$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa File: 91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa (raw, json) Hash identifier: P1c5YU8dgGLfMkv3InW9w1PB0z9o3riPhGfCluPWJoE= Subject key identifier: 72:37:82:F2:BF:04:C8:E1:E4:97:0D:C4:60:2A:55:8A:0B:F4:06:F0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F658B6A8FCCF5617384D60 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:58:b6:a8:fc:cf:56:17:38:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=776fb14a-1a1d-4aa8-bd04-23e18795ec97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:96:e1:04:8e:fd:c8:7f:35:06:f4:a9:1a: 78:2b:92:45:83:6a:d3:6e:3d:10:cd:d6:2b:6d:27: eb:a5:b1:bf:5c:dd:d4:28:20:43:4f:22:d2:91:da: 03:4e:aa:b6:49:28:43:07:dd:40:bf:d7:48:89:56: ba:05:9d:44:1d:c8:82:24:97:a9:12:b3:45:5a:88: bc:84:d6:eb:6d:af:f4:7c:0b:c3:6c:3a:f9:be:91: 79:ad:37:56:a1:24:90:03:a4:4d:e5:1e:c1:60:e1: 1d:11:fb:45:74:34:f5:a5:a9:f4:ca:a8:b5:83:39: 93:28:35:00:50:99:65:e8:6c:c9:2c:3d:c4:77:1f: df:95:8a:91:84:55:90:48:69:d0:5d:7c:bc:43:41: 29:be:b0:62:5b:46:6c:cc:28:5f:89:1e:f8:36:ec: 49:90:9b:d9:9c:0c:74:b7:31:03:60:75:cc:ae:3c: 0a:39:85:0b:05:71:c4:08:5e:4c:27:78:ab:e4:9b: 6f:85:0b:03:42:7d:f7:24:6d:27:9a:a5:8d:75:16: 32:32:a9:19:66:08:c5:3b:4a:9d:50:4d:1e:5c:34: 53:f3:98:ef:1a:78:28:0e:76:96:17:8b:74:81:65: 78:28:d0:bf:ff:23:bd:58:85:f6:77:54:25:48:2a: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:37:82:F2:BF:04:C8:E1:E4:97:0D:C4:60:2A:55:8A:0B:F4:06:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91a6f947-aa63-38b8-8fa4-0f76425fcc0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ec:dd:0f:d5:4f:bd:9d:2f:8c:8f:9d:53:38:6d:bf:76:2e: 46:bc:41:d4:6c:13:28:0a:8d:02:7d:3b:7e:d8:77:71:91:b8: 14:21:fc:dc:70:ef:08:d0:9b:83:4a:be:51:d0:30:71:c1:3d: 83:4d:7a:8b:83:07:0b:d7:43:8a:ac:ae:f2:ae:9d:fd:c2:9f: 52:6c:62:27:a1:90:33:b8:c2:b0:aa:60:9a:1c:20:67:fa:5a: 19:ec:c2:d5:0c:d5:00:7b:dd:8c:34:da:45:37:9e:17:ab:aa: a9:26:1e:07:a7:fd:aa:8f:e6:21:99:01:bd:b9:57:ba:b2:66: ff:30:55:ba:31:4e:50:b6:85:ba:06:56:33:2e:51:d7:da:64: 5b:52:56:f0:90:ce:8a:dc:75:bf:b7:c9:df:f6:07:61:40:2c: cc:25:ac:b7:23:a6:37:3c:f6:d0:df:6e:15:b0:0c:ad:25:1e: a3:78:f5:5e:a1:21:aa:64:12:2a:8c:75:5c:4c:e7:46:5f:f6: 79:0c:2e:3e:db:41:88:a9:9f:54:f9:89:32:58:d0:97:d8:89: 31:25:0a:d4:66:cb:30:b7:8f:52:2a:84:e4:d9:1e:3a:53:46: c3:42:36:a9:3f:71:75:3b:b6:dd:5a:fe:dc:82:4b:13:33:ad: fb:a3:8c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9li2qPzPVhc4TWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk Nzc2ZmIxNGEtMWExZC00YWE4LWJkMDQtMjNlMTg3OTVlYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPSW4QSO/ch/NQb0qRp4K5JFg2rTbj0QzdYr bSfrpbG/XN3UKCBDTyLSkdoDTqq2SShDB91Av9dIiVa6BZ1EHciCJJepErNFWoi8 hNbrba/0fAvDbDr5vpF5rTdWoSSQA6RN5R7BYOEdEftFdDT1pan0yqi1gzmTKDUA UJll6GzJLD3Edx/flYqRhFWQSGnQXXy8Q0EpvrBiW0ZszChfiR74NuxJkJvZnAx0 tzEDYHXMrjwKOYULBXHECF5MJ3ir5JtvhQsDQn33JG0nmqWNdRYyMqkZZgjFO0qd UE0eXDRT85jvGngoDnaWF4t0gWV4KNC//yO9WIX2d1QlSCrH+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI3gvK/BMjh5JcNxGAqVYoL9AbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTFhNmY5NDctYWE2My0z OGI4LThmYTQtMGY3NjQyNWZjYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3s3Q/VT72dL4yPnVM4bb92Lka8QdRsEygKjQJ9O37Yd3GRuBQh/Nxw 7wjQm4NKvlHQMHHBPYNNeouDBwvXQ4qsrvKunf3Cn1JsYiehkDO4wrCqYJocIGf6 WhnswtUM1QB73Yw02kU3nherqqkmHgen/aqP5iGZAb25V7qyZv8wVboxTlC2hboG VjMuUdfaZFtSVvCQzorcdb+3yd/2B2FALMwlrLcjpjc89tDfbhWwDK0lHqN49V6h IapkEiqMdVxM50Zf9nkMLj7bQYipn1T5iTJY0JfYiTElCtRmyzC3j1IqhOTZHjpT RsNCNqk/cXU7tt1a/tyCSxMzrfujjDQ= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:16 2025 by rpki-client