$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b097fab-6ac3-3ab8-81d3-ed969203a443.roa File: 7b097fab-6ac3-3ab8-81d3-ed969203a443.roa (raw, json) Hash identifier: zX6UqiuhcL1Ok8zDCLIYQfFUewwajRlTE/h3u2Sa+1Y= Subject key identifier: 6A:99:7F:BF:6D:D3:24:92:59:90:6E:70:30:8A:E4:5A:95:F4:56:30 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E0E465C5C1FF285E1300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b097fab-6ac3-3ab8-81d3-ed969203a443.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e0:e4:65:c5:c1:ff:28:5e:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=be0c41f7-cdb7-4d9c-850f-064d8fd4468f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:29:ef:b2:bb:41:fa:a5:04:49:0a:af:6f: 47:28:5e:7c:91:25:4a:ec:49:e6:55:1a:d9:0d:08: 76:30:34:1a:e0:d7:6e:80:dd:5e:22:5e:b0:2c:1a: c5:5b:8c:d4:b9:6f:26:fa:c8:e4:c5:62:e7:5b:d1: a8:04:a0:d8:66:41:c2:3f:dc:63:41:ed:50:8d:db: 6f:35:e8:36:0b:79:2a:de:fc:ca:50:15:19:42:19: e4:b7:fe:73:e3:84:1e:c5:8f:af:fc:05:92:c8:5d: 31:da:20:70:1d:61:df:b7:48:42:a6:53:86:1d:43: c2:80:5f:4f:a1:93:c4:13:88:7b:e8:16:18:68:76: 25:8f:17:f2:1b:e4:71:c0:8c:61:8f:1a:ca:8f:99: 3d:7f:78:76:f7:a7:3b:ef:90:3f:89:42:71:e2:cd: 4e:c6:de:ba:82:f8:46:25:a2:70:76:86:12:8e:31: 9b:06:14:ca:a6:49:62:45:27:b7:0b:76:da:d9:21: 5b:7c:aa:fe:b6:43:fb:35:da:4c:c4:86:df:1f:b5: ff:29:06:9d:ac:d8:65:8b:41:8e:7c:86:15:79:fb: 20:96:26:b6:42:74:df:ad:ae:56:74:ed:bf:2a:7e: a0:f2:4b:61:d0:78:d8:ab:f7:46:57:fc:bd:35:36: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:99:7F:BF:6D:D3:24:92:59:90:6E:70:30:8A:E4:5A:95:F4:56:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b097fab-6ac3-3ab8-81d3-ed969203a443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e4:f9:f8:28:17:e4:50:33:41:e4:46:9c:a3:35:c7:d1:ef: 85:8d:d5:60:6e:40:ed:d6:08:ed:64:8e:a6:28:4c:a5:67:3b: 0a:e6:86:11:51:91:cb:32:0a:f0:16:7a:e2:4a:b7:95:ed:14: 04:69:76:3a:8a:ae:ea:4e:98:85:02:fc:e9:03:56:6b:69:28: 41:36:f8:5f:2e:af:49:38:2d:82:fd:32:08:40:b8:9f:f3:95: 98:a2:95:30:c0:d8:d9:98:7c:85:b1:70:52:91:d6:f5:8c:a3: 37:39:a7:c6:df:c1:3e:cc:72:37:c7:9b:2e:e7:1a:3d:17:b1: 0a:47:37:96:ef:a4:f1:1f:2e:7c:59:8c:94:0f:24:98:f2:97: 88:82:52:5f:9e:55:11:ef:ca:a3:22:4a:df:c0:a4:d1:6b:f4: 48:0f:55:51:b2:2b:7d:88:ab:82:3b:d6:46:ac:a1:a1:5d:bb: 0e:99:fe:e4:13:e6:0e:04:6a:3d:77:80:d4:c4:3a:de:9c:aa: 33:82:de:a2:44:1e:f5:b2:ab:b4:b2:a3:7c:6f:51:59:66:b0: f7:a6:30:62:aa:06:df:01:7f:73:ff:f2:58:48:59:88:dc:d4: 21:f9:b8:af:32:d6:8f:ba:f7:19:a8:46:6d:26:47:ba:e8:f0: ea:33:b6:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wODkZcXB/yheEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YmUwYzQxZjctY2RiNy00ZDljLTg1MGYtMDY0ZDhmZDQ0NjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Vwp77K7QfqlBEkKr29HKF58kSVK7EnmVRrZ DQh2MDQa4NdugN1eIl6wLBrFW4zUuW8m+sjkxWLnW9GoBKDYZkHCP9xjQe1Qjdtv Neg2C3kq3vzKUBUZQhnkt/5z44QexY+v/AWSyF0x2iBwHWHft0hCplOGHUPCgF9P oZPEE4h76BYYaHYljxfyG+RxwIxhjxrKj5k9f3h296c775A/iUJx4s1Oxt66gvhG JaJwdoYSjjGbBhTKpkliRSe3C3ba2SFbfKr+tkP7NdpMxIbfH7X/KQadrNhli0GO fIYVefsglia2QnTfra5WdO2/Kn6g8kth0HjYq/dGV/y9NTZmqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqZf79t0ySSWZBucDCK5FqV9FYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2IwOTdmYWItNmFjMy0z YWI4LTgxZDMtZWQ5NjkyMDNhNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvk+fgoF+RQM0HkRpyjNcfR74WN1WBuQO3WCO1kjqYoTKVnOwrmhhFR kcsyCvAWeuJKt5XtFARpdjqKrupOmIUC/OkDVmtpKEE2+F8ur0k4LYL9MghAuJ/z lZiilTDA2NmYfIWxcFKR1vWMozc5p8bfwT7McjfHmy7nGj0XsQpHN5bvpPEfLnxZ jJQPJJjyl4iCUl+eVRHvyqMiSt/ApNFr9EgPVVGyK32Iq4I71kasoaFduw6Z/uQT 5g4Eaj13gNTEOt6cqjOC3qJEHvWyq7Syo3xvUVlmsPemMGKqBt8Bf3P/8lhIWYjc 1CH5uK8y1o+69xmoRm0mR7ro8OoztkU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:58 2025 by rpki-client