$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa File: 543dded8-773c-37ac-918d-3d2bf1c75c74.roa (raw, json) Hash identifier: 5E831rRyweyfuF1WmfrIp3wOQQDY6I0m0Csld3Y7eaw= Subject key identifier: 19:D6:60:38:4D:84:A4:C3:09:D0:FD:0D:AD:1D:CC:75:B9:27:82:E0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FA434D41C3C3AB648F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fa:43:4d:41:c3:c3:ab:64:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=ae05c75d-bf12-4967-9766-9eb2b6c2160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:39:09:80:bc:f6:91:9a:a8:d2:9c:4f:2f: 03:bd:ff:ef:ae:ba:0c:df:58:40:35:f5:5f:99:91: e5:80:2a:f3:84:a0:bc:09:cb:41:5a:78:96:a2:3f: a8:50:de:0c:d0:69:a0:48:6c:c4:3c:82:58:5e:84: b8:0f:aa:06:59:13:af:66:4f:10:4d:69:e8:7c:4c: 02:c2:7d:cc:30:a4:77:53:f9:2d:80:c8:5e:45:a7: e1:90:b2:38:61:5d:b4:6a:27:f5:b4:3c:50:89:a5: ca:12:c0:b2:96:d6:f6:c1:02:44:4d:b6:00:b4:c6: 68:65:9c:29:8c:07:fe:11:a8:20:56:66:d8:92:64: 1e:da:fc:9f:ff:da:8b:65:28:6e:4b:66:8d:e0:79: d3:f3:ca:86:0e:2b:27:3d:56:c3:3e:7b:5b:52:05: 97:42:e6:87:83:01:88:74:88:d1:2e:c4:76:2f:1a: cb:78:51:cc:73:bb:29:77:fe:6d:ad:4a:bc:39:df: 01:cf:37:c3:c2:23:cc:01:f1:b3:35:7a:91:27:a8: 00:57:a5:01:3f:4e:84:07:fa:94:5a:27:be:52:1a: b1:01:f8:c8:87:16:18:99:0d:e3:61:ab:02:1f:bf: 67:ea:1d:c7:77:b3:a9:1a:e5:04:d9:ad:e5:ed:50: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D6:60:38:4D:84:A4:C3:09:D0:FD:0D:AD:1D:CC:75:B9:27:82:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/543dded8-773c-37ac-918d-3d2bf1c75c74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2e:16:5d:86:5d:1e:57:24:36:4e:92:2e:ab:9a:98:f7:a9: 83:76:65:83:cd:4b:1f:b3:5a:e8:af:33:0f:9c:dd:b0:13:db: cd:13:e1:1c:e7:4b:03:ec:19:fd:ed:91:a7:9e:30:11:98:46: a8:8d:28:c6:94:3e:5a:00:6a:ac:c9:91:b5:48:db:83:b0:ec: e9:d1:af:b5:1a:8d:9c:10:5a:58:e8:ca:08:f3:f6:c5:47:f9: 93:2b:3c:28:e2:3f:36:6c:8e:29:23:c0:e8:ac:2a:c2:a6:24: a9:40:ee:e1:dc:1d:12:81:7a:e8:88:77:e0:15:cd:36:94:0d: 01:6e:cb:8b:18:47:f4:34:95:3c:49:f2:31:b4:e3:8e:25:90: 6c:84:d6:e6:51:36:18:87:6d:db:1f:ff:9f:dd:19:f6:b0:55: da:11:a6:f4:c6:56:42:0f:c0:4a:46:f1:a9:71:52:83:b0:93: 70:68:8d:6b:2b:5f:15:ec:2f:fd:80:20:37:f4:6f:cb:89:19: c8:c4:bd:a4:58:b4:99:8d:b8:36:47:e5:fe:5d:6b:fc:f6:18: 08:28:5c:b5:72:87:81:c8:ef:22:ad:68:99:20:a3:8c:d3:a8: a6:80:d0:7e:7d:5d:40:bb:f1:4f:3b:8e:3f:c0:c0:9f:33:2d: ec:b1:66:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPpDTUHDw6tkjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YWUwNWM3NWQtYmYxMi00OTY3LTk3NjYtOWViMmI2YzIxNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriY5CYC89pGaqNKcTy8Dvf/vrroM31hANfVf mZHlgCrzhKC8CctBWniWoj+oUN4M0GmgSGzEPIJYXoS4D6oGWROvZk8QTWnofEwC wn3MMKR3U/ktgMheRafhkLI4YV20aif1tDxQiaXKEsCyltb2wQJETbYAtMZoZZwp jAf+EaggVmbYkmQe2vyf/9qLZShuS2aN4HnT88qGDisnPVbDPntbUgWXQuaHgwGI dIjRLsR2LxrLeFHMc7spd/5trUq8Od8BzzfDwiPMAfGzNXqRJ6gAV6UBP06EB/qU Wie+UhqxAfjIhxYYmQ3jYasCH79n6h3Hd7OpGuUE2a3l7VAL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnWYDhNhKTDCdD9Da0dzHW5J4LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTQzZGRlZDgtNzczYy0z N2FjLTkxOGQtM2QyYmYxYzc1Yzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwuFl2GXR5XJDZOki6rmpj3qYN2ZYPNSx+zWuivMw+c3bAT280T4Rzn SwPsGf3tkaeeMBGYRqiNKMaUPloAaqzJkbVI24Ow7OnRr7UajZwQWljoygjz9sVH +ZMrPCjiPzZsjikjwOisKsKmJKlA7uHcHRKBeuiId+AVzTaUDQFuy4sYR/Q0lTxJ 8jG0444lkGyE1uZRNhiHbdsf/5/dGfawVdoRpvTGVkIPwEpG8alxUoOwk3BojWsr XxXsL/2AIDf0b8uJGcjEvaRYtJmNuDZH5f5da/z2GAgoXLVyh4HI7yKtaJkgo4zT qKaA0H59XUC78U87jj/AwJ8zLeyxZm0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:03 2025 by rpki-client