$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa File: 61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa (raw, json) Hash identifier: KA5uYVgqjMDShR8bIke+9PT/xjr3M+YndH+WIzRQbjU= Subject key identifier: DE:87:4E:1A:DB:97:AF:2A:A5:61:21:0D:46:9C:97:59:8B:DD:71:16 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F6552B772F8C38A8CE80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f6:55:2b:77:2f:8c:38:a8:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=3dca13da-fcf5-43fe-8b4f-4d8380c54b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:28:50:10:1e:bd:5b:cf:e2:98:c4:bf:24: c8:92:66:9f:ba:a1:1a:94:fb:71:08:53:ae:c8:0d: 86:92:f4:2b:0f:02:62:05:0e:72:81:05:b6:c9:d1: 56:59:60:c7:55:79:c5:fe:0b:4a:75:ff:04:70:b2: 58:a7:63:a6:d7:56:10:50:ef:b5:4e:97:09:0b:d4: 6f:ba:ec:7c:10:a9:e4:3a:fb:3c:12:bb:68:d0:78: 5d:5b:c1:e8:e6:71:31:90:98:59:50:23:ae:eb:9a: e3:77:a6:c1:d7:21:4b:04:85:38:ef:f4:b0:e2:19: b3:e4:25:fe:ee:83:f1:07:70:b0:65:de:ce:6e:77: 21:6e:01:ed:d5:8e:e3:03:5c:d8:24:cd:66:b6:0e: 38:52:2b:f0:ca:66:10:9e:14:72:bf:64:c0:ef:c6: 87:7d:1c:f2:94:44:89:34:b8:64:c9:3c:f1:d1:93: 33:69:23:ba:5d:33:c4:43:14:e7:8e:84:36:cd:1c: 9d:66:28:46:54:01:f6:69:2f:df:49:d9:ac:94:2b: 93:0c:55:e4:20:5f:13:98:ab:91:ee:0a:b0:c2:98: 89:ac:2c:7f:8c:24:f5:9c:84:88:c8:53:a6:20:62: 08:a1:25:8b:9f:10:67:77:a1:a2:c3:2d:fc:03:da: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:4E:1A:DB:97:AF:2A:A5:61:21:0D:46:9C:97:59:8B:DD:71:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61938ca8-8aa6-30d4-8a2b-fb31527909e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:76:89:39:e4:55:80:b7:dd:ed:1b:e4:35:9a:18:7d:96:85: f7:98:ad:35:67:1e:6e:97:ef:35:5c:33:d2:c2:4c:89:45:c2: 00:21:1e:2b:ec:c9:75:37:34:d6:46:3c:e6:9a:d8:54:ac:0b: 25:77:05:3b:f3:d0:b3:ed:1d:60:a3:18:32:46:0f:62:e5:50: 1f:94:c2:5a:d6:c7:d5:6f:6a:f6:7f:aa:66:cf:49:e6:31:e3: 32:6a:9d:0f:97:7a:dc:60:4d:c2:8c:81:8a:4b:81:11:cf:4f: b9:0f:2d:83:d0:12:81:6f:6f:a7:3a:c7:1a:42:c5:27:82:e9: 5f:f3:bd:22:65:c3:95:dc:c5:ba:ee:3f:b8:96:88:42:4c:03: 3a:45:6f:5c:97:de:1b:52:fe:07:19:f5:30:b4:d5:7a:eb:b1: 72:20:61:bc:73:4b:73:d0:90:2b:ca:07:a0:aa:7e:39:15:65: 65:83:7d:fd:23:09:e9:49:e0:e9:df:24:04:06:2f:33:d6:41: 9f:2b:bb:e4:82:e3:34:58:11:44:c0:ed:6e:0c:92:47:f5:69: bb:9a:f0:5e:55:40:8e:9c:23:4f:58:f0:5f:36:c1:83:c7:7c: 39:c9:86:f5:35:b7:e4:f5:3a:47:a1:23:55:5e:fb:b5:9c:47: cd:4e:35:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPZVK3cvjDiozoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk M2RjYTEzZGEtZmNmNS00M2ZlLThiNGYtNGQ4MzgwYzU0YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNAoUBAevVvP4pjEvyTIkmafuqEalPtxCFOu yA2GkvQrDwJiBQ5ygQW2ydFWWWDHVXnF/gtKdf8EcLJYp2Om11YQUO+1TpcJC9Rv uux8EKnkOvs8Erto0HhdW8Ho5nExkJhZUCOu65rjd6bB1yFLBIU47/Sw4hmz5CX+ 7oPxB3CwZd7ObnchbgHt1Y7jA1zYJM1mtg44UivwymYQnhRyv2TA78aHfRzylESJ NLhkyTzx0ZMzaSO6XTPEQxTnjoQ2zRydZihGVAH2aS/fSdmslCuTDFXkIF8TmKuR 7gqwwpiJrCx/jCT1nISIyFOmIGIIoSWLnxBnd6Giwy38A9owtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6HThrbl68qpWEhDUacl1mL3XEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjE5MzhjYTgtOGFhNi0z MGQ0LThhMmItZmIzMTUyNzkwOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ2iTnkVYC33e0b5DWaGH2WhfeYrTVnHm6X7zVcM9LCTIlFwgAhHivs yXU3NNZGPOaa2FSsCyV3BTvz0LPtHWCjGDJGD2LlUB+UwlrWx9VvavZ/qmbPSeYx 4zJqnQ+XetxgTcKMgYpLgRHPT7kPLYPQEoFvb6c6xxpCxSeC6V/zvSJlw5Xcxbru P7iWiEJMAzpFb1yX3htS/gcZ9TC01XrrsXIgYbxzS3PQkCvKB6CqfjkVZWWDff0j CelJ4OnfJAQGLzPWQZ8ru+SC4zRYEUTA7W4Mkkf1abua8F5VQI6cI09Y8F82wYPH fDnJhvU1t+T1OkehI1Ve+7WcR81ONfs= -----END CERTIFICATE-----Generated at Wed Apr 9 17:17:30 2025 by rpki-client