$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa File: 5aeacd74-e399-342f-a107-f69488f9e9e1.roa (raw, json) Hash identifier: Tf/4hfdpdTOk0Ibt2c8MKDg+4KdojRW/incysvlFCCQ= Subject key identifier: EC:E7:A4:5E:3D:3B:36:A0:6D:B8:AA:72:51:C2:15:8A:DE:7A:F9:FA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FB1D32F24DA2D2E802A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fb:1d:32:f2:4d:a2:d2:e8:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=2a18b918-64aa-47be-9722-ba338413537f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b5:5f:1e:55:12:04:70:25:4e:97:b7:c2:3f: 4c:cf:2f:47:c0:1f:9b:f3:76:b0:94:04:66:7a:45: 1c:d3:5e:51:20:46:d3:24:3c:9f:21:68:41:28:e2: d1:81:7a:7a:1f:b4:07:9d:60:25:01:a0:0b:67:9a: 70:59:15:53:be:9f:1d:cc:f6:b5:83:ea:64:a0:ab: 37:f8:b0:8c:63:d8:60:40:69:df:35:86:76:98:24: 6a:b7:04:a5:d5:eb:42:4c:53:cd:60:ff:49:ec:34: 62:27:74:af:9a:48:ab:d2:47:05:cc:b7:2f:42:c0: c9:db:64:94:75:5c:ac:6b:31:07:1d:23:8e:d9:87: 23:ab:ce:a3:a1:7b:8d:cc:e9:dd:29:37:81:9e:88: 53:1e:f0:2d:6f:06:86:a2:a0:d1:a5:d3:65:8a:44: 62:ed:c1:96:8b:9a:a1:99:88:eb:22:ba:a9:8a:5d: a9:a7:ce:ac:0d:0f:4d:a9:51:d4:ee:ce:83:d1:84: dd:c5:45:72:12:d9:e5:79:75:14:85:1f:0d:b9:04: ee:97:4d:25:0a:e2:36:fa:8f:fc:c5:68:57:25:59: 0a:e1:f9:8c:11:f7:fb:1c:5e:cc:c0:a1:7e:35:02: 0d:32:5e:5b:55:24:13:87:7d:8d:19:f7:a6:93:e4: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:A4:5E:3D:3B:36:A0:6D:B8:AA:72:51:C2:15:8A:DE:7A:F9:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5aeacd74-e399-342f-a107-f69488f9e9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:eb:e8:bf:1c:dd:16:18:46:b2:ac:25:1f:31:05:c5:d7:7c: 40:66:6a:11:d1:96:37:2f:ed:43:a0:17:fe:20:67:f8:f0:09: 89:3a:a0:f5:b6:a2:c7:81:0d:10:94:c9:d2:3f:3b:ea:c1:f7: b7:ac:1d:0e:89:ff:cd:ba:22:13:31:c3:5a:5a:85:ce:d7:95: 6b:31:cf:d6:5b:9c:9b:0a:12:e2:03:46:13:08:90:76:6e:f6: 90:81:da:19:0c:c4:8f:a3:61:fa:5c:69:c3:c8:c6:9c:84:68: a0:24:03:30:17:e1:47:09:cd:3f:9e:e0:a8:78:62:09:89:f4: 7d:70:c4:e2:df:df:40:b2:d8:ce:4c:3b:fe:76:e9:7d:3a:de: e4:5a:3e:39:54:4f:6a:70:4f:98:0d:a0:af:13:35:d0:50:13: dc:85:40:18:22:ef:c6:d0:5b:cb:6e:47:9e:e9:a1:34:8e:b0: 28:80:0d:1b:b3:71:62:5d:4f:52:df:4c:36:b4:9d:29:d8:96: 72:88:88:f1:4f:7a:0d:d7:59:8b:70:1b:5a:f7:fa:31:46:fc: 5f:b0:83:de:c4:99:20:b6:46:da:45:6c:b8:47:f5:2b:54:e7: d9:f2:b1:dc:d9:26:4e:fe:6e:20:25:22:b9:f4:3c:0b:25:07: 6f:39:86:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPsdMvJNotLoAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MmExOGI5MTgtNjRhYS00N2JlLTk3MjItYmEzMzg0MTM1MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbVfHlUSBHAlTpe3wj9Mzy9HwB+b83awlARm ekUc015RIEbTJDyfIWhBKOLRgXp6H7QHnWAlAaALZ5pwWRVTvp8dzPa1g+pkoKs3 +LCMY9hgQGnfNYZ2mCRqtwSl1etCTFPNYP9J7DRiJ3Svmkir0kcFzLcvQsDJ22SU dVysazEHHSOO2Ycjq86joXuNzOndKTeBnohTHvAtbwaGoqDRpdNlikRi7cGWi5qh mYjrIrqpil2pp86sDQ9NqVHU7s6D0YTdxUVyEtnleXUUhR8NuQTul00lCuI2+o/8 xWhXJVkK4fmMEff7HF7MwKF+NQINMl5bVSQTh32NGfemk+SDbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOznpF49OzagbbiqclHCFYreevn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWFlYWNkNzQtZTM5OS0z NDJmLWExMDctZjY5NDg4ZjllOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7r6L8c3RYYRrKsJR8xBcXXfEBmahHRljcv7UOgF/4gZ/jwCYk6oPW2 oseBDRCUydI/O+rB97esHQ6J/826IhMxw1pahc7XlWsxz9ZbnJsKEuIDRhMIkHZu 9pCB2hkMxI+jYfpcacPIxpyEaKAkAzAX4UcJzT+e4Kh4YgmJ9H1wxOLf30Cy2M5M O/526X063uRaPjlUT2pwT5gNoK8TNdBQE9yFQBgi78bQW8tuR57poTSOsCiADRuz cWJdT1LfTDa0nSnYlnKIiPFPeg3XWYtwG1r3+jFG/F+wg97EmSC2RtpFbLhH9StU 59nysdzZJk7+biAlIrn0PAslB285hhc= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:00 2025 by rpki-client