$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/860df19e-930b-379f-98f0-7806ece0a96a.roa File: 860df19e-930b-379f-98f0-7806ece0a96a.roa (raw, json) Hash identifier: NzMJQnbuD1X5+tMSEDD/y0lL0+R79IWI4jCr85jueJI= Subject key identifier: EF:BE:30:5B:D0:AE:D4:F1:25:BA:E4:46:EC:6E:0B:25:3B:99:49:8D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F6484B3CE756442EE79C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/860df19e-930b-379f-98f0-7806ece0a96a.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 396982 IP address blocks: 104.133.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:48:4b:3c:e7:56:44:2e:e7:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=5f8f4187-defa-42d3-95bb-0b2e577f2b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:79:bb:92:54:73:c4:a1:69:10:a3:95:1e: f1:a9:52:f3:bb:1b:b0:79:28:f7:8b:30:b2:de:f4: 4b:8f:87:b5:b8:83:16:3c:e3:3c:31:8e:1a:4b:6e: a2:8c:8f:e6:19:13:76:b3:7f:00:c5:f0:fb:ca:ca: b3:ef:95:04:ef:e9:64:25:90:5f:8a:44:57:54:89: c4:19:ae:d7:90:8a:2c:80:85:ea:9f:0a:45:09:68: 4c:3b:01:5d:20:85:2b:63:e3:3a:69:d3:ff:de:7f: 9f:08:63:3f:86:3a:c8:1e:ea:68:27:f7:ad:90:33: b1:0e:13:0d:9d:a8:f7:b5:a9:7b:ad:9d:23:c4:a8: 79:bb:90:67:c9:11:80:6b:c6:1c:d8:bc:f4:75:7d: f4:7d:ac:d1:97:50:25:6d:fd:08:9c:33:a4:34:5f: 0a:98:e3:2b:09:97:af:77:7e:2b:62:db:8d:98:0e: d8:a7:1f:15:66:cf:85:aa:d5:5c:48:95:34:22:a2: 1c:4c:89:1a:27:d6:84:eb:51:85:c3:1d:3c:77:b2: 33:8e:ee:d3:94:3c:3a:5e:7f:4b:b1:b6:e2:0a:ef: 2b:33:4a:73:cf:49:73:e1:62:d9:09:8e:34:61:cb: a5:18:d6:13:1c:72:7f:a4:a1:54:9f:e6:23:6c:97: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BE:30:5B:D0:AE:D4:F1:25:BA:E4:46:EC:6E:0B:25:3B:99:49:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/860df19e-930b-379f-98f0-7806ece0a96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c0:42:88:0c:4a:35:32:80:64:04:5b:8d:86:69:4b:cf:f9: ee:12:d4:1a:c5:b1:66:20:28:03:f0:83:79:ee:2e:de:23:9b: 55:78:c8:42:6e:b3:47:b0:4f:51:76:8f:a2:c6:b4:4f:94:8b: 08:a0:f7:ec:ee:f9:24:3f:c2:69:c3:eb:34:a3:63:0c:42:2e: 02:e7:54:ff:ce:43:ee:7c:ee:47:21:b6:39:b1:c5:82:ae:51: f2:6c:b8:3d:99:71:fa:43:6e:b2:3d:16:ac:b6:1f:13:0f:97: 3d:b9:ea:77:70:8b:45:1d:eb:09:ff:2a:0a:a0:e5:9a:c2:0b: b4:76:81:38:86:f4:20:68:fa:ab:23:5b:80:11:f5:c8:eb:88: 59:8a:2c:19:2c:50:9f:06:01:48:c4:14:01:bf:ca:91:f5:0e: 7b:e2:72:c4:6d:77:91:b9:6e:33:59:a4:85:4f:3f:20:e1:f5: 17:39:78:69:b8:6d:10:00:3e:63:9e:d0:84:02:ac:54:08:88: 5e:dd:20:a8:11:80:fe:8d:07:2b:d1:d7:0a:80:1b:d2:62:b3: 4c:90:21:5a:a2:fe:6a:b3:97:2b:1e:9b:71:49:6b:66:99:81: 51:ed:8e:06:f7:ba:a2:2d:01:e1:e0:41:a6:59:2b:dd:2a:6f: 48:6d:eb:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9khLPOdWRC7nnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NWY4ZjQxODctZGVmYS00MmQzLTk1YmItMGIyZTU3N2YyYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEF5u5JUc8ShaRCjlR7xqVLzuxuweSj3izCy 3vRLj4e1uIMWPOM8MY4aS26ijI/mGRN2s38AxfD7ysqz75UE7+lkJZBfikRXVInE Ga7XkIosgIXqnwpFCWhMOwFdIIUrY+M6adP/3n+fCGM/hjrIHupoJ/etkDOxDhMN naj3tal7rZ0jxKh5u5BnyRGAa8Yc2Lz0dX30fazRl1Albf0InDOkNF8KmOMrCZev d34rYtuNmA7Ypx8VZs+FqtVcSJU0IqIcTIkaJ9aE61GFwx08d7Izju7TlDw6Xn9L sbbiCu8rM0pzz0lz4WLZCY40YculGNYTHHJ/pKFUn+YjbJcVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO++MFvQrtTxJbrkRuxuCyU7mUmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODYwZGYxOWUtOTMwYi0z NzlmLTk4ZjAtNzgwNmVjZTBhOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/AQogMSjUygGQEW42GaUvP+e4S1BrFsWYgKAPwg3nuLt4jm1V4yEJu s0ewT1F2j6LGtE+Uiwig9+zu+SQ/wmnD6zSjYwxCLgLnVP/OQ+587kchtjmxxYKu UfJsuD2ZcfpDbrI9Fqy2HxMPlz256ndwi0Ud6wn/Kgqg5ZrCC7R2gTiG9CBo+qsj W4AR9cjriFmKLBksUJ8GAUjEFAG/ypH1DnvicsRtd5G5bjNZpIVPPyDh9Rc5eGm4 bRAAPmOe0IQCrFQIiF7dIKgRgP6NByvR1wqAG9Jis0yQIVqi/mqzlysem3FJa2aZ gVHtjgb3uqItAeHgQaZZK90qb0ht64A= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:21 2025 by rpki-client