$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa File: 7085ed56-08ec-3dff-bfb2-c0a402571d39.roa (raw, json) Hash identifier: HUseKEQBjIPzEwqHH9eG90zuXDowwqh7fwZGtqcvYNw= Subject key identifier: 7E:A5:A9:B7:FD:A7:3B:6B:88:9E:E7:74:76:99:EC:6F:0C:1F:FD:83 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E0224F2516DD14D3E500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e0:22:4f:25:16:dd:14:d3:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=f2c464ec-2c19-4baa-807b-e7dc635f7b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:3f:21:f7:f2:4f:67:0d:49:47:33:81:d9: 4a:6f:8f:d7:f8:90:c7:0d:6e:07:d6:a4:17:03:69: a1:94:03:0a:36:51:2d:74:5d:45:30:6e:67:41:d2: 22:fa:6e:32:d0:ac:52:38:08:91:be:e6:25:8a:06: d9:68:4b:68:46:54:05:a1:ed:06:59:3d:1e:9f:4d: 6f:28:71:b3:c3:77:1c:a9:87:fb:22:f2:14:e6:5a: 89:e2:c5:ad:fa:f5:73:a4:c1:87:55:53:1c:23:d3: 60:a1:42:fd:c7:1c:a7:3b:e5:27:85:51:34:1d:bf: c6:ac:24:be:8f:66:91:60:b0:4d:c3:d0:df:a7:bd: 13:fd:d0:e0:db:5e:1c:f0:52:7a:a3:96:a7:73:fd: 3e:ed:85:a4:17:c6:1e:d6:97:7e:27:c8:e8:eb:cd: 0b:71:85:2e:8d:45:71:64:d7:f4:1c:ad:b5:d0:2d: 53:96:ea:c6:a9:24:9c:d2:ad:67:b1:95:61:83:56: f8:23:7d:de:9d:3a:d7:2e:0a:3c:b4:df:5c:f6:58: eb:bf:cc:d1:70:d8:28:e5:bc:41:72:7e:d4:d8:ec: ee:51:15:53:08:a4:f0:0d:cf:3a:73:29:e1:f0:74: 13:dc:83:99:0c:60:1f:01:38:71:8b:e2:dd:db:2a: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A5:A9:B7:FD:A7:3B:6B:88:9E:E7:74:76:99:EC:6F:0C:1F:FD:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7085ed56-08ec-3dff-bfb2-c0a402571d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:a4:f7:d0:b3:45:56:18:bf:97:e4:76:b4:db:3d:43:d5:d7: 0c:25:b5:33:61:7c:e2:38:08:9e:6e:fb:21:86:a1:e1:34:48: 02:ce:35:24:8c:f2:2c:c1:ee:0e:25:22:a0:f9:3e:41:7f:a5: b3:96:73:b4:49:39:34:3e:d4:5b:00:0b:18:24:f4:5d:c0:57: a2:7d:2d:3c:53:65:14:56:5f:ce:25:31:22:31:ec:32:da:f8: 54:f4:fa:21:79:88:c9:79:a3:95:e8:15:a5:18:17:69:20:f6: 6c:a2:a4:b8:da:05:54:7a:8d:fe:78:aa:dc:7f:ac:d4:45:9e: ef:76:82:55:5f:36:84:fa:ce:fa:79:a6:9c:5d:02:af:50:87: d2:3b:2b:59:4c:71:a1:4f:2c:eb:fb:cb:fd:83:60:71:43:93: c2:b2:17:26:3f:7c:ed:09:8e:58:3b:8b:94:f1:ef:8a:2a:d6: ba:59:06:32:27:68:d6:ac:1d:23:9c:d1:a6:55:1b:ed:0b:bd: 7d:86:48:ee:b3:6f:b4:23:e5:86:80:00:bb:ac:77:43:dd:e3: 52:23:50:4e:65:fa:cd:07:9d:9c:4a:f3:e8:f7:71:8c:d4:19: 82:d2:ee:9f:79:29:df:61:5f:ff:fd:f8:d3:6b:d6:9c:e6:83: 78:20:7c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOAiTyUW3RTT5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZjJjNDY0ZWMtMmMxOS00YmFhLTgwN2ItZTdkYzYzNWY3YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kU/IffyT2cNSUczgdlKb4/X+JDHDW4H1qQX A2mhlAMKNlEtdF1FMG5nQdIi+m4y0KxSOAiRvuYligbZaEtoRlQFoe0GWT0en01v KHGzw3ccqYf7IvIU5lqJ4sWt+vVzpMGHVVMcI9NgoUL9xxynO+UnhVE0Hb/GrCS+ j2aRYLBNw9Dfp70T/dDg214c8FJ6o5anc/0+7YWkF8Ye1pd+J8jo680LcYUujUVx ZNf0HK210C1TlurGqSSc0q1nsZVhg1b4I33enTrXLgo8tN9c9ljrv8zRcNgo5bxB cn7U2OzuURVTCKTwDc86cynh8HQT3IOZDGAfAThxi+Ld2yr+pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6lqbf9pztriJ7ndHaZ7G8MH/2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzA4NWVkNTYtMDhlYy0z ZGZmLWJmYjItYzBhNDAyNTcxZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIahMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGk99CzRVYYv5fkdrTbPUPV1wwltTNhfOI4CJ5u+yGGoeE0SALONSSM 8izB7g4lIqD5PkF/pbOWc7RJOTQ+1FsACxgk9F3AV6J9LTxTZRRWX84lMSIx7DLa +FT0+iF5iMl5o5XoFaUYF2kg9myipLjaBVR6jf54qtx/rNRFnu92glVfNoT6zvp5 ppxdAq9Qh9I7K1lMcaFPLOv7y/2DYHFDk8KyFyY/fO0Jjlg7i5Tx74oq1rpZBjIn aNasHSOc0aZVG+0LvX2GSO6zb7Qj5YaAALusd0Pd41IjUE5l+s0HnZxK8+j3cYzU GYLS7p95Kd9hX//9+NNr1pzmg3ggfJI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:50 2025 by rpki-client