$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59042987-7796-3adf-96f5-e88daa4d67ae.roa File: 59042987-7796-3adf-96f5-e88daa4d67ae.roa (raw, json) Hash identifier: gwsIJlcHVa/X9tP4hABsUsfI+T+/Vn5Jm9lipVeUkAA= Subject key identifier: FD:67:98:32:B2:8D:3E:CB:53:A4:43:81:08:A4:92:36:14:41:CD:51 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DE0BCE300E3D3B437F80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59042987-7796-3adf-96f5-e88daa4d67ae.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:de:0b:ce:30:0e:3d:3b:43:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=9381a7b8-9188-4d18-a1a9-42081851edd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:71:0c:65:8b:50:05:6c:5e:f7:3d:2e:4b: b7:a8:0d:ed:66:55:86:17:77:12:a4:85:bc:c1:c2: f3:30:0d:b1:d2:f5:36:fd:f3:92:17:ad:3d:f1:45: 92:86:cf:d0:cc:6d:20:32:5a:34:e0:c5:9a:3a:b9: b2:75:81:f3:57:16:d9:10:ec:f4:80:0d:80:fb:cb: 1c:04:8c:f4:54:bf:32:1b:5c:e3:58:f7:0f:c1:20: 66:74:7e:48:1f:dc:89:50:24:f5:d7:37:8f:53:4b: db:f6:4c:42:cc:64:06:df:8f:54:b2:e7:b9:e9:de: ad:00:d8:2f:79:68:24:d6:bf:84:28:2d:a7:ba:06: 2b:7e:12:b2:0f:18:68:d6:fe:87:cd:0b:e1:3e:37: a4:14:ac:96:71:d2:ab:15:08:cf:a6:fd:a6:09:c9: 50:ef:6c:7a:33:d0:c4:d9:f2:98:ef:fb:86:1c:54: 89:22:86:a0:12:19:44:22:db:58:cb:16:3e:ba:58: ff:75:a6:28:ff:e4:45:0a:ca:0f:74:12:47:b2:2b: 34:fe:d4:a4:5d:73:66:7b:2b:23:fd:ef:f2:40:e0: 4c:bc:03:64:88:15:3c:94:6f:97:eb:7c:ff:ce:8a: 61:88:a4:71:e7:fe:c4:09:9f:4b:75:9a:03:45:da: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:67:98:32:B2:8D:3E:CB:53:A4:43:81:08:A4:92:36:14:41:CD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59042987-7796-3adf-96f5-e88daa4d67ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c7:a6:ea:61:1e:2d:92:f9:c2:de:cd:1b:b3:98:f6:7f:c8: dc:f2:41:22:75:76:b9:99:b5:c1:eb:96:17:bb:66:fb:62:ab: 4a:a4:bb:35:78:07:b8:44:33:f2:43:e1:a7:9a:70:41:71:db: fa:3f:0e:88:bc:2b:ed:04:5c:10:ac:c8:24:ec:71:5f:7a:62: 08:aa:3b:f1:d2:35:88:54:eb:1e:f4:07:c2:e1:75:1c:98:d8: 83:4a:55:be:bf:c3:2a:49:16:71:de:e9:1b:54:07:d3:7a:9d: bb:fe:37:0e:13:a6:cd:42:fa:bb:be:2b:78:f7:53:e9:e2:a1: 6c:f3:80:c5:6c:bb:38:42:74:90:46:9c:6c:a1:41:1c:e6:cb: 6b:8c:0a:c7:83:54:0d:2d:62:98:6c:2b:11:be:90:4a:cc:58: f7:39:24:b9:fd:b3:f7:02:7e:7c:83:2c:9c:85:93:65:ed:b3: e5:bd:37:1e:9f:6f:a9:36:13:3f:6a:a3:5f:3a:26:a0:8c:d3: f7:77:be:ad:e5:c5:52:30:df:1f:89:09:98:94:6b:d7:b4:e0: 65:a0:a1:48:3a:f9:8f:f5:c5:08:2f:e7:01:74:6c:e2:26:b5: f6:2f:8a:29:a0:78:47:bd:90:4d:19:ec:e8:06:29:57:83:e1: 60:19:db:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN4LzjAOPTtDf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk OTM4MWE3YjgtOTE4OC00ZDE4LWExYTktNDIwODE4NTFlZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+VxDGWLUAVsXvc9Lku3qA3tZlWGF3cSpIW8 wcLzMA2x0vU2/fOSF6098UWShs/QzG0gMlo04MWaOrmydYHzVxbZEOz0gA2A+8sc BIz0VL8yG1zjWPcPwSBmdH5IH9yJUCT11zePU0vb9kxCzGQG349Usue56d6tANgv eWgk1r+EKC2nugYrfhKyDxho1v6HzQvhPjekFKyWcdKrFQjPpv2mCclQ72x6M9DE 2fKY7/uGHFSJIoagEhlEIttYyxY+ulj/daYo/+RFCsoPdBJHsis0/tSkXXNmeysj /e/yQOBMvANkiBU8lG+X63z/zophiKRx5/7ECZ9LdZoDRdpUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1nmDKyjT7LU6RDgQikkjYUQc1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTkwNDI5ODctNzc5Ni0z YWRmLTk2ZjUtZTg4ZGFhNGQ2N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXHpuphHi2S+cLezRuzmPZ/yNzyQSJ1drmZtcHrlhe7Zvtiq0qkuzV4 B7hEM/JD4aeacEFx2/o/Doi8K+0EXBCsyCTscV96YgiqO/HSNYhU6x70B8LhdRyY 2INKVb6/wypJFnHe6RtUB9N6nbv+Nw4Tps1C+ru+K3j3U+nioWzzgMVsuzhCdJBG nGyhQRzmy2uMCseDVA0tYphsKxG+kErMWPc5JLn9s/cCfnyDLJyFk2Xts+W9Nx6f b6k2Ez9qo186JqCM0/d3vq3lxVIw3x+JCZiUa9e04GWgoUg6+Y/1xQgv5wF0bOIm tfYviimgeEe9kE0Z7OgGKVeD4WAZ23o= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:44 2025 by rpki-client