$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa File: 91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa (raw, json) Hash identifier: aqY+phyzi1m0LntxqoDqeKWX/MwXpBXdCF7GJJn8eMY= Subject key identifier: D7:E8:9B:1A:27:01:85:48:75:54:4B:67:2B:AE:B0:67:64:34:93:8A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBD4447B086E23B1C12880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36383 IP address blocks: 104.135.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d4:44:7b:08:6e:23:b1:c1:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=7716bebe-067c-42c9-8617-8e1c0e1e5db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:f4:ee:db:02:88:2e:86:60:8f:1d:f0:82: 5c:53:33:1f:23:59:21:8a:76:33:20:f7:40:6a:d7: 28:63:a5:5f:f6:3e:91:51:21:86:6e:ff:23:39:99: c5:47:63:6c:69:62:a2:e2:70:46:42:65:85:df:3e: 5f:40:8e:b2:cd:f7:9e:69:14:0a:7b:58:6b:37:5d: ef:7e:be:19:3a:f1:d8:39:5f:33:14:9b:aa:8a:a8: e4:3c:f0:39:14:5f:c8:0e:6b:29:35:95:b1:3b:d2: 9d:83:69:0f:49:7c:6c:55:f6:22:ce:aa:31:42:e9: ae:c0:54:26:68:dc:48:b4:a2:6d:ec:f2:cd:3b:28: f5:81:23:ea:94:82:9a:77:65:b1:8e:24:d4:be:8c: 9e:55:fc:1f:35:61:23:66:19:e7:33:29:81:d4:3c: 80:ec:e9:1a:3f:39:34:80:f1:d3:dc:2f:25:f4:08: 4d:4b:45:98:09:51:6b:c0:8f:4c:9a:fa:b5:46:06: 1f:4f:de:d4:e0:59:35:f0:7f:24:30:2e:51:60:b3: e7:29:c4:68:6b:88:60:ce:cc:35:30:5d:fe:e8:95: 7b:15:c9:3f:0f:91:69:94:33:6e:09:a0:40:95:ab: 38:9c:2c:a7:82:16:8f:45:c4:65:e5:0b:5d:42:08: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:9B:1A:27:01:85:48:75:54:4B:67:2B:AE:B0:67:64:34:93:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b9:00:ea:3c:49:b5:47:a6:b2:d6:44:94:3b:18:cd:ff:04: fe:c2:af:94:47:ab:81:b2:65:62:35:a8:c2:de:e1:79:9e:b9: 3d:a8:9c:2c:02:44:00:98:2d:00:2b:6c:91:0d:6f:d4:3c:6b: 06:f7:7d:92:fd:0d:01:bb:9f:06:5e:a1:1d:77:21:b1:72:05: 84:fd:56:f1:6b:9d:98:1b:b4:9b:9a:64:ba:40:64:34:97:03: 95:fd:b7:64:ec:e1:20:9d:0b:2b:8e:b1:1f:b4:7e:33:0d:21: 0c:af:d8:0f:c4:e2:32:51:e0:79:b3:22:04:14:aa:b5:66:01: 72:75:09:df:a2:5e:a6:f3:96:d4:58:b3:d9:f1:40:93:19:5b: 28:45:84:d3:e4:45:45:18:60:63:18:42:48:9e:db:6f:b1:c4: 38:26:80:0f:a5:d0:bc:af:a1:62:91:af:74:8d:29:c4:37:df: c1:07:52:99:43:55:be:fa:b7:25:26:bb:66:bf:82:fc:1d:92: 69:c9:ea:01:fc:17:c5:4c:5e:e1:38:4b:aa:78:ec:6e:0c:79: 18:96:33:02:e7:87:52:dc:70:53:e8:aa:c2:b8:35:12:4e:77: 57:ee:88:ad:a7:67:01:cd:2a:45:d0:76:29:57:6b:26:f3:fb: 54:a7:fa:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69REewhuI7HBKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NzcxNmJlYmUtMDY3Yy00MmM5LTg2MTctOGUxYzBlMWU1ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne707tsCiC6GYI8d8IJcUzMfI1khinYzIPdA atcoY6Vf9j6RUSGGbv8jOZnFR2NsaWKi4nBGQmWF3z5fQI6yzfeeaRQKe1hrN13v fr4ZOvHYOV8zFJuqiqjkPPA5FF/IDmspNZWxO9Kdg2kPSXxsVfYizqoxQumuwFQm aNxItKJt7PLNOyj1gSPqlIKad2WxjiTUvoyeVfwfNWEjZhnnMymB1DyA7OkaPzk0 gPHT3C8l9AhNS0WYCVFrwI9Mmvq1RgYfT97U4Fk18H8kMC5RYLPnKcRoa4hgzsw1 MF3+6JV7Fck/D5FplDNuCaBAlas4nCynghaPRcRl5QtdQggfNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfomxonAYVIdVRLZyuusGdkNJOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTFkYjczMWMtOWJiNC0z NmY0LWJjZjktN2Q0YTNlM2I0NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG25AOo8SbVHprLWRJQ7GM3/BP7Cr5RHq4GyZWI1qMLe4XmeuT2onCwC RACYLQArbJENb9Q8awb3fZL9DQG7nwZeoR13IbFyBYT9VvFrnZgbtJuaZLpAZDSX A5X9t2Ts4SCdCyuOsR+0fjMNIQyv2A/E4jJR4HmzIgQUqrVmAXJ1Cd+iXqbzltRY s9nxQJMZWyhFhNPkRUUYYGMYQkie22+xxDgmgA+l0LyvoWKRr3SNKcQ338EHUplD Vb76tyUmu2a/gvwdkmnJ6gH8F8VMXuE4S6p47G4MeRiWMwLnh1LccFPoqsK4NRJO d1fuiK2nZwHNKkXQdilXaybz+1Sn+pI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:44 2025 by rpki-client