$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/508bb5db-f9f3-3f6d-bda2-033dee3e91d0.roa File: 508bb5db-f9f3-3f6d-bda2-033dee3e91d0.roa (raw, json) Hash identifier: UB9636aFS0VMj5pk4sOdYoMM//+0Q1pTsr3CqJBJ+gk= Subject key identifier: 10:93:65:B0:FC:F6:90:C9:C3:FF:5C:A6:33:AE:58:95:B8:B6:E5:49 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F8D3330C15EEC3854C40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/508bb5db-f9f3-3f6d-bda2-033dee3e91d0.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f8:d3:33:0c:15:ee:c3:85:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=a21874ed-0c34-41c1-9b7b-46a8c34baa53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:cf:7f:17:92:48:77:eb:7c:53:65:ea:cb: b2:24:59:fd:0e:f8:cf:74:59:04:7a:ec:31:cc:71: 5d:34:c3:4e:89:27:9a:db:3d:00:83:a5:e9:11:42: 74:56:a1:a1:a2:e3:73:7f:a3:a3:eb:8a:5b:75:85: 61:cb:0a:0b:76:0f:68:49:c3:81:6e:ae:53:f2:57: 9b:59:4d:4c:11:3d:e2:f4:a8:f9:b4:01:ba:81:c3: bc:53:d3:31:e8:3e:c8:01:9b:40:42:c6:2e:1c:b6: 09:1c:38:35:98:17:60:59:74:0e:33:54:31:67:a2: 04:9b:5c:94:4c:c3:08:bb:6b:a9:b9:10:80:88:9e: 61:f6:5d:c0:83:01:81:ed:97:bc:ff:5c:bd:e1:4a: 3e:61:5c:51:e4:73:41:da:bb:92:b6:92:fb:d7:e0: b0:58:ad:85:40:3d:20:f5:b6:94:6a:84:d4:b1:5c: ef:bd:40:1c:be:ec:6d:69:78:dd:41:df:e6:e0:f3: 28:af:9b:ac:63:82:46:a9:d4:0e:a4:94:4e:1d:0a: b3:2c:ac:26:d9:12:08:cc:0b:66:78:f9:71:2c:01: 4f:70:fc:2f:3e:0c:f4:2e:b5:0d:36:58:76:fe:03: 19:3e:67:74:50:83:ff:58:46:45:ef:78:af:d1:dc: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:93:65:B0:FC:F6:90:C9:C3:FF:5C:A6:33:AE:58:95:B8:B6:E5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/508bb5db-f9f3-3f6d-bda2-033dee3e91d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:35:30:f4:0d:cc:dc:7c:d2:50:a3:e2:13:b3:00:e1:f7:67: 6c:2c:1d:17:47:f5:96:82:39:6a:63:7c:86:8a:08:df:06:3b: ab:18:92:a4:66:a7:19:5a:24:e7:56:3e:51:f2:f7:74:a3:ee: 3a:54:e0:a0:09:1a:aa:2e:21:88:89:50:12:46:fe:c0:90:e0: 53:1e:6f:9f:50:06:d0:bd:f0:6b:2f:e2:9a:88:e0:ff:52:af: f8:9c:13:57:a8:01:9d:d0:7b:78:27:85:84:ee:4e:51:29:5c: 0c:46:ec:90:db:60:20:9c:b8:a6:24:0e:02:bb:c2:e6:2d:b4: 07:b5:87:ea:52:30:62:ae:86:0a:30:ff:f3:10:98:73:9a:b2: 81:a1:cd:3a:35:89:0e:0d:c5:58:1d:a5:24:4a:e8:df:50:85: 67:25:14:a1:5f:89:35:41:93:c0:42:07:b7:07:5d:b3:53:78: 24:bd:02:ae:10:ae:fa:18:82:e8:bb:15:17:d7:8b:62:95:5d: 09:9d:44:8d:ab:6f:9b:0e:7d:44:0c:e6:94:b2:10:d6:4b:04: cc:8f:0e:3d:65:9a:29:80:ad:5a:c6:71:09:7f:2e:7a:b7:f2: 9b:98:a8:e8:f5:b0:e2:54:01:37:e9:06:d5:7d:75:d0:42:ee: 46:d4:3c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPjTMwwV7sOFTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YTIxODc0ZWQtMGMzNC00MWMxLTliN2ItNDZhOGMzNGJhYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgLPfxeSSHfrfFNl6suyJFn9DvjPdFkEeuwx zHFdNMNOiSea2z0Ag6XpEUJ0VqGhouNzf6Oj64pbdYVhywoLdg9oScOBbq5T8leb WU1MET3i9Kj5tAG6gcO8U9Mx6D7IAZtAQsYuHLYJHDg1mBdgWXQOM1QxZ6IEm1yU TMMIu2upuRCAiJ5h9l3AgwGB7Ze8/1y94Uo+YVxR5HNB2ruStpL71+CwWK2FQD0g 9baUaoTUsVzvvUAcvuxtaXjdQd/m4PMor5usY4JGqdQOpJROHQqzLKwm2RIIzAtm ePlxLAFPcPwvPgz0LrUNNlh2/gMZPmd0UIP/WEZF73iv0dxYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCTZbD89pDJw/9cpjOuWJW4tuVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTA4YmI1ZGItZjlmMy0z ZjZkLWJkYTItMDMzZGVlM2U5MWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM1MPQNzNx80lCj4hOzAOH3Z2wsHRdH9ZaCOWpjfIaKCN8GO6sYkqRm pxlaJOdWPlHy93Sj7jpU4KAJGqouIYiJUBJG/sCQ4FMeb59QBtC98Gsv4pqI4P9S r/icE1eoAZ3Qe3gnhYTuTlEpXAxG7JDbYCCcuKYkDgK7wuYttAe1h+pSMGKuhgow //MQmHOasoGhzTo1iQ4NxVgdpSRK6N9QhWclFKFfiTVBk8BCB7cHXbNTeCS9Aq4Q rvoYgui7FRfXi2KVXQmdRI2rb5sOfUQM5pSyENZLBMyPDj1lmimArVrGcQl/Lnq3 8puYqOj1sOJUATfpBtV9ddBC7kbUPDQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:18 2025 by rpki-client