$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73b608f3-99c9-3456-b02e-041a48f7c91a.roa File: 73b608f3-99c9-3456-b02e-041a48f7c91a.roa (raw, json) Hash identifier: EhBdQv6UzN0EHapUnN61rQY/82lsDMJzeIgL1WGxDgk= Subject key identifier: 9B:43:26:76:E2:5E:7A:2D:C1:0C:D5:B3:A7:60:D5:F6:57:79:F7:DF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBBFBDE102D0C2F4DA4B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73b608f3-99c9-3456-b02e-041a48f7c91a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:bf:bd:e1:02:d0:c2:f4:da:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=bf04ea32-f949-459b-a229-8c996e6f21ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:91:92:3f:c4:77:7f:87:b5:ae:85:af:75:83: 0a:9c:58:91:85:fd:39:83:69:44:e1:18:43:14:4d: da:2c:3e:72:46:c0:4b:d5:e4:21:6f:00:2e:8b:ac: 40:3a:70:95:ab:5b:0b:5b:e2:81:c7:6e:77:0b:8b: 57:4b:59:23:e6:92:9e:85:ec:b2:d0:d3:2c:47:42: bd:d7:19:60:0b:bc:f0:1b:5e:10:b7:aa:72:52:b5: 8c:5c:1e:df:f2:bc:67:87:55:1e:86:4f:f1:33:18: bc:f9:98:dd:c2:41:46:44:26:fc:fd:b7:de:34:d7: f6:4b:da:76:54:cc:d1:af:a0:f6:e2:2f:c0:be:11: 74:17:7a:b8:dc:4c:2d:17:5b:c3:73:51:73:96:14: d2:cc:52:e4:24:9c:17:e4:42:9d:60:04:47:fc:df: 47:f6:a0:f5:dd:73:7d:6b:96:d7:9b:2a:51:89:86: 64:09:ab:77:57:44:cc:ba:3e:15:e1:4e:4b:ed:b1: 45:57:2b:b8:38:27:18:53:a7:14:ce:7a:88:47:19: 08:34:05:7a:7b:ac:45:5b:38:96:4e:7a:51:cc:21: 9c:dc:e8:0d:6d:73:3c:39:c6:05:40:8d:e1:5b:8c: cd:f0:62:bd:37:91:f2:a7:b8:41:d7:4d:05:7c:a6: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:26:76:E2:5E:7A:2D:C1:0C:D5:B3:A7:60:D5:F6:57:79:F7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73b608f3-99c9-3456-b02e-041a48f7c91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:0b:bf:40:f5:75:d4:3d:ac:67:dc:19:39:e4:67:82:cb:5b: a6:d0:a6:6b:d0:3c:e0:83:a8:fa:42:b3:32:04:b5:08:2d:50: c5:ae:e1:96:64:e4:e5:76:f1:3f:71:58:fa:f6:e2:7a:d8:7c: d0:3e:cd:d6:f7:84:7a:4e:f0:b0:8c:d9:37:19:f3:39:94:48: d6:e3:9e:9e:7d:67:96:b9:37:08:77:af:1a:2f:42:32:a9:c8: f6:e6:fd:20:e3:ae:b2:f6:4f:39:bb:67:fd:e8:72:8e:df:b6: d4:15:38:70:5e:f1:80:46:30:cd:86:fc:97:d8:53:20:81:26: 6a:e9:d8:87:54:c2:06:3c:06:fe:af:b1:7c:08:e5:33:ef:68: d6:dc:30:97:51:0c:74:fd:65:cc:44:a7:a8:7c:6e:8f:bd:20: 36:af:4f:57:91:b1:14:84:3b:61:9b:ff:7a:2c:19:ab:3c:51: ec:98:99:79:cb:9f:ef:86:7b:62:6c:ff:9c:d5:a8:69:df:57: 0a:da:1d:94:41:9c:e2:c9:94:5a:49:99:b8:bd:fb:39:58:cd: 93:68:fe:11:0d:f3:ca:6d:6c:82:d4:00:e9:ba:c9:b4:45:d0: 7b:de:7b:bf:4f:55:4f:b6:5c:24:04:07:37:6f:a8:6a:8c:e3: 4d:41:f0:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67+94QLQwvTaSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YmYwNGVhMzItZjk0OS00NTliLWEyMjktOGM5OTZlNmYyMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpGSP8R3f4e1roWvdYMKnFiRhf05g2lE4RhD FE3aLD5yRsBL1eQhbwAui6xAOnCVq1sLW+KBx253C4tXS1kj5pKeheyy0NMsR0K9 1xlgC7zwG14Qt6pyUrWMXB7f8rxnh1Uehk/xMxi8+ZjdwkFGRCb8/bfeNNf2S9p2 VMzRr6D24i/AvhF0F3q43EwtF1vDc1FzlhTSzFLkJJwX5EKdYARH/N9H9qD13XN9 a5bXmypRiYZkCat3V0TMuj4V4U5L7bFFVyu4OCcYU6cUznqIRxkINAV6e6xFWziW TnpRzCGc3OgNbXM8OcYFQI3hW4zN8GK9N5Hyp7hB100FfKY6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtDJnbiXnotwQzVs6dg1fZXefffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzNiNjA4ZjMtOTljOS0z NDU2LWIwMmUtMDQxYTQ4ZjdjOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoLv0D1ddQ9rGfcGTnkZ4LLW6bQpmvQPOCDqPpCszIEtQgtUMWu4ZZk 5OV28T9xWPr24nrYfNA+zdb3hHpO8LCM2TcZ8zmUSNbjnp59Z5a5Nwh3rxovQjKp yPbm/SDjrrL2Tzm7Z/3oco7fttQVOHBe8YBGMM2G/JfYUyCBJmrp2IdUwgY8Bv6v sXwI5TPvaNbcMJdRDHT9ZcxEp6h8bo+9IDavT1eRsRSEO2Gb/3osGas8UeyYmXnL n++Ge2Js/5zVqGnfVwraHZRBnOLJlFpJmbi9+zlYzZNo/hEN88ptbILUAOm6ybRF 0Hvee79PVU+2XCQEBzdvqGqM401B8C8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:35 2025 by rpki-client