$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/624a30c1-8eda-3b42-9b89-8096cc0ae0f9.roa File: 624a30c1-8eda-3b42-9b89-8096cc0ae0f9.roa (raw, json) Hash identifier: DpkU5S1MdWQIeXDGM3PCVI/1gQ6ltcYtOMW7aeJOXKs= Subject key identifier: 2A:BC:4C:EC:4B:1F:87:28:C0:55:B8:34:70:95:B1:5C:3C:67:CD:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBADAB9346E3DF01434F80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/624a30c1-8eda-3b42-9b89-8096cc0ae0f9.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ad:ab:93:46:e3:df:01:43:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=642dc532-5e25-4fc3-a8a8-66ad28ccfaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:fe:7b:d0:20:a9:88:1b:9a:9e:b8:f8:83: a7:56:19:4a:44:e7:8f:78:76:6e:d4:ed:8b:70:06: 9e:f9:b4:a9:bd:7b:b3:27:e9:3f:e6:f5:d4:f6:41: fb:2f:ad:4d:cf:a6:97:0c:9d:ec:be:da:8f:c3:be: b3:00:96:76:f4:bc:1d:80:d9:25:1e:b2:47:07:3d: 80:96:87:63:0e:24:8b:07:fe:3a:bd:d7:e6:7b:9c: 83:c8:db:81:ba:7e:29:98:29:0e:ce:e1:13:19:5d: c6:05:d4:ca:4f:29:ae:fd:37:db:09:4d:a2:5d:45: 56:b7:6b:4f:59:8d:78:83:2a:d8:9b:ca:84:e3:d6: 26:d2:6f:03:c8:ab:74:89:c2:b5:ca:9d:ab:5f:f5: fc:fe:51:4a:f6:99:42:ed:52:7e:e0:0b:56:66:b8: df:b7:4e:94:f4:bb:7e:34:7f:a6:4d:31:a7:36:f8: c7:61:f6:f7:9c:08:e3:fd:5a:7b:c2:a6:12:d8:09: 41:60:34:9d:06:5f:87:58:bb:41:50:a5:6d:12:42: 3a:49:68:7d:51:8c:3d:44:bc:1e:71:cc:cd:59:ce: 7b:20:a5:60:b5:2c:ec:98:3e:bb:7f:3f:ce:84:49: 9d:fd:eb:79:b7:ec:4b:c2:a8:29:97:8a:34:23:aa: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:4C:EC:4B:1F:87:28:C0:55:B8:34:70:95:B1:5C:3C:67:CD:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/624a30c1-8eda-3b42-9b89-8096cc0ae0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:1a:86:55:0a:22:da:bf:4b:e9:18:2f:81:66:1f:34:0e:92: a1:ab:fc:13:69:a5:2b:78:20:26:09:cf:fb:87:b0:bb:f5:a5: a2:ff:ff:d4:10:8d:82:bb:43:e0:ee:1d:24:1c:4c:65:01:a2: 07:e4:74:43:6d:c3:0f:fb:5d:02:19:9d:d1:21:7d:5c:31:ad: f5:53:fc:67:06:2e:98:61:6a:51:3a:b7:fc:48:30:b5:c8:78: 62:a0:6d:13:71:af:d6:5e:16:b1:f4:46:4a:ab:69:6f:d2:9f: 6e:84:a4:1b:16:4d:45:3d:64:a7:66:65:32:14:be:55:7e:84: db:a3:c0:2b:cc:61:eb:8b:1c:7a:80:64:d1:a4:b3:84:c2:98: 08:63:11:22:3c:d8:85:d1:69:8f:21:ca:2a:28:ac:51:bd:3b: 3b:c5:a6:54:0c:3c:2b:de:15:99:71:05:fb:59:2e:cb:e8:f1: e7:23:ee:7a:f1:21:12:31:80:a6:87:9c:30:48:0c:a0:36:8a: 4f:6f:cb:01:59:9a:38:29:b6:1e:f8:1b:33:b4:14:4f:84:e9: ea:08:58:26:11:f3:db:52:19:a7:f0:b6:4a:75:1a:5b:c6:2b: 78:0a:a5:67:e6:cd:aa:2a:5a:9c:8f:f2:88:75:41:f2:d8:18: e1:b7:ad:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/662rk0bj3wFDT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NjQyZGM1MzItNWUyNS00ZmMzLWE4YTgtNjZhZDI4Y2NmYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjz+e9AgqYgbmp64+IOnVhlKROePeHZu1O2L cAae+bSpvXuzJ+k/5vXU9kH7L61Nz6aXDJ3svtqPw76zAJZ29LwdgNklHrJHBz2A lodjDiSLB/46vdfme5yDyNuBun4pmCkOzuETGV3GBdTKTymu/TfbCU2iXUVWt2tP WY14gyrYm8qE49Ym0m8DyKt0icK1yp2rX/X8/lFK9plC7VJ+4AtWZrjft06U9Lt+ NH+mTTGnNvjHYfb3nAjj/Vp7wqYS2AlBYDSdBl+HWLtBUKVtEkI6SWh9UYw9RLwe cczNWc57IKVgtSzsmD67fz/OhEmd/et5t+xLwqgpl4o0I6pnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq8TOxLH4cowFW4NHCVsVw8Z81GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjI0YTMwYzEtOGVkYS0z YjQyLTliODktODA5NmNjMGFlMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMahlUKItq/S+kYL4FmHzQOkqGr/BNppSt4ICYJz/uHsLv1paL//9QQ jYK7Q+DuHSQcTGUBogfkdENtww/7XQIZndEhfVwxrfVT/GcGLphhalE6t/xIMLXI eGKgbRNxr9ZeFrH0RkqraW/Sn26EpBsWTUU9ZKdmZTIUvlV+hNujwCvMYeuLHHqA ZNGks4TCmAhjESI82IXRaY8hyioorFG9OzvFplQMPCveFZlxBftZLsvo8ecj7nrx IRIxgKaHnDBIDKA2ik9vywFZmjgpth74GzO0FE+E6eoIWCYR89tSGafwtkp1GlvG K3gKpWfmzaoqWpyP8oh1QfLYGOG3res= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:49 2025 by rpki-client