:76:cc:1e:63:17: e0:35:ec:a7:2f:37:91:2f:61:b5:05:97:4e:bb:63:53:cb:df: 2c:1a:0e:6c:99:b5:5e:2c:8b:b0:3c:85:74:13:fd:5e:68:4e: e7:af:84:b9:09:ce:37:50:9e:6f:4a:76:43:be:b9:dd:fd:ec: 69:58:46:5d:a6:36:38:42:8a:34:d7:3e:25:30:31:a5:02:44: 07:50:23:15:50:98:69:73:e9:bf:3b:27:2b:6d:7a:69:50:fb: 81:89:b2:91:c4:11:a2:14:64:b7:b9:96:6d:d3:a6:dc:e5:fb: 34:be:0b:46:39:12:08:35:16:92:06:94:1a:32:56:ba:60:02: cd:b5:b1:c4:fc:35:78:b8:f3:9b:b2:d8:65:58:6a:2b:6f:0f: 7b:c9:30:70:fd:95:29:bf:ff:ae:35:a9:74:f5:c9:3e:75:70: 88:4e:1e:1d:31:b1:f3:c8:7b:80:e5:e7:a2:5e:37:83:c3:52: a4:69:28:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPYcQUUCXFVWOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YTNiODE4MDUtYzUyZS00NmQ2LWJlMTktYWI3NDY4ZDc2NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKdC6HcP3e0lhyk4PjPAB8dcY4vuSVtqYBS0 afCHnUdmJlqWXk9cPHWfsTOe59qy8V0iTItjds33524kQVd8QRk9TrjNyNQr5Qtj t6KgBfggRAa6E4JZRJ8iugUYuy4HNspzgo5ovDXYQ49pBcdUmF+8wJPkkc0OxDIa Z7N+PNTdP1/IJAfvipuToC1MYJegl72FxmO01NLtDnq1bRA/XQt2YuS94zSu1Ein 7SUjNvnfqU/7YwG1tWICeZDWwBCGJl2l4kexIkGtfernJsa3gpM/G4MApmciNB8B CkApYudi7MvpAPV/WMjtdzW/djV4QyTT+KF7kBd1nWHXZ7rZswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTsKwRrLQ38u2gXFVhomg/rsL5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDgxZmUzYzctMWI0Zi0z YTYxLWFhOTAtYjMzMjdmYjhlZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf6+ewCBxJjtWxrPGOFEKw2oouUs2pVT4JiS2te1udsBpPWRnPvY4yU wfuu1ztpRDGrRRSeVIE7xEBV5mSSZrzQ5gV2zB5jF+A17KcvN5EvYbUFl067Y1PL 3ywaDmyZtV4si7A8hXQT/V5oTuevhLkJzjdQnm9KdkO+ud397GlYRl2mNjhCijTX PiUwMaUCRAdQIxVQmGlz6b87JyttemlQ+4GJspHEEaIUZLe5lm3Tptzl+zS+C0Y5 Egg1FpIGlBoyVrpgAs21scT8NXi485uy2GVYaitvD3vJMHD9lSm//641qXT1yT51 cIhOHh0xsfPIe4Dl56JeN4PDUqRpKDw= -----END CERTIFICATE-----Generated at Fri Mar 14 13:50:30 2025 by rpki-client