$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa File: 501e8e72-de2b-3185-a1ac-945d85083b8f.roa (raw, json) Hash identifier: aVra4IGI7d0inmFTJ6dnjzDUZCh9wn/Jh8eY/r9i9uY= Subject key identifier: BE:53:01:A9:4C:03:BA:38:12:93:B1:E2:23:02:E8:B8:D0:0C:BF:D0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FCC7D423ABFD1661EB00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fc:c7:d4:23:ab:fd:16:61:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=f2c1e7f0-7c76-4d01-8dba-e6af36765c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:48:14:6a:6b:23:2f:8b:93:96:c7:ce:8a: bd:30:56:95:5e:87:0d:62:52:fd:9c:35:ec:b4:06: 2c:5c:cb:9d:36:57:1a:6c:a0:4f:35:aa:17:af:6b: 2a:11:ee:d3:3f:ea:8b:c0:eb:e8:72:a5:97:b4:10: c6:fa:e8:3d:a0:e2:05:d5:51:87:73:b2:3c:c7:28: 64:64:75:9f:3f:fa:15:83:97:c4:31:21:e1:bd:bf: 21:90:48:bb:a1:af:50:16:8f:9c:f9:41:30:5f:fc: a5:2e:fc:29:93:45:77:0a:35:97:de:eb:ce:ff:ad: e1:ce:2f:19:2c:aa:15:6d:c1:27:35:00:a5:57:ac: b1:26:cb:24:39:6d:57:9a:17:1a:20:b5:dd:49:da: e8:d0:db:69:c6:e4:36:cc:d3:c5:a9:f3:e0:08:9b: 4f:59:76:e7:a3:0f:77:ee:50:80:e4:29:e5:2c:31: 24:10:71:2b:15:07:51:f1:a7:82:16:e9:22:0b:46: ed:1b:17:0d:f8:04:65:ca:7a:7c:28:d5:01:75:be: e7:6a:36:ed:b1:7f:52:c6:9e:da:12:ba:8c:ec:10: b2:ba:49:6e:c1:bc:0f:6c:2d:a4:09:03:19:44:f5: 7f:ff:54:78:3b:b2:71:f9:25:f1:0c:fb:32:83:02: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:53:01:A9:4C:03:BA:38:12:93:B1:E2:23:02:E8:B8:D0:0C:BF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/501e8e72-de2b-3185-a1ac-945d85083b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:dd:d2:33:2e:f9:c2:3c:06:46:ad:ed:79:09:89:bc:f4:64: 2b:87:63:ce:0d:b1:66:76:ae:04:ff:5d:72:0a:5f:b5:4b:27: ab:f8:8a:23:33:b1:54:2b:f5:37:31:94:ff:ab:b6:b8:17:14: e3:e3:f6:15:80:96:14:de:b1:39:37:10:fe:fc:f5:56:d5:f6: aa:20:be:c5:71:c1:52:44:39:be:d0:59:be:15:b5:ae:a4:d7: 39:36:32:5e:6c:e6:e4:b7:03:94:b8:f8:2c:39:2a:f5:0a:9c: e9:e8:91:b8:86:4c:2e:b3:76:14:19:8e:d4:ea:48:f3:45:fe: d0:b3:f1:1e:08:d6:0a:12:24:cf:fa:02:32:b1:89:d6:1d:e4: f5:60:82:b4:ee:f5:75:c8:52:d1:10:f5:36:15:79:c6:03:11: c9:65:e4:fa:01:e8:fc:99:a4:6a:7b:5e:4b:17:9d:92:38:b4: 88:d9:f8:4e:b8:5f:e6:a1:ce:c1:ac:ec:7a:4f:be:ad:eb:e7: c3:73:fc:01:33:80:b6:f6:df:47:1d:49:c7:88:2e:45:a2:2e: 67:de:dd:13:09:d1:1e:f0:4a:c5:9d:88:85:55:34:60:00:fb: cc:b4:df:46:6c:55:0d:3e:f3:8a:f1:9a:59:a7:52:8d:45:7b: 7f:f9:fb:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPzH1COr/RZh6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZjJjMWU3ZjAtN2M3Ni00ZDAxLThkYmEtZTZhZjM2NzY1YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5FIFGprIy+Lk5bHzoq9MFaVXocNYlL9nDXs tAYsXMudNlcabKBPNaoXr2sqEe7TP+qLwOvocqWXtBDG+ug9oOIF1VGHc7I8xyhk ZHWfP/oVg5fEMSHhvb8hkEi7oa9QFo+c+UEwX/ylLvwpk0V3CjWX3uvO/63hzi8Z LKoVbcEnNQClV6yxJsskOW1XmhcaILXdSdro0NtpxuQ2zNPFqfPgCJtPWXbnow93 7lCA5CnlLDEkEHErFQdR8aeCFukiC0btGxcN+ARlynp8KNUBdb7najbtsX9Sxp7a ErqM7BCyukluwbwPbC2kCQMZRPV//1R4O7Jx+SXxDPsygwLzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5TAalMA7o4EpOx4iMC6LjQDL/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTAxZThlNzItZGUyYi0z MTg1LWExYWMtOTQ1ZDg1MDgzYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvd0jMu+cI8Bkat7XkJibz0ZCuHY84NsWZ2rgT/XXIKX7VLJ6v4iiMz sVQr9TcxlP+rtrgXFOPj9hWAlhTesTk3EP789VbV9qogvsVxwVJEOb7QWb4Vta6k 1zk2Ml5s5uS3A5S4+Cw5KvUKnOnokbiGTC6zdhQZjtTqSPNF/tCz8R4I1goSJM/6 AjKxidYd5PVggrTu9XXIUtEQ9TYVecYDEcll5PoB6PyZpGp7XksXnZI4tIjZ+E64 X+ahzsGs7HpPvq3r58Nz/AEzgLb230cdSceILkWiLmfe3RMJ0R7wSsWdiIVVNGAA +8y030ZsVQ0+84rxmlmnUo1Fe3/5+yU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:02 2025 by rpki-client