$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa File: 844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa (raw, json) Hash identifier: JEIpxw7un4BhE3lL0k6+NYcOa89tsbeTLcMhg5wwtsc= Subject key identifier: D0:37:1C:CB:27:55:1E:B6:CA:F4:17:39:8A:00:32:7B:89:0F:75:43 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F65870337072939723C5C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:58:70:33:70:72:93:97:23:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=c7d25adc-8bf5-4418-b7ea-0ffc99460983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:41:11:eb:df:f5:51:65:da:38:7a:ce:0d: 19:20:5e:34:91:54:fd:f9:e8:a7:42:65:c9:c1:0c: 8c:78:72:ae:ba:3f:2c:2f:cc:ed:11:12:3d:0d:cb: d5:fa:a0:56:49:0b:64:d6:0d:b3:3d:05:d7:b8:5e: 4f:a0:8e:f3:a8:56:70:dc:27:72:c0:6e:dc:9c:0f: 84:85:db:8b:44:0d:e1:9c:33:42:10:7f:a3:eb:86: ba:12:65:42:ad:cd:a8:a5:97:9f:55:76:7d:09:d1: 3c:5a:f7:61:39:8e:93:98:20:97:77:6e:e7:cb:55: 73:1c:db:cc:06:fd:cc:4c:26:28:84:97:cd:65:aa: 43:78:00:2a:70:92:57:29:f9:e0:f9:51:08:bf:66: c5:33:41:93:b8:0c:c9:f2:29:c3:e0:fd:cd:dc:34: f0:8e:ac:e8:ec:36:0b:b7:23:0b:48:c9:76:c2:f5: 28:a5:38:6c:6e:29:27:cd:18:11:41:d2:a5:b3:0a: 8c:70:1d:5b:07:7d:c0:96:08:6a:6d:43:d3:78:45: 41:e2:d8:50:5d:34:ad:38:ff:2d:fe:b2:20:aa:2e: 29:ba:e4:45:42:8c:2e:d6:82:6b:a5:14:d5:cc:70: 79:86:29:f6:e9:22:cf:6b:2c:89:f6:fe:ff:55:94: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:1C:CB:27:55:1E:B6:CA:F4:17:39:8A:00:32:7B:89:0F:75:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:33:ff:da:eb:ad:0f:8b:ef:7b:98:c5:25:1f:83:e3:3b:3d: 50:b2:9b:bd:a4:49:5c:ed:2a:82:41:08:aa:ee:f7:d0:4d:32: 13:1e:6b:4e:22:88:67:b3:7c:a8:96:eb:06:32:86:bd:ea:c7: 4b:80:11:b9:de:ef:fe:b1:bf:21:f8:08:46:40:9a:b4:da:95: 02:32:ea:d2:a3:d6:50:65:af:6a:c7:96:cc:8c:d9:55:75:fa: e6:4e:48:cd:24:47:a4:ea:50:b9:8a:98:f8:0c:91:f6:73:1f: 8d:c3:6e:54:b3:14:d1:cc:88:1a:61:1f:d9:e1:65:b6:ee:47: 86:0c:62:14:81:7e:52:35:e1:9e:4a:24:c5:ba:22:d3:1c:5a: 2c:42:fd:4d:6c:56:2a:6f:83:4a:c5:63:86:65:cc:96:9e:b9: f1:26:bd:db:75:b9:57:0b:98:c1:e0:1f:0c:96:56:2a:c9:61: fc:fc:c6:a5:7f:41:c1:51:26:d2:43:d7:7f:fb:5f:ba:0a:ad: 95:01:1c:dd:8d:b3:ce:84:49:cc:d3:dc:d2:ba:7f:46:78:d3: cf:6a:e9:a3:c0:dc:57:93:f3:28:56:57:c5:26:e3:15:40:a3: 91:94:90:ba:be:06:08:d0:da:14:e8:80:2e:b4:97:bc:d7:4a: f0:a7:0c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lhwM3Byk5cjxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk YzdkMjVhZGMtOGJmNS00NDE4LWI3ZWEtMGZmYzk5NDYwOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cpBEevf9VFl2jh6zg0ZIF40kVT9+einQmXJ wQyMeHKuuj8sL8ztERI9DcvV+qBWSQtk1g2zPQXXuF5PoI7zqFZw3CdywG7cnA+E hduLRA3hnDNCEH+j64a6EmVCrc2opZefVXZ9CdE8WvdhOY6TmCCXd27ny1VzHNvM Bv3MTCYohJfNZapDeAAqcJJXKfng+VEIv2bFM0GTuAzJ8inD4P3N3DTwjqzo7DYL tyMLSMl2wvUopThsbiknzRgRQdKlswqMcB1bB33AlghqbUPTeEVB4thQXTStOP8t /rIgqi4puuRFQowu1oJrpRTVzHB5hin26SLPayyJ9v7/VZSyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA3HMsnVR62yvQXOYoAMnuJD3VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODQ0ZWVlNWMtODhhNi0z ZDNkLWFiZTktODU5ZWE5Y2YxNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8z/9rrrQ+L73uYxSUfg+M7PVCym72kSVztKoJBCKru99BNMhMea04i iGezfKiW6wYyhr3qx0uAEbne7/6xvyH4CEZAmrTalQIy6tKj1lBlr2rHlsyM2VV1 +uZOSM0kR6TqULmKmPgMkfZzH43DblSzFNHMiBphH9nhZbbuR4YMYhSBflI14Z5K JMW6ItMcWixC/U1sVipvg0rFY4ZlzJaeufEmvdt1uVcLmMHgHwyWVirJYfz8xqV/ QcFRJtJD13/7X7oKrZUBHN2Ns86ESczT3NK6f0Z4089q6aPA3FeT8yhWV8Um4xVA o5GUkLq+BgjQ2hTogC60l7zXSvCnDHo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:54 2025 by rpki-client