$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61b5aeca-f745-3afe-8096-ed52fbc47925.roa File: 61b5aeca-f745-3afe-8096-ed52fbc47925.roa (raw, json) Hash identifier: iRS5m90tkLtnSc9QsuwYVrT1d19Ug1HvcG2AWFXW7n0= Subject key identifier: AD:1B:04:D4:45:E2:64:E5:44:2A:CD:29:B5:8E:27:5B:E0:FC:F2:4D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DBC9E7F17BE2403DCA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61b5aeca-f745-3afe-8096-ed52fbc47925.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:db:c9:e7:f1:7b:e2:40:3d:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=3bab0025-35ce-452a-9afe-363d15088a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:a0:01:3e:e7:88:28:80:de:b3:ba:62:61: dd:9f:e8:00:67:1e:65:13:a8:25:4e:3f:c0:0e:19: 7f:b5:f2:2e:c1:69:ce:3b:e7:be:e3:ba:37:a7:5a: 91:c3:a9:9d:4b:89:8c:a5:61:46:3e:88:e7:3a:fb: 28:b5:7c:24:b1:2a:df:a0:fb:ef:3a:41:de:73:d8: 08:a8:6b:df:75:6f:30:bf:bd:f9:8e:82:02:34:96: cc:86:5e:11:ce:19:4a:01:8c:36:c2:ea:01:15:65: ee:d6:fe:7e:45:34:5f:2d:63:b0:56:a5:33:ad:75: 12:70:28:1c:bb:d8:60:45:fa:47:ee:70:db:1d:90: 83:92:70:fc:53:f7:8f:a8:b1:59:b7:5e:7f:34:b3: d2:53:49:53:cd:d6:65:12:83:d6:5c:58:15:ca:94: 83:be:ad:d4:3e:9a:c0:16:db:d4:00:df:1b:97:47: f6:58:c2:b2:ef:d9:82:90:71:34:fa:84:7a:8f:76: 7f:0c:98:16:33:d2:a1:2f:16:24:2f:af:e3:2e:c9: 41:37:9d:b3:39:96:27:44:5d:e5:81:83:a7:ee:21: 12:4c:63:50:b9:80:12:6a:5b:af:c0:cc:c5:dc:21: c6:85:4e:89:e7:57:a3:ac:b1:5c:6b:dd:fc:4d:32: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1B:04:D4:45:E2:64:E5:44:2A:CD:29:B5:8E:27:5B:E0:FC:F2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61b5aeca-f745-3afe-8096-ed52fbc47925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ee:82:2e:86:01:ed:fc:69:ad:4d:91:5b:af:2b:f6:03:32: f7:de:e1:10:9d:48:13:af:77:fc:10:b2:13:44:d9:46:4e:5e: 25:6d:f0:f2:1a:85:52:a3:11:8e:25:96:34:80:f9:8a:da:b9: ce:1a:7c:74:10:91:a8:20:c0:42:70:a5:9a:f9:65:8d:73:93: 8f:b0:47:65:b7:99:19:6c:3c:86:88:b5:0f:a8:65:a4:1a:65: c3:d5:d5:e5:61:2b:c2:bf:03:56:ab:e9:14:5c:8a:a6:5d:b2: 06:d6:15:bd:f5:21:f3:ed:f5:57:93:b8:ab:89:87:74:46:65: 06:54:46:c9:83:85:cd:6d:df:64:bc:97:d7:ae:b2:63:36:10: dd:62:bf:f3:ec:98:4f:a3:06:7d:df:33:b4:30:43:76:fb:05: f8:d6:43:c2:c0:0f:61:7a:bf:d6:92:a1:92:e9:d7:ef:7d:fb: a0:cf:ef:ce:83:e9:0b:9b:50:4f:12:bd:f1:0d:10:a6:4e:93: 31:24:27:01:d1:3b:d5:d5:2c:ff:5e:46:e7:14:db:d7:86:38: fd:13:57:a6:89:68:93:a6:6c:27:34:e8:58:0f:e2:52:3b:c8: 87:a6:e2:a8:d6:aa:c0:63:c0:5d:44:a5:dc:55:14:71:6a:a1: 78:fe:e2:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNvJ5/F74kA9ygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk M2JhYjAwMjUtMzVjZS00NTJhLTlhZmUtMzYzZDE1MDg4YTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOKgAT7niCiA3rO6YmHdn+gAZx5lE6glTj/A Dhl/tfIuwWnOO+e+47o3p1qRw6mdS4mMpWFGPojnOvsotXwksSrfoPvvOkHec9gI qGvfdW8wv735joICNJbMhl4RzhlKAYw2wuoBFWXu1v5+RTRfLWOwVqUzrXUScCgc u9hgRfpH7nDbHZCDknD8U/ePqLFZt15/NLPSU0lTzdZlEoPWXFgVypSDvq3UPprA FtvUAN8bl0f2WMKy79mCkHE0+oR6j3Z/DJgWM9KhLxYkL6/jLslBN52zOZYnRF3l gYOn7iESTGNQuYASaluvwMzF3CHGhU6J51ejrLFca938TTKf0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0bBNRF4mTlRCrNKbWOJ1vg/PJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjFiNWFlY2EtZjc0NS0z YWZlLTgwOTYtZWQ1MmZiYzQ3OTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbugi6GAe38aa1NkVuvK/YDMvfe4RCdSBOvd/wQshNE2UZOXiVt8PIa hVKjEY4lljSA+Yrauc4afHQQkaggwEJwpZr5ZY1zk4+wR2W3mRlsPIaItQ+oZaQa ZcPV1eVhK8K/A1ar6RRciqZdsgbWFb31IfPt9VeTuKuJh3RGZQZURsmDhc1t32S8 l9eusmM2EN1iv/PsmE+jBn3fM7QwQ3b7BfjWQ8LAD2F6v9aSoZLp1+99+6DP786D 6QubUE8SvfENEKZOkzEkJwHRO9XVLP9eRucU29eGOP0TV6aJaJOmbCc06FgP4lI7 yIem4qjWqsBjwF1EpdxVFHFqoXj+4l0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:59:24 2025 by rpki-client