$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ccc2f17-09e6-333b-b33d-7bb90150b306.roa File: 8ccc2f17-09e6-333b-b33d-7bb90150b306.roa (raw, json) Hash identifier: YPJzTqFIySSl7l1WykOzWXmHxnG4C8ki6hEPZaKb8YA= Subject key identifier: E0:8D:19:96:A6:77:39:7B:AE:46:5B:A9:45:F3:D2:8D:77:6C:19:A9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0DD7F6504403794D6F300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ccc2f17-09e6-333b-b33d-7bb90150b306.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:dd:7f:65:04:40:37:94:d6:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=5b437a65-937d-4671-b82b-69bf3a4e3cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:79:4d:4e:be:db:15:34:62:46:19:26:16: c6:c5:2d:9f:a0:7b:26:8d:f2:cd:3f:9e:a3:66:f9: b0:ab:6a:13:f5:a0:4f:1e:03:45:de:01:b6:e6:93: 1b:ce:da:ab:5e:35:2d:7b:46:86:51:c8:51:af:d7: 0a:3b:87:35:ca:04:06:34:8b:b1:ad:d2:e5:43:52: ea:c7:4f:ff:59:6c:c9:c4:9e:14:bc:39:d8:d9:97: 22:1f:3b:48:6c:be:a4:bc:f7:9a:9f:6b:f0:b5:b3: 71:09:c7:5c:7b:5d:c5:6e:1c:c8:79:00:e9:79:27: b0:70:3e:d1:8f:07:a9:48:4d:c1:4b:83:32:cc:68: 31:1a:23:82:fb:ec:7f:b7:68:7d:eb:f4:84:ac:75: f7:97:0f:54:c1:96:66:41:fd:dc:c7:1b:fe:93:76: 23:b7:3c:be:28:96:87:1b:7f:5e:fc:08:45:73:29: db:b5:dd:20:65:e0:95:3c:02:5d:18:d6:26:9b:fd: 6c:d2:66:b4:dd:b0:92:11:e5:6f:c2:1c:80:d1:94: 15:0d:c4:e1:d2:d3:88:89:27:0d:19:05:24:48:5a: 3f:2f:1d:bf:bc:ae:82:65:89:87:f8:7b:26:bd:92: e5:c1:1f:bf:fa:8e:c5:97:0f:70:fe:f7:5d:b6:79: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8D:19:96:A6:77:39:7B:AE:46:5B:A9:45:F3:D2:8D:77:6C:19:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ccc2f17-09e6-333b-b33d-7bb90150b306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1a:12:2f:89:2a:48:78:53:16:38:03:d8:2c:21:2e:c2:3c: 36:18:7e:6f:8c:c6:37:59:03:ad:9b:ca:31:ae:e0:77:22:c6: d6:67:95:05:e6:66:9a:a0:df:53:2a:30:59:13:50:4d:94:0e: 97:aa:ae:de:44:4d:9c:38:43:66:21:ed:c7:d4:00:ce:67:05: be:23:fe:e3:ea:d2:0b:af:ba:24:c5:cc:0a:f1:47:84:33:0a: c7:c2:a0:9a:79:23:9a:e8:d0:19:11:49:79:d0:60:de:5d:59: 70:69:34:0a:e7:fd:eb:9d:44:df:6e:97:a0:b1:73:d9:67:58: c2:9e:9b:d8:1d:5c:b9:31:d4:a8:81:00:96:3c:7c:07:cf:cc: bd:a9:a3:02:02:cb:9b:74:9e:fa:bf:20:c4:a2:2c:d3:82:4c: 65:39:00:87:ee:1e:cf:c5:8b:b2:b1:22:62:e1:8d:0b:79:a1: a5:87:18:03:f5:a1:69:7f:a1:95:b1:fa:bb:67:2d:e5:52:d6: 7e:41:cc:0f:3a:1b:e2:65:26:c8:39:b5:52:1a:82:d3:e7:dc: 0b:69:e1:8f:c2:0b:45:7a:3d:9d:0d:84:fe:70:9c:4f:41:30: 07:b7:aa:6c:a9:6f:57:98:5f:e0:03:ae:1f:2e:08:8b:dc:fe: f3:4b:a9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN1/ZQRAN5TW8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NWI0MzdhNjUtOTM3ZC00NjcxLWI4MmItNjliZjNhNGUzY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21l5TU6+2xU0YkYZJhbGxS2foHsmjfLNP56j Zvmwq2oT9aBPHgNF3gG25pMbztqrXjUte0aGUchRr9cKO4c1ygQGNIuxrdLlQ1Lq x0//WWzJxJ4UvDnY2ZciHztIbL6kvPean2vwtbNxCcdce13FbhzIeQDpeSewcD7R jwepSE3BS4MyzGgxGiOC++x/t2h96/SErHX3lw9UwZZmQf3cxxv+k3Yjtzy+KJaH G39e/AhFcynbtd0gZeCVPAJdGNYmm/1s0ma03bCSEeVvwhyA0ZQVDcTh0tOIiScN GQUkSFo/Lx2/vK6CZYmH+HsmvZLlwR+/+o7Flw9w/vddtnl3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCNGZamdzl7rkZbqUXz0o13bBmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGNjYzJmMTctMDllNi0z MzNiLWIzM2QtN2JiOTAxNTBiMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYaEi+JKkh4UxY4A9gsIS7CPDYYfm+MxjdZA62byjGu4HcixtZnlQXm Zpqg31MqMFkTUE2UDpeqrt5ETZw4Q2Yh7cfUAM5nBb4j/uPq0guvuiTFzArxR4Qz CsfCoJp5I5ro0BkRSXnQYN5dWXBpNArn/eudRN9ul6Cxc9lnWMKem9gdXLkx1KiB AJY8fAfPzL2powICy5t0nvq/IMSiLNOCTGU5AIfuHs/Fi7KxImLhjQt5oaWHGAP1 oWl/oZWx+rtnLeVS1n5BzA86G+JlJsg5tVIagtPn3Atp4Y/CC0V6PZ0NhP5wnE9B MAe3qmypb1eYX+ADrh8uCIvc/vNLqXE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:41 2025 by rpki-client