$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa File: 5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa (raw, json) Hash identifier: p2PUAhM2S5/LW3mEyxCTMUZi56HeW9BIHGi6UYzeAd8= Subject key identifier: AA:EE:5F:9B:D3:31:CA:0B:AB:86:A2:9D:D1:72:C0:E3:69:36:F9:BC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBA901DA7396E3B9EFE678 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:a9:01:da:73:96:e3:b9:ef:e6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=c7a23cae-6929-43e7-9728-fea0a676f946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:54:62:f9:a0:13:56:c7:4e:6d:13:0b:a1: 26:98:97:ee:81:34:11:75:b3:9e:57:e0:d3:f5:83: 8f:61:cc:a1:14:fe:c9:01:fe:e7:60:28:39:9d:b1: 09:13:33:50:70:b9:ec:da:e6:5d:36:96:96:d9:3d: 39:d0:43:6d:87:0b:22:c0:e0:b6:8a:be:fd:60:f0: 00:22:dc:f1:ec:65:6c:94:6e:66:c2:66:0e:c3:81: 9a:17:c1:65:a2:1e:7b:33:14:33:97:9f:90:14:b1: 81:33:e0:2a:63:72:c8:b6:aa:e4:64:34:c6:7d:d3: be:c9:a5:07:da:f6:63:e0:ad:cc:af:4d:46:85:12: 54:43:99:48:c3:6f:9e:3b:7e:91:7f:03:2e:11:b4: 1d:51:64:1d:ba:7d:fe:ac:97:15:8a:3f:4a:d2:a9: 60:83:a6:0b:55:42:e2:49:b6:44:5d:22:f3:b6:82: 5a:2c:34:9c:6f:c4:b3:d1:0d:e9:d0:0e:f9:96:8a: 81:40:ac:fa:53:f3:15:c9:77:30:08:29:42:db:44: f0:1a:fb:cc:73:8c:75:56:6b:d6:f3:09:f0:f6:59: 07:5f:12:5e:ad:fa:5a:67:8d:96:62:02:10:0c:7c: fc:67:f0:e3:30:51:6d:20:50:18:c9:78:f9:2c:d2: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:5F:9B:D3:31:CA:0B:AB:86:A2:9D:D1:72:C0:E3:69:36:F9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5a427fe7-45e2-38c6-9b94-3c92bbe312ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:38:83:45:e8:af:d9:c7:63:c9:67:1c:bc:f4:c8:09:d6:4d: 19:bc:53:34:25:c1:76:90:35:69:5c:11:4a:2f:7c:c3:e6:1c: f8:92:1c:7f:06:95:ac:b5:85:c2:be:7c:ba:e4:09:4b:3e:be: 00:ec:c6:50:41:ee:5c:6e:1b:91:44:1f:c7:ec:64:1b:0b:b7: 40:d5:4f:08:f8:5f:c3:a5:62:ae:9d:35:fa:5e:22:35:6d:a7: 43:e4:05:fa:94:0c:12:e2:8d:04:75:ce:d1:f4:1f:2c:4f:f8: 34:2a:da:f5:d7:af:32:9d:11:f2:0c:f4:75:62:50:e1:8a:ec: 93:26:5c:77:48:24:e8:45:1a:32:28:74:22:07:f3:fd:a3:73: 09:95:9d:04:b1:ea:85:e3:3d:19:d3:82:cc:62:47:c2:32:2b: 12:90:b8:d4:43:c3:24:6f:46:af:c1:3e:9a:07:4c:6d:39:dd: bd:21:62:d7:d7:20:0e:48:5e:78:67:7b:4f:7d:f6:5c:cd:08: 76:16:76:a5:db:37:9e:c0:04:03:60:2d:58:72:01:b3:cb:3a: a9:7e:2f:ad:0e:34:0c:56:18:1b:a6:11:ed:43:50:df:a5:59: e9:7e:60:ee:ec:91:24:2c:77:a6:41:20:f0:d9:fd:e1:62:28: e3:f9:4a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/66kB2nOW47nv5ngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YzdhMjNjYWUtNjkyOS00M2U3LTk3MjgtZmVhMGE2NzZmOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiotUYvmgE1bHTm0TC6EmmJfugTQRdbOeV+DT 9YOPYcyhFP7JAf7nYCg5nbEJEzNQcLns2uZdNpaW2T050ENthwsiwOC2ir79YPAA Itzx7GVslG5mwmYOw4GaF8Floh57MxQzl5+QFLGBM+AqY3LItqrkZDTGfdO+yaUH 2vZj4K3Mr01GhRJUQ5lIw2+eO36RfwMuEbQdUWQdun3+rJcVij9K0qlgg6YLVULi SbZEXSLztoJaLDScb8Sz0Q3p0A75loqBQKz6U/MVyXcwCClC20TwGvvMc4x1VmvW 8wnw9lkHXxJerfpaZ42WYgIQDHz8Z/DjMFFtIFAYyXj5LNKHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKruX5vTMcoLq4aindFywONpNvm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWE0MjdmZTctNDVlMi0z OGM2LTliOTQtM2M5MmJiZTMxMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw4g0Xor9nHY8lnHLz0yAnWTRm8UzQlwXaQNWlcEUovfMPmHPiSHH8G lay1hcK+fLrkCUs+vgDsxlBB7lxuG5FEH8fsZBsLt0DVTwj4X8OlYq6dNfpeIjVt p0PkBfqUDBLijQR1ztH0HyxP+DQq2vXXrzKdEfIM9HViUOGK7JMmXHdIJOhFGjIo dCIH8/2jcwmVnQSx6oXjPRnTgsxiR8IyKxKQuNRDwyRvRq/BPpoHTG053b0hYtfX IA5IXnhne0999lzNCHYWdqXbN57ABANgLVhyAbPLOql+L60ONAxWGBumEe1DUN+l Wel+YO7skSQsd6ZBIPDZ/eFiKOP5SlU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:10 2025 by rpki-client