$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7152bc9d-d4cf-36e5-848f-07f63e64bd12.roa File: 7152bc9d-d4cf-36e5-848f-07f63e64bd12.roa (raw, json) Hash identifier: Ahg5H+CAG5GL7mp0X+vOr92jLE2NYuPh4DwAhWhg24o= Subject key identifier: F1:50:50:5A:78:52:9A:E7:98:39:10:6E:74:FB:83:4E:4D:53:76:84 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F658D2DED65F15A7B501C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7152bc9d-d4cf-36e5-848f-07f63e64bd12.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:58:d2:de:d6:5f:15:a7:b5:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=7fb68841-dc23-42ed-89dd-388094eb9b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f6:55:21:76:74:88:b1:50:2c:58:96:3a:04: d7:f8:29:7d:27:af:17:d2:39:6c:0e:29:be:f0:5d: bb:3a:14:7f:3d:37:59:ea:d0:8c:46:84:74:5c:73: e6:e9:ac:9f:e7:c1:7a:f4:07:b8:a8:ef:94:90:d2: 61:a0:99:5d:73:df:c6:7f:57:16:15:ba:04:a9:7b: 40:b3:41:44:bb:19:05:2a:24:be:ca:e9:bf:01:e7: 7a:d8:31:ea:f0:31:db:03:62:09:2c:17:d7:3f:33: ee:19:a5:df:c1:37:c8:5c:d2:18:4b:a5:21:29:a9: 92:ea:0f:4d:95:85:36:26:33:da:34:d3:eb:28:b5: 0a:89:97:f2:2b:b5:7f:90:59:a2:d2:dd:06:c7:9b: d7:3e:54:66:6b:89:8d:de:98:49:71:91:53:e7:56: a4:8b:35:f8:50:a3:20:9d:75:eb:7e:59:12:2a:cc: 55:9b:b6:5c:63:fe:b0:f7:cb:71:eb:9b:17:90:fb: be:43:28:e7:be:7d:7e:03:7a:8c:62:1a:02:f3:40: f7:1a:1c:64:37:65:8f:31:53:55:83:b3:3d:fd:71: b1:99:2f:7c:24:13:bb:9b:6c:9c:e4:ce:d7:b0:73: d9:32:86:2c:a6:34:4f:13:b3:cc:da:59:ad:9d:b6: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:50:5A:78:52:9A:E7:98:39:10:6E:74:FB:83:4E:4D:53:76:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7152bc9d-d4cf-36e5-848f-07f63e64bd12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:80:2b:10:b3:61:e1:48:33:06:49:7a:ee:0c:5c:16:84:36: b4:9c:a7:55:c6:12:c7:d3:e1:63:4b:2f:1e:5e:80:d8:34:51: 05:41:3d:6d:65:e7:6f:bf:ad:b2:6e:80:2b:98:0b:3f:bf:f7: 11:8e:5b:99:0b:77:83:16:0a:0b:ea:c8:04:6a:92:c6:48:36: 7c:48:62:40:b8:8a:c3:78:43:55:b0:54:18:43:6f:09:22:d3: 88:80:4c:33:f2:00:aa:bf:fa:b8:bc:f7:c0:90:8d:23:e1:35: a2:7b:3d:cc:7f:e2:0e:be:f9:0c:e4:9b:d2:00:91:28:c9:6b: ba:e6:9f:05:9a:5f:76:e2:e8:04:63:80:8a:b5:01:bb:c3:8f: 56:95:9a:9e:7f:90:f9:be:71:18:be:fa:56:6c:ad:d4:bd:36: f3:84:d0:8f:2d:8c:28:75:16:e7:6c:73:64:b4:2a:1f:18:12: 04:9d:53:1d:74:62:07:f8:39:da:d4:b2:83:08:da:95:fb:3a: 43:05:dd:10:18:09:47:ec:21:1a:d8:9b:81:9c:34:9e:57:9d: a6:ae:32:18:01:bf:c9:17:9c:9f:1a:9e:8a:79:9c:e2:ca:04: a0:6f:f6:b4:7e:e2:6d:64:e8:4d:1e:ed:1e:dc:f7:7b:ee:c3: 11:17:e9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ljS3tZfFae1AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk N2ZiNjg4NDEtZGMyMy00MmVkLTg5ZGQtMzg4MDk0ZWI5YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvZVIXZ0iLFQLFiWOgTX+Cl9J68X0jlsDim+ 8F27OhR/PTdZ6tCMRoR0XHPm6ayf58F69Ae4qO+UkNJhoJldc9/Gf1cWFboEqXtA s0FEuxkFKiS+yum/Aed62DHq8DHbA2IJLBfXPzPuGaXfwTfIXNIYS6UhKamS6g9N lYU2JjPaNNPrKLUKiZfyK7V/kFmi0t0Gx5vXPlRma4mN3phJcZFT51akizX4UKMg nXXrflkSKsxVm7ZcY/6w98tx65sXkPu+Qyjnvn1+A3qMYhoC80D3GhxkN2WPMVNV g7M9/XGxmS98JBO7m2yc5M7XsHPZMoYspjRPE7PM2lmtnbarXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFQUFp4UprnmDkQbnT7g05NU3aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzE1MmJjOWQtZDRjZi0z NmU1LTg0OGYtMDdmNjNlNjRiZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGAKxCzYeFIMwZJeu4MXBaENrScp1XGEsfT4WNLLx5egNg0UQVBPW1l 52+/rbJugCuYCz+/9xGOW5kLd4MWCgvqyARqksZINnxIYkC4isN4Q1WwVBhDbwki 04iATDPyAKq/+ri898CQjSPhNaJ7Pcx/4g6++Qzkm9IAkSjJa7rmnwWaX3bi6ARj gIq1AbvDj1aVmp5/kPm+cRi++lZsrdS9NvOE0I8tjCh1Fudsc2S0Kh8YEgSdUx10 Ygf4OdrUsoMI2pX7OkMF3RAYCUfsIRrYm4GcNJ5XnaauMhgBv8kXnJ8anop5nOLK BKBv9rR+4m1k6E0e7R7c93vuwxEX6Yk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:19 2025 by rpki-client