$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa File: 89cbf199-d065-3e52-85c6-721088fc29c4.roa (raw, json) Hash identifier: G1mB9XLilUDZbsscZqw3AjsO1sF0ixTANGYN2wS2dVk= Subject key identifier: 1D:E3:F8:FB:06:51:36:4E:6A:34:DC:E2:FF:7E:93:03:51:FA:CD:38 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64A7C49F7A619529BECA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4a:7c:49:f7:a6:19:52:9b:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=3a1e1a45-b230-454f-8aee-e46017635c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:b2:cc:e9:82:4f:4c:80:39:91:eb:ba:44: 2b:91:cd:11:48:d9:aa:56:eb:ed:5c:d1:b7:fc:7d: 82:ac:45:ce:ff:d3:a2:af:f4:0b:f0:00:41:1f:e5: d4:c5:fe:7c:04:64:3f:aa:8c:e3:a4:c3:11:c8:91: 82:45:1e:df:f7:ff:40:f8:ea:f0:0c:7b:7b:4c:ee: 97:a2:de:52:75:0d:74:72:a3:ec:8c:7c:b5:83:d6: 95:28:f6:05:85:2e:eb:21:fd:24:5e:95:60:2e:d1: 00:83:41:93:29:e9:89:87:d0:a5:17:44:9f:c3:36: e2:94:a4:f2:ed:6e:8f:9b:c9:81:bf:13:f7:cd:a1: 8f:16:d7:21:f6:6e:be:d9:25:4c:16:83:58:a4:53: 63:ff:a4:ac:d7:e4:27:92:7f:c4:4f:0a:61:5a:f6: 79:3a:7d:45:cc:41:ca:f4:2b:e2:a1:be:80:4e:2c: 46:ec:37:14:27:04:05:19:97:a9:d5:e2:2f:7a:db: 46:d1:94:2c:31:d9:31:30:fb:ea:0c:9d:28:5e:17: 99:09:dc:29:fc:f9:55:56:d8:ae:d0:b3:a3:2f:55: e8:72:30:72:85:8a:84:7f:95:66:d5:05:0e:6d:b3: a8:1f:00:e0:61:5c:26:1f:e1:3a:1f:df:8d:25:ca: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:F8:FB:06:51:36:4E:6A:34:DC:E2:FF:7E:93:03:51:FA:CD:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89cbf199-d065-3e52-85c6-721088fc29c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:bc:8f:4a:9b:e6:d2:f3:fc:01:b0:20:05:06:82:91:29:32: 33:66:82:1c:93:45:94:e0:4a:57:77:f1:3e:34:72:56:69:88: 82:23:81:ce:3e:0d:39:f8:5b:6d:dc:0f:55:e0:4a:27:c4:f9: 76:d4:11:c0:6b:9a:9d:e6:e5:0b:95:64:d6:a2:23:05:5e:21: 82:f3:d1:ea:ff:4c:10:89:54:1d:ab:6a:b4:e7:2f:3b:4d:9d: cd:92:61:69:b3:ac:b2:ef:6a:a7:b7:21:f5:9c:ac:e4:79:db: 66:3c:96:ba:ff:a5:a2:7d:f7:48:53:38:ed:6b:6a:d0:d2:8b: 58:ad:c0:41:43:71:b5:ca:ca:2c:14:3a:ec:84:d7:c7:63:82: 12:1d:a9:02:c9:a6:54:f7:85:6a:63:62:ba:b6:db:9e:b0:2c: 33:05:65:a1:1f:a5:f5:7f:1a:1e:85:21:d0:b6:a6:3e:46:3a: f5:7a:dd:47:1b:06:a8:38:f8:ad:a5:af:b2:99:61:b8:bf:b1: 81:ac:e7:30:e6:a1:b7:c2:4a:ca:96:07:64:b0:19:3a:78:33: 65:94:94:a9:04:dd:9a:aa:67:ce:12:76:99:77:60:60:ce:89: 5f:0d:e7:91:13:27:16:93:11:1e:c1:71:d0:db:56:aa:d2:fc: 18:ff:80:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kp8SfemGVKb7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk M2ExZTFhNDUtYjIzMC00NTRmLThhZWUtZTQ2MDE3NjM1YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEWyzOmCT0yAOZHrukQrkc0RSNmqVuvtXNG3 /H2CrEXO/9Oir/QL8ABBH+XUxf58BGQ/qozjpMMRyJGCRR7f9/9A+OrwDHt7TO6X ot5SdQ10cqPsjHy1g9aVKPYFhS7rIf0kXpVgLtEAg0GTKemJh9ClF0SfwzbilKTy 7W6Pm8mBvxP3zaGPFtch9m6+2SVMFoNYpFNj/6Ss1+Qnkn/ETwphWvZ5On1FzEHK 9Cviob6ATixG7DcUJwQFGZep1eIvettG0ZQsMdkxMPvqDJ0oXheZCdwp/PlVVtiu 0LOjL1XocjByhYqEf5Vm1QUObbOoHwDgYVwmH+E6H9+NJcqFuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3j+PsGUTZOajTc4v9+kwNR+s04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODljYmYxOTktZDA2NS0z ZTUyLTg1YzYtNzIxMDg4ZmMyOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALm8j0qb5tLz/AGwIAUGgpEpMjNmghyTRZTgSld38T40clZpiIIjgc4+ DTn4W23cD1XgSifE+XbUEcBrmp3m5QuVZNaiIwVeIYLz0er/TBCJVB2rarTnLztN nc2SYWmzrLLvaqe3IfWcrOR522Y8lrr/paJ990hTOO1ratDSi1itwEFDcbXKyiwU OuyE18djghIdqQLJplT3hWpjYrq2256wLDMFZaEfpfV/Gh6FIdC2pj5GOvV63Ucb Bqg4+K2lr7KZYbi/sYGs5zDmobfCSsqWB2SwGTp4M2WUlKkE3ZqqZ84Sdpl3YGDO iV8N55ETJxaTER7BcdDbVqrS/Bj/gEI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:04 2025 by rpki-client