$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b1afc57-b373-3153-86cb-8e68343b27d5.roa File: 9b1afc57-b373-3153-86cb-8e68343b27d5.roa (raw, json) Hash identifier: 0AtKwEjrUoZ3AcIpoAM43nAvuTcQYnTuA3NTKWzMFTk= Subject key identifier: BD:7F:FE:12:0C:C9:BB:21:11:1D:18:89:86:14:E5:75:7B:C4:1E:12 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0EAFFD42C8F234429EA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b1afc57-b373-3153-86cb-8e68343b27d5.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:ea:ff:d4:2c:8f:23:44:29:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=8712dc4f-bf82-4572-8979-7a7472e7e2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:a4:18:cb:2d:a4:28:1a:34:17:f5:b1:78: ff:20:9f:68:87:eb:e1:ee:44:1d:0c:14:c8:00:9f: 6c:26:a3:ee:13:d0:2d:12:ae:50:84:cb:d7:a0:62: c8:a5:83:32:3b:a1:e8:73:2e:26:9d:9b:1b:31:0f: 53:b6:f6:8c:10:83:aa:86:d4:ce:8b:e8:8b:44:cb: 2e:1b:e8:90:66:6d:15:34:7c:2c:0e:d2:dc:2d:ad: ce:e7:07:f2:1e:5b:45:d1:63:39:a3:a1:d8:5b:ff: bd:91:f3:b7:74:51:6f:14:bc:76:ee:8d:62:50:66: 72:5f:aa:58:14:94:b1:4e:1c:c4:ca:98:df:b8:e1: 1b:c6:d4:8f:8b:37:cf:f9:bb:b7:18:f1:3d:cf:5f: 2e:e4:31:99:d2:fb:13:bc:61:35:d4:88:d0:75:e0: 5a:54:16:ac:ba:e8:51:7a:96:ba:c1:c4:5b:d1:57: 24:36:b1:5f:11:ad:dc:ad:80:f7:ab:e9:40:9c:b4: 9b:53:64:cf:b6:b2:64:90:3d:cc:cb:c2:51:be:3c: 58:07:7e:fb:17:ef:66:76:1a:0d:11:e2:b1:8e:5f: 70:24:f5:e4:b2:d2:ee:66:22:00:41:b5:c6:cd:f6: 0b:b3:26:33:42:1a:b4:10:b4:e4:6f:6c:8a:1b:5e: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:FE:12:0C:C9:BB:21:11:1D:18:89:86:14:E5:75:7B:C4:1E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b1afc57-b373-3153-86cb-8e68343b27d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:52:dc:d4:d5:c4:1e:e1:d1:cb:07:67:a1:4f:9a:0d:7a:c7: 88:55:a6:48:d0:d3:e7:10:b7:40:e4:0c:80:87:ac:62:54:e4: c3:d6:59:52:dc:77:8a:b8:b2:d3:fd:77:aa:46:a8:19:2f:af: 63:05:58:20:8b:78:74:c0:29:19:20:e8:b4:ae:d5:72:52:9d: ef:b2:1f:a5:7a:79:d7:b5:d1:50:a5:f5:9b:b9:dd:79:27:03: f4:07:ab:11:5b:35:64:0d:86:ff:34:28:f3:96:3f:ab:b9:76: 7c:e9:8d:73:c1:62:da:8c:ce:89:d4:01:ec:6b:d4:fb:0a:80: 35:39:aa:90:02:57:65:e4:c6:fd:86:fe:bd:0e:d7:6e:0a:cd: 46:57:67:59:b5:69:56:5e:14:a3:af:6e:d1:d1:a4:69:5c:1e: 5b:30:b4:01:91:1a:c7:7e:6c:9b:a0:ab:03:5d:80:5c:3b:c2: 60:52:5c:25:05:9a:1e:a3:25:2a:ba:74:17:cf:e5:3d:99:c3: 83:9c:fa:e1:7f:34:64:ba:e3:2f:29:56:68:f6:c3:85:52:3a: 5a:24:13:ac:c1:4f:29:80:ee:2a:c1:d2:13:4f:8f:95:13:97: a9:49:56:f5:28:d4:16:6b:9b:f8:73:f2:30:d2:12:b0:34:c8: b3:b2:d0:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOr/1CyPI0Qp6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ODcxMmRjNGYtYmY4Mi00NTcyLTg5NzktN2E3NDcyZTdlMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfykGMstpCgaNBf1sXj/IJ9oh+vh7kQdDBTI AJ9sJqPuE9AtEq5QhMvXoGLIpYMyO6Hocy4mnZsbMQ9TtvaMEIOqhtTOi+iLRMsu G+iQZm0VNHwsDtLcLa3O5wfyHltF0WM5o6HYW/+9kfO3dFFvFLx27o1iUGZyX6pY FJSxThzEypjfuOEbxtSPizfP+bu3GPE9z18u5DGZ0vsTvGE11IjQdeBaVBasuuhR epa6wcRb0VckNrFfEa3crYD3q+lAnLSbU2TPtrJkkD3My8JRvjxYB377F+9mdhoN EeKxjl9wJPXkstLuZiIAQbXGzfYLsyYzQhq0ELTkb2yKG16Z0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1//hIMybshER0YiYYU5XV7xB4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWIxYWZjNTctYjM3My0z MTUzLTg2Y2ItOGU2ODM0M2IyN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVS3NTVxB7h0csHZ6FPmg16x4hVpkjQ0+cQt0DkDICHrGJU5MPWWVLc d4q4stP9d6pGqBkvr2MFWCCLeHTAKRkg6LSu1XJSne+yH6V6ede10VCl9Zu53Xkn A/QHqxFbNWQNhv80KPOWP6u5dnzpjXPBYtqMzonUAexr1PsKgDU5qpACV2Xkxv2G /r0O124KzUZXZ1m1aVZeFKOvbtHRpGlcHlswtAGRGsd+bJugqwNdgFw7wmBSXCUF mh6jJSq6dBfP5T2Zw4Oc+uF/NGS64y8pVmj2w4VSOlokE6zBTymA7irB0hNPj5UT l6lJVvUo1BZrm/hz8jDSErA0yLOy0AA= -----END CERTIFICATE-----Generated at Fri Apr 4 08:57:48 2025 by rpki-client