$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa File: 83c450cc-3e54-3c73-98a9-5550187b1d91.roa (raw, json) Hash identifier: 9gxtVZspKVyZ6hyaqItUBavFcLQ6DFtLa3Xf9S1Xi7Q= Subject key identifier: F0:99:73:9C:91:B5:F1:AA:2C:41:FF:7B:97:C9:6B:59:63:4A:94:84 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2B9B74AC6A15007696CE40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9b:74:ac:6a:15:00:76:96:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=3726818f-c321-4520-afa2-1ad160b7c7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:ee:14:21:0f:ef:82:6b:a9:9d:ea:2d:19: 7d:d8:38:8d:e7:98:5c:af:6a:20:02:77:32:2d:aa: 8c:9d:37:12:62:dd:9e:89:5e:8f:8c:d5:45:16:08: 43:6b:0d:14:d3:85:a4:92:5d:c6:0c:2d:fc:6e:bd: ac:0d:f1:da:8b:f8:08:de:d1:8a:21:50:d7:7d:75: 4a:c0:b0:09:aa:f9:47:06:3c:f0:3f:d1:25:62:d7: 26:2c:0a:85:8d:c3:37:9f:5f:1e:ce:c1:e9:9d:fc: 45:8f:df:08:86:b9:1f:82:8a:20:9c:19:04:a6:25: 1c:e6:f3:71:62:7e:93:ac:85:0d:98:13:1d:42:f3: db:3a:aa:06:ce:63:c9:52:ae:fb:f9:71:13:5a:3c: 68:45:89:a1:c2:7e:50:1a:dc:0d:58:ff:b1:9c:3c: 86:84:fb:99:26:1a:6f:d6:b4:0a:37:44:30:ca:85: 6f:04:1d:64:68:80:71:bd:a0:1b:d8:f9:0d:93:95: ce:3c:d5:66:70:4e:51:37:6c:a6:44:fa:55:56:3b: 51:38:17:bd:bd:c2:9c:fe:bb:9e:63:65:13:4e:14: 9f:85:80:35:54:45:74:a7:58:91:b1:2a:9e:66:95: 48:08:f9:0a:72:7e:60:23:8c:0f:62:03:3d:8f:b4: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:99:73:9C:91:B5:F1:AA:2C:41:FF:7B:97:C9:6B:59:63:4A:94:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:fb:81:32:b3:38:f9:29:82:fb:58:b0:8b:66:56:8f:6d:b4: ac:d8:db:78:24:a7:a7:b6:1d:d5:97:04:5a:fa:ea:27:30:dd: d9:a3:fc:7e:82:7d:5f:0b:39:9b:d5:40:54:f2:1c:69:5d:54: e5:a0:83:9e:b0:c9:0f:1c:b2:95:9f:35:a2:a4:09:f0:d9:28: c7:97:09:3b:cd:b9:bd:31:30:6c:2d:79:84:2e:f3:69:75:1d: b9:c7:40:a7:44:f8:56:29:e4:65:f3:1f:74:8c:f8:89:a1:fe: b5:98:91:02:35:48:42:f5:9a:bd:97:ae:c1:ec:f3:91:97:54: 8b:43:d7:56:83:4c:b7:44:63:f0:e4:83:52:84:1b:a9:06:b9: c9:24:d4:11:da:40:df:3c:2a:59:de:15:a8:66:39:9d:92:3f: 26:8d:7f:1a:74:86:00:87:fd:01:55:b4:47:50:b7:50:5f:79: 64:1e:88:b5:cd:66:96:b3:4b:0c:b0:d3:ed:6b:62:6b:9e:b0: d5:8f:e1:d6:43:a5:d5:1f:fb:fc:48:09:e2:c0:90:83:0e:bf: a6:2b:9b:73:d1:4e:d9:3c:c3:58:1a:20:76:40:b6:3c:9a:87: 30:35:13:97:1e:35:76:1d:e3:54:62:f8:2c:0e:0c:ba:51:ce: ae:36:8b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5t0rGoVAHaWzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MzcyNjgxOGYtYzMyMS00NTIwLWFmYTItMWFkMTYwYjdjN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0juFCEP74JrqZ3qLRl92DiN55hcr2ogAncy LaqMnTcSYt2eiV6PjNVFFghDaw0U04Wkkl3GDC38br2sDfHai/gI3tGKIVDXfXVK wLAJqvlHBjzwP9ElYtcmLAqFjcM3n18ezsHpnfxFj98IhrkfgoognBkEpiUc5vNx Yn6TrIUNmBMdQvPbOqoGzmPJUq77+XETWjxoRYmhwn5QGtwNWP+xnDyGhPuZJhpv 1rQKN0QwyoVvBB1kaIBxvaAb2PkNk5XOPNVmcE5RN2ymRPpVVjtROBe9vcKc/rue Y2UTThSfhYA1VEV0p1iRsSqeZpVICPkKcn5gI4wPYgM9j7Qm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCZc5yRtfGqLEH/e5fJa1ljSpSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODNjNDUwY2MtM2U1NC0z YzczLTk4YTktNTU1MDE4N2IxZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf7gTKzOPkpgvtYsItmVo9ttKzY23gkp6e2HdWXBFr66icw3dmj/H6C fV8LOZvVQFTyHGldVOWgg56wyQ8cspWfNaKkCfDZKMeXCTvNub0xMGwteYQu82l1 HbnHQKdE+FYp5GXzH3SM+Imh/rWYkQI1SEL1mr2XrsHs85GXVItD11aDTLdEY/Dk g1KEG6kGuckk1BHaQN88KlneFahmOZ2SPyaNfxp0hgCH/QFVtEdQt1BfeWQeiLXN ZpazSwyw0+1rYmuesNWP4dZDpdUf+/xICeLAkIMOv6Yrm3PRTtk8w1gaIHZAtjya hzA1E5ceNXYd41Ri+CwODLpRzq42i/M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:45 2025 by rpki-client