$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8268b347-f1ae-3fed-9ca9-90235bfad224.roa File: 8268b347-f1ae-3fed-9ca9-90235bfad224.roa (raw, json) Hash identifier: JKfNvFXM4+lpGjWQvzvI0xT67DtTzFFlSSedxgfvt84= Subject key identifier: 45:59:6D:EC:97:72:8A:82:97:94:39:C4:64:AE:71:D7:69:D9:1B:6E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F5F7E8D6600602764280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8268b347-f1ae-3fed-9ca9-90235bfad224.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f5:f7:e8:d6:60:06:02:76:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=269f1ddc-a28b-42ed-a1ed-4a6fd7eb8b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:3d:72:55:75:2e:c8:62:db:4e:db:2c:1b: 61:db:42:71:3f:21:e5:10:3c:78:49:99:ae:89:67: c5:5a:cf:e9:98:c7:1f:90:91:d2:ed:eb:34:19:a3: ca:23:95:ab:5a:e4:9f:79:7d:96:85:e5:55:db:bc: 3a:9c:1f:c7:79:72:22:d2:71:c7:30:d1:b4:25:86: d4:ed:e9:3a:91:35:9b:97:97:7f:75:3e:1c:92:25: 35:88:43:8b:08:ec:5c:b6:27:6b:b3:53:30:6d:34: e8:c1:04:02:4c:59:64:c6:4b:00:a3:c8:23:bf:99: 0f:94:3b:38:1d:b3:e3:2a:4d:a8:38:f5:b7:5d:bd: c6:98:59:d8:12:25:67:60:9f:46:37:31:ba:6c:47: 48:b4:64:fa:ef:74:24:16:8f:c0:67:be:ac:de:0c: c9:15:be:b4:fe:58:48:bd:1e:30:0a:6d:cb:36:28: 9a:93:1e:c3:a0:95:41:22:8b:02:82:0e:47:50:e5: 98:3e:5f:a4:b9:6e:0b:4f:37:e7:b4:f0:e2:07:89: c6:9c:34:91:70:94:ba:51:91:4a:2b:75:a7:8a:a9: f2:bf:0f:17:f4:f2:42:54:55:e0:af:05:f8:4c:db: a8:8f:e9:39:5e:fb:c1:b2:e5:cc:46:9b:2c:b0:65: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:59:6D:EC:97:72:8A:82:97:94:39:C4:64:AE:71:D7:69:D9:1B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8268b347-f1ae-3fed-9ca9-90235bfad224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:46:93:46:6c:a9:b1:e7:33:45:89:49:ca:2d:6b:4b:a8:76: 8a:1e:d4:21:e6:4a:f2:1a:4d:72:93:70:76:0f:c0:33:c4:9c: 87:e1:19:e8:7c:88:92:33:0c:3a:2b:0d:2b:c2:ab:7a:85:b9: 3b:7b:4e:43:c5:ab:ef:3d:b8:6d:ce:c1:03:00:e1:df:60:eb: fb:c9:73:34:89:b0:64:b3:ce:29:14:ef:1e:ca:2b:b1:6d:6c: 90:01:ad:1f:27:56:1f:39:4b:0a:89:ee:9a:85:fb:5c:94:86: cb:d2:f4:82:95:fd:91:40:26:fd:a8:2e:0b:c4:37:fe:c3:f1: fd:23:ae:9c:54:31:02:65:9c:9f:5c:21:b8:08:a1:47:59:4f: 40:6a:e8:06:9f:9f:c0:83:f0:98:84:5d:26:8a:a0:ca:fa:da: db:89:a7:21:67:b5:f5:db:1a:42:bd:1c:85:31:8f:44:c6:31: 50:7d:4a:c5:c7:0c:18:c4:8e:f3:02:9e:c9:7c:80:d6:12:0d: a8:52:40:cb:d7:44:b8:63:27:13:e9:77:d9:a6:15:e3:cd:a9: 9f:8e:35:d6:db:4f:de:0d:43:35:c5:5a:67:e7:43:28:68:0c: 7c:fe:7b:e3:1a:ff:a4:b8:de:b0:23:2a:b0:80:bc:b5:63:8a: 64:5a:55:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPX36NZgBgJ2QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk MjY5ZjFkZGMtYTI4Yi00MmVkLWExZWQtNGE2ZmQ3ZWI4YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYs9clV1Lshi207bLBth20JxPyHlEDx4SZmu iWfFWs/pmMcfkJHS7es0GaPKI5WrWuSfeX2WheVV27w6nB/HeXIi0nHHMNG0JYbU 7ek6kTWbl5d/dT4ckiU1iEOLCOxctidrs1MwbTTowQQCTFlkxksAo8gjv5kPlDs4 HbPjKk2oOPW3Xb3GmFnYEiVnYJ9GNzG6bEdItGT673QkFo/AZ76s3gzJFb60/lhI vR4wCm3LNiiakx7DoJVBIosCgg5HUOWYPl+kuW4LTzfntPDiB4nGnDSRcJS6UZFK K3Wniqnyvw8X9PJCVFXgrwX4TNuoj+k5XvvBsuXMRpsssGUUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVZbeyXcoqCl5Q5xGSucddp2RtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODI2OGIzNDctZjFhZS0z ZmVkLTljYTktOTAyMzViZmFkMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJGk0ZsqbHnM0WJScota0uodooe1CHmSvIaTXKTcHYPwDPEnIfhGeh8 iJIzDDorDSvCq3qFuTt7TkPFq+89uG3OwQMA4d9g6/vJczSJsGSzzikU7x7KK7Ft bJABrR8nVh85SwqJ7pqF+1yUhsvS9IKV/ZFAJv2oLgvEN/7D8f0jrpxUMQJlnJ9c IbgIoUdZT0Bq6Aafn8CD8JiEXSaKoMr62tuJpyFntfXbGkK9HIUxj0TGMVB9SsXH DBjEjvMCnsl8gNYSDahSQMvXRLhjJxPpd9mmFePNqZ+ONdbbT94NQzXFWmfnQyho DHz+e+Ma/6S43rAjKrCAvLVjimRaVVU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:55 2025 by rpki-client