$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa File: 5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa (raw, json) Hash identifier: OJC3kuq5H2k3xFcsAhnr/hEVbjLzYlpeoQR1f0QW3PM= Subject key identifier: 3E:90:69:10:EF:AD:80:13:7F:96:C9:6E:88:99:62:7A:04:26:56:25 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E8D53E13BA5124786800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e8:d5:3e:13:ba:51:24:78:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=b224a2ad-5fef-4e43-b2b7-ee7e394480ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:70:93:ac:0a:61:b3:86:fb:20:b4:8a:f9: 29:ad:0f:e1:16:fb:ed:7c:27:81:ba:ac:d3:0f:2e: 02:58:4f:a4:52:66:cc:13:97:07:f8:4b:34:1d:89: ab:12:42:29:b2:26:95:eb:1f:f4:41:d0:0e:5c:77: 4d:6e:75:37:0c:ca:96:73:12:da:83:44:fc:35:ce: ec:62:99:8f:ba:86:ce:44:ed:3d:50:e9:2c:c4:a0: 87:eb:c6:b5:e9:17:04:c0:4f:c5:cd:25:40:85:00: 0f:42:fd:66:8c:72:0a:4b:14:90:de:62:68:e5:87: 1d:93:ec:69:94:ba:ce:c5:96:e6:a2:25:7d:7f:eb: 9b:94:ed:29:a8:dd:99:5b:f9:65:25:c6:f8:3b:9a: 7d:af:2f:11:27:cd:ce:bb:a3:48:58:47:a2:23:85: 1f:2e:39:dd:d3:bd:5e:86:f5:88:8f:0a:65:a4:90: c3:03:20:0f:34:79:4f:28:6c:71:4f:4e:e4:9a:e1: c6:f2:36:d3:bd:a5:5b:ce:fd:7d:60:66:32:4f:7d: 58:39:1e:f9:1c:78:70:b7:07:50:f6:1f:98:d1:91: e8:4d:a2:45:ea:6c:ab:10:ca:b7:2c:a5:90:5c:14: 4e:60:a8:f3:bf:df:6f:7d:e9:41:07:ee:85:43:73: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:90:69:10:EF:AD:80:13:7F:96:C9:6E:88:99:62:7A:04:26:56:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c6:e1:75:e3:7b:d5:ae:a6:38:34:9d:7d:64:13:51:b6:97: 51:fe:73:16:9c:c4:7d:3a:12:96:96:13:25:fa:18:90:f5:c6: d0:04:a9:52:58:5b:26:d0:d0:f4:26:ca:70:51:77:33:b3:9b: 88:52:48:b4:0d:6a:01:5b:5a:09:2a:ba:95:7a:29:0b:50:72: 1d:06:2c:87:41:83:69:6f:1c:d5:f8:80:2e:1d:99:0c:cf:c3: fa:61:da:97:09:ab:ad:f3:ad:17:d4:ca:28:34:b2:53:07:c9: 1c:70:c1:bc:c5:5b:29:60:64:17:73:c8:fd:9f:63:b9:97:27: 26:13:dc:4b:d9:06:92:e4:66:90:fd:4c:f1:67:5c:e9:a0:ec: b0:60:ac:c6:b8:76:aa:f9:58:3c:9c:80:5b:42:f9:e9:c2:8a: f5:f5:11:ea:9c:79:a2:9c:ce:e1:9f:f6:e5:a3:92:3e:1d:4b: b3:6e:bd:82:2c:d6:78:bd:ba:6e:ff:a9:db:9a:02:14:6f:be: ac:18:de:4d:8e:47:ee:db:19:06:62:90:18:44:c4:dc:1a:59: 54:b4:ef:96:58:34:30:d1:f6:0f:53:cb:66:7c:6f:3c:0b:37: bd:76:b5:ee:d7:e9:e8:48:a6:2f:2e:61:c2:6d:ac:61:0f:77: 0a:27:47:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOjVPhO6USR4aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YjIyNGEyYWQtNWZlZi00ZTQzLWIyYjctZWU3ZTM5NDQ4MGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VJwk6wKYbOG+yC0ivkprQ/hFvvtfCeBuqzT Dy4CWE+kUmbME5cH+Es0HYmrEkIpsiaV6x/0QdAOXHdNbnU3DMqWcxLag0T8Nc7s YpmPuobORO09UOksxKCH68a16RcEwE/FzSVAhQAPQv1mjHIKSxSQ3mJo5Ycdk+xp lLrOxZbmoiV9f+ublO0pqN2ZW/llJcb4O5p9ry8RJ83Ou6NIWEeiI4UfLjnd071e hvWIjwplpJDDAyAPNHlPKGxxT07kmuHG8jbTvaVbzv19YGYyT31YOR75HHhwtwdQ 9h+Y0ZHoTaJF6myrEMq3LKWQXBROYKjzv99vfelBB+6FQ3M1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6QaRDvrYATf5bJboiZYnoEJlYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTE0NmU2ZGUtY2JjMi0z YzFmLTlhOGEtNjQwYzIzNzEyNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHG4XXje9Wupjg0nX1kE1G2l1H+cxacxH06EpaWEyX6GJD1xtAEqVJY WybQ0PQmynBRdzOzm4hSSLQNagFbWgkqupV6KQtQch0GLIdBg2lvHNX4gC4dmQzP w/ph2pcJq63zrRfUyig0slMHyRxwwbzFWylgZBdzyP2fY7mXJyYT3EvZBpLkZpD9 TPFnXOmg7LBgrMa4dqr5WDycgFtC+enCivX1EeqceaKczuGf9uWjkj4dS7NuvYIs 1ni9um7/qduaAhRvvqwY3k2OR+7bGQZikBhExNwaWVS075ZYNDDR9g9Ty2Z8bzwL N712te7X6ehIpi8uYcJtrGEPdwonR5Y= -----END CERTIFICATE-----Generated at Fri Mar 14 13:45:21 2025 by rpki-client