$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49170b90-2f82-3a37-ae54-b933b33095dc.roa File: 49170b90-2f82-3a37-ae54-b933b33095dc.roa (raw, json) Hash identifier: 9ZDZ61tbBVyFl9187SfFPvLYRzLT/IWHqSw6HdoQXe4= Subject key identifier: 5F:86:F0:C2:9C:C6:96:82:27:2C:97:F1:6E:43:52:1D:A8:14:17:9E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FB4A2FCF93E8A431A020 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49170b90-2f82-3a37-ae54-b933b33095dc.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fb:4a:2f:cf:93:e8:a4:31:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=14e27062-4186-4d6a-a30d-5a408cf5f3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:fb:95:bd:6c:a6:28:03:21:cf:4f:ce:d6: 71:44:d0:80:20:4f:1e:bd:7d:38:36:1b:f3:0c:4b: dc:3c:d6:78:9f:7a:ee:1a:9b:0b:ad:b1:8a:04:16: 5b:05:09:98:68:cc:f5:18:19:90:05:f8:11:a1:c9: 2d:1b:00:c1:a7:10:2c:7b:7b:b8:97:66:8d:60:f6: 9a:12:98:65:08:8d:63:8b:f2:13:7d:78:08:cc:3c: f4:e5:0d:ca:90:54:f5:24:3f:4a:df:50:a8:22:d1: 74:74:32:d2:bf:03:65:0f:db:6c:37:85:5e:d3:ea: 8a:dd:6b:e0:18:bc:9b:60:69:a1:3f:c8:37:e5:4c: 60:b9:0a:92:38:77:39:d9:fb:65:ed:6e:69:7d:46: 44:0d:4f:5d:f7:92:59:af:52:7c:8e:58:09:ae:4d: 52:d4:d1:ea:3d:f6:f0:c8:45:f2:79:bf:44:ac:1f: b8:1c:31:a6:9e:7b:c3:72:50:3c:fc:4f:74:53:39: ef:bd:42:a3:cc:23:43:3d:ed:1e:5c:29:91:01:aa: ee:36:72:04:ad:94:43:83:74:55:5a:07:9e:b8:c4: 5b:0a:48:ba:f5:d0:ae:53:c9:b1:7b:59:88:8e:48: 30:31:97:52:a4:bc:a8:08:b5:f0:f1:a7:80:35:a3: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:F0:C2:9C:C6:96:82:27:2C:97:F1:6E:43:52:1D:A8:14:17:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/49170b90-2f82-3a37-ae54-b933b33095dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:61:f6:4b:4b:7a:b6:f6:da:cd:84:bb:f4:1b:56:8a:2e:08: 3b:d7:32:a7:a0:92:ab:b2:a1:51:39:38:2a:f4:a0:cd:4c:f0: eb:7a:92:80:ab:08:d2:3f:88:80:31:02:34:3b:af:27:4d:b9: fd:95:3f:7d:b0:55:f0:a8:7f:31:a9:30:4a:ce:99:4b:ec:de: b9:13:0e:66:56:55:d4:9e:d6:15:d3:92:98:c6:dd:f9:0e:02: 58:ca:97:ce:05:62:b4:70:6f:04:2c:38:72:ea:36:85:86:9e: ea:87:61:ca:3a:9a:35:21:c4:d6:3f:71:96:25:58:ca:c8:15: 43:0f:00:0c:aa:89:5a:35:f9:62:c8:9a:f2:8b:d1:37:23:b7: 4a:47:ba:a9:c9:35:e1:67:58:f8:81:0e:95:8e:8b:47:4e:4b: 75:58:c7:cf:7e:b4:67:7e:7f:96:4f:ab:9c:6c:31:d8:01:e8: e7:26:bb:be:4b:07:bc:b4:d6:f0:be:32:19:26:24:3b:3b:4b: cd:6d:b5:43:4e:7e:cb:75:5a:42:fd:cd:f6:96:d6:30:c1:a1: 55:ee:5b:a9:1e:bb:83:40:33:31:87:52:7d:bd:8e:bb:64:91: 23:aa:93:e9:0a:b9:9b:cc:72:17:f9:27:5e:fd:89:07:6d:ab: 01:0b:2c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPtKL8+T6KQxoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MTRlMjcwNjItNDE4Ni00ZDZhLWEzMGQtNWE0MDhjZjVmM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkz7lb1spigDIc9PztZxRNCAIE8evX04Nhvz DEvcPNZ4n3ruGpsLrbGKBBZbBQmYaMz1GBmQBfgRocktGwDBpxAse3u4l2aNYPaa EphlCI1ji/ITfXgIzDz05Q3KkFT1JD9K31CoItF0dDLSvwNlD9tsN4Ve0+qK3Wvg GLybYGmhP8g35UxguQqSOHc52ftl7W5pfUZEDU9d95JZr1J8jlgJrk1S1NHqPfbw yEXyeb9ErB+4HDGmnnvDclA8/E90UznvvUKjzCNDPe0eXCmRAaruNnIErZRDg3RV WgeeuMRbCki69dCuU8mxe1mIjkgwMZdSpLyoCLXw8aeANaOAAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+G8MKcxpaCJyyX8W5DUh2oFBeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDkxNzBiOTAtMmY4Mi0z YTM3LWFlNTQtYjkzM2IzMzA5NWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhh9ktLerb22s2Eu/QbVoouCDvXMqegkquyoVE5OCr0oM1M8Ot6koCr CNI/iIAxAjQ7rydNuf2VP32wVfCofzGpMErOmUvs3rkTDmZWVdSe1hXTkpjG3fkO AljKl84FYrRwbwQsOHLqNoWGnuqHYco6mjUhxNY/cZYlWMrIFUMPAAyqiVo1+WLI mvKL0Tcjt0pHuqnJNeFnWPiBDpWOi0dOS3VYx89+tGd+f5ZPq5xsMdgB6Ocmu75L B7y01vC+MhkmJDs7S81ttUNOfst1WkL9zfaW1jDBoVXuW6keu4NAMzGHUn29jrtk kSOqk+kKuZvMchf5J179iQdtqwELLFE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:33 2025 by rpki-client