$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/904e964d-9e1b-3006-b562-4e2213ff9c7f.roa File: 904e964d-9e1b-3006-b562-4e2213ff9c7f.roa (raw, json) Hash identifier: nyufoJd7KDcv/o1f2cVKdmJXsq43gm/sKQS3/EtfY2U= Subject key identifier: BD:60:B0:83:3A:C7:0C:13:57:21:55:0C:FC:A3:6C:CE:C0:61:70:A6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F6588E8AAE217988C220D0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/904e964d-9e1b-3006-b562-4e2213ff9c7f.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:58:8e:8a:ae:21:79:88:c2:20:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=3bbf0ba2-465d-4ede-bc97-37d2f958aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:88:b5:65:f6:ab:f5:7b:a2:ac:65:10:19:4d: 37:87:72:33:42:5e:b9:de:77:87:09:cf:28:ea:b8: a7:35:43:4e:44:14:fa:ce:f8:72:a0:53:4b:f7:a9: fb:ae:2a:bc:a5:cf:73:7a:83:10:d3:c5:a6:cd:96: de:12:80:00:f8:bb:a0:41:90:71:05:d0:80:37:73: 1a:bc:cf:cd:eb:b5:db:ae:ba:3f:b6:3a:cf:bb:68: 7a:4d:dc:26:07:a2:1a:d3:84:32:bd:a0:e8:e8:ec: 30:5a:39:68:21:e6:88:53:c9:08:76:1e:ff:2a:02: ec:cd:c6:d9:ce:64:83:f9:96:32:f8:84:25:e4:bd: e7:bf:92:19:9d:93:9a:37:30:21:69:b5:7d:fc:a7: 2d:77:cf:42:40:f0:90:9e:4f:31:b1:79:bd:86:90: 76:78:75:2c:91:46:70:e4:86:24:72:5f:5d:eb:7c: 13:ca:f1:d1:03:07:6e:e1:72:3b:a8:f1:db:2f:e7: 20:0a:42:fd:9c:55:c3:35:59:9c:4f:65:3b:6f:e8: 97:7f:4f:b9:81:77:31:62:7a:d5:7e:19:8a:eb:f9: 4f:8f:fe:96:20:63:29:08:3f:0e:ae:96:0f:63:22: 8d:96:d4:9a:6c:ab:5e:b6:bd:dd:39:64:3b:48:28: 56:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:60:B0:83:3A:C7:0C:13:57:21:55:0C:FC:A3:6C:CE:C0:61:70:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/904e964d-9e1b-3006-b562-4e2213ff9c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:43:d5:15:40:4f:8d:9f:6a:2e:dc:b8:2d:1d:3f:9a:51:1f: ee:19:c9:0e:35:9b:b9:e1:ff:b6:55:f6:e8:43:5c:bb:3b:54: 21:f2:af:8c:84:49:95:49:90:06:88:35:f9:67:32:92:15:ce: 34:36:35:8a:84:6a:9c:cc:37:14:b1:a6:89:32:67:d0:9e:bf: 01:9d:bb:ae:fd:db:23:50:62:5e:4b:47:da:5d:b1:23:1f:3d: 30:8d:5b:fa:2f:8a:2c:16:9c:c7:23:9f:05:ed:a1:55:0b:68: 91:52:2e:90:f7:c6:71:5b:5b:93:b1:f8:7a:d1:b6:c9:13:26: 9b:81:d5:2b:87:aa:6e:00:57:bc:1d:96:6d:2e:56:f9:ec:44: 60:2a:b0:54:a3:dd:fd:e4:c0:17:eb:7b:8c:22:69:6c:c0:be: f7:7d:b8:87:59:92:ab:f9:93:81:d4:b2:65:de:76:57:f3:c3: 7d:86:3b:82:56:a0:a6:cd:f9:b1:7e:59:bd:6d:96:40:1f:4f: ea:e4:61:f0:7c:eb:8c:b1:a0:f5:2f:6a:1d:c7:0c:55:58:45: 8c:f4:23:d9:f0:87:56:28:28:82:0d:3f:1f:c7:79:d8:fa:80: 57:0b:a9:b6:01:3e:5a:9c:96:ec:4f:e7:0e:b3:9b:98:29:4d: 9b:32:3b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9liOiq4heYjCINAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk M2JiZjBiYTItNDY1ZC00ZWRlLWJjOTctMzdkMmY5NThhYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Yi1Zfar9XuirGUQGU03h3IzQl653neHCc8o 6rinNUNORBT6zvhyoFNL96n7riq8pc9zeoMQ08WmzZbeEoAA+LugQZBxBdCAN3Ma vM/N67Xbrro/tjrPu2h6TdwmB6Ia04QyvaDo6OwwWjloIeaIU8kIdh7/KgLszcbZ zmSD+ZYy+IQl5L3nv5IZnZOaNzAhabV9/Kctd89CQPCQnk8xsXm9hpB2eHUskUZw 5IYkcl9d63wTyvHRAwdu4XI7qPHbL+cgCkL9nFXDNVmcT2U7b+iXf0+5gXcxYnrV fhmK6/lPj/6WIGMpCD8OrpYPYyKNltSabKtetr3dOWQ7SChWowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1gsIM6xwwTVyFVDPyjbM7AYXCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTA0ZTk2NGQtOWUxYi0z MDA2LWI1NjItNGUyMjEzZmY5YzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhD1RVAT42fai7cuC0dP5pRH+4ZyQ41m7nh/7ZV9uhDXLs7VCHyr4yE SZVJkAaINflnMpIVzjQ2NYqEapzMNxSxpokyZ9CevwGdu6792yNQYl5LR9pdsSMf PTCNW/oviiwWnMcjnwXtoVULaJFSLpD3xnFbW5Ox+HrRtskTJpuB1SuHqm4AV7wd lm0uVvnsRGAqsFSj3f3kwBfre4wiaWzAvvd9uIdZkqv5k4HUsmXedlfzw32GO4JW oKbN+bF+Wb1tlkAfT+rkYfB864yxoPUvah3HDFVYRYz0I9nwh1YoKIINPx/Hedj6 gFcLqbYBPlqcluxP5w6zm5gpTZsyO5A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:52 2025 by rpki-client