$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa File: 4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa (raw, json) Hash identifier: IBoaC7+0X6MKTshPUbqQSoeGjjSjEsgcIPdGTtg9pzo= Subject key identifier: AE:21:B6:E8:0A:F8:96:1D:D4:FD:89:56:AA:E5:F5:EF:24:76:01:F3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DFFF96E1B1C916F281E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:df:ff:96:e1:b1:c9:16:f2:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=794c3469-6d53-443c-ae84-2bdf73365724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:5c:91:ad:29:69:11:40:0f:c6:45:65:78: 11:ea:93:ac:a0:84:c4:15:60:43:0b:af:02:fb:1d: 78:10:a6:2d:46:7d:69:b2:74:06:e4:ed:9e:db:83: f5:0d:0a:e8:5a:cc:5b:a0:45:0d:50:02:5f:97:45: 04:5f:a5:37:40:d4:7f:71:e9:fe:a5:dd:d9:d6:82: d6:81:d4:31:4b:29:38:29:58:fa:53:f6:15:5b:f4: bc:5f:74:c8:76:24:31:dd:d1:a2:c9:f6:f8:94:55: 0e:1b:9e:7f:7f:41:7e:f6:f4:f9:9e:37:15:af:8f: 58:39:90:57:e4:4d:b2:0d:bb:a0:f6:28:62:a1:a8: 80:d2:b5:2b:a8:c2:33:19:eb:d1:46:25:80:88:0f: c3:ec:ec:03:fe:25:2b:d3:68:dc:d9:6a:c4:7a:fc: 00:25:38:3d:46:32:7c:99:f2:f2:d1:45:72:b2:39: 44:9a:98:a0:43:9f:da:f0:36:e0:f8:eb:7a:72:bd: 86:07:f8:7e:5c:3f:e9:ad:bb:5e:d9:7b:c1:df:11: d8:3e:e3:76:71:e6:3c:01:3a:50:af:4b:7f:98:a8: d1:37:6b:6a:1a:c8:79:b3:9c:51:8a:85:37:cb:58: 87:3d:77:77:76:13:e0:90:4d:15:40:7c:3c:f3:92: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:21:B6:E8:0A:F8:96:1D:D4:FD:89:56:AA:E5:F5:EF:24:76:01:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:97:8b:95:9c:27:89:a5:24:9a:8b:19:f6:d8:55:f6:03:f9: 5f:81:ae:fc:e7:2d:8c:79:a8:b6:a4:37:9b:df:d4:63:8d:73: a6:3e:a5:d1:0e:af:52:98:c1:7e:0f:01:05:11:fa:12:68:60: c5:20:01:44:0d:e3:c4:56:35:33:2f:6b:7c:9d:25:ad:14:7f: f8:61:72:ed:46:0f:26:74:ee:17:60:24:73:8b:13:87:a2:c7: 69:c3:f6:4c:b5:16:06:dc:95:97:8a:31:28:47:85:2f:d8:f9: 5e:40:62:9f:3f:2f:bc:d9:b0:d5:a9:dc:87:fd:3f:0d:3e:44: e9:55:52:3b:16:ca:ae:96:24:67:d3:83:6e:aa:8f:ec:29:c0: 9d:25:81:95:c0:2d:58:0f:4d:30:9e:87:b6:33:1e:20:f2:1b: 0c:29:41:73:0e:f2:83:ba:28:47:a7:0b:ea:2d:d5:d3:e0:07: 88:7e:d6:39:4c:bf:bc:39:fb:55:1e:45:77:d7:79:59:3c:43: 4f:3e:9a:3d:51:ab:c1:4c:ed:1e:e3:a5:da:e5:48:5f:8e:39: 2c:71:13:13:6c:73:86:09:ce:49:7a:b5:ea:f0:d9:e6:37:83: 1f:6d:73:fe:72:f6:64:35:ec:42:ad:e7:30:82:2d:1a:64:68: 4f:47:e3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN//luGxyRbygeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk Nzk0YzM0NjktNmQ1My00NDNjLWFlODQtMmJkZjczMzY1NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ9cka0paRFAD8ZFZXgR6pOsoITEFWBDC68C +x14EKYtRn1psnQG5O2e24P1DQroWsxboEUNUAJfl0UEX6U3QNR/cen+pd3Z1oLW gdQxSyk4KVj6U/YVW/S8X3TIdiQx3dGiyfb4lFUOG55/f0F+9vT5njcVr49YOZBX 5E2yDbug9ihioaiA0rUrqMIzGevRRiWAiA/D7OwD/iUr02jc2WrEevwAJTg9RjJ8 mfLy0UVysjlEmpigQ5/a8Dbg+Ot6cr2GB/h+XD/prbte2XvB3xHYPuN2ceY8ATpQ r0t/mKjRN2tqGsh5s5xRioU3y1iHPXd3dhPgkE0VQHw885LBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4htugK+JYd1P2JVqrl9e8kdgHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGRhZjcwZWItZDU1MC0z MGNjLWE3NWEtMWUxZGIwYmNmOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuXi5WcJ4mlJJqLGfbYVfYD+V+BrvznLYx5qLakN5vf1GONc6Y+pdEO r1KYwX4PAQUR+hJoYMUgAUQN48RWNTMva3ydJa0Uf/hhcu1GDyZ07hdgJHOLE4ei x2nD9ky1FgbclZeKMShHhS/Y+V5AYp8/L7zZsNWp3If9Pw0+ROlVUjsWyq6WJGfT g26qj+wpwJ0lgZXALVgPTTCeh7YzHiDyGwwpQXMO8oO6KEenC+ot1dPgB4h+1jlM v7w5+1UeRXfXeVk8Q08+mj1Rq8FM7R7jpdrlSF+OOSxxExNsc4YJzkl6terw2eY3 gx9tc/5y9mQ17EKt5zCCLRpkaE9H420= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:35 2025 by rpki-client