$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9de8c64a-12f4-31b4-aa23-4b2fdc0f7b43.roa File: 9de8c64a-12f4-31b4-aa23-4b2fdc0f7b43.roa (raw, json) Hash identifier: g+P5Y8b1xG3k51oIsO2UtFoSsUqANQP4yriXLXJEc2I= Subject key identifier: A4:2B:2D:E2:30:9C:A9:A4:75:50:79:3F:63:B8:8D:70:E6:3C:9C:AE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584867FAEB4A064450BB85719400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9de8c64a-12f4-31b4-aa23-4b2fdc0f7b43.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 36383 IP address blocks: 104.135.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:eb:4a:06:44:50:bb:85:71:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=121f792f-c1f0-4d57-bd85-979262ee3507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:63:52:a5:25:6f:e6:ce:ba:d9:cb:11:64: 2c:db:a4:6d:72:2f:6b:b3:12:96:f7:19:c0:cc:7b: e6:05:cb:ec:ab:5f:8a:32:66:8d:52:70:67:d5:ac: 68:e2:b0:2d:a2:d7:95:2c:09:ab:7f:60:c7:f7:8f: 55:53:4f:ea:c3:60:63:6b:62:39:ec:63:b4:98:4d: b5:91:9f:4c:3a:7c:51:c0:35:6f:0b:65:77:56:43: e3:4c:ad:21:83:6a:70:b1:94:49:0e:04:8a:e1:23: 2b:bc:64:25:dd:36:29:3b:52:8c:4d:80:f8:5c:c2: 30:1b:4f:0a:e9:b3:0f:69:92:cd:32:1b:3c:fd:01: 6d:c3:dd:76:6e:f4:99:6d:a7:95:4c:71:70:db:1e: 96:bf:65:c1:0d:8a:05:93:8a:00:26:06:77:85:ad: f3:5b:15:00:f4:4d:70:d1:24:89:05:e1:00:15:b6: 2b:bc:a9:20:61:8f:ca:ac:78:2c:91:e0:ba:1c:9a: c7:6a:e9:cd:87:b2:1b:34:47:50:c3:41:5f:41:4a: ce:fb:8f:63:9e:49:12:a9:3a:a8:19:e5:a4:d0:16: bc:96:bc:a2:34:c1:a4:09:14:0c:04:f7:44:65:f0: aa:a7:5c:57:36:51:1c:18:e5:4e:e0:b3:26:df:c3: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:2D:E2:30:9C:A9:A4:75:50:79:3F:63:B8:8D:70:E6:3C:9C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9de8c64a-12f4-31b4-aa23-4b2fdc0f7b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3f:56:bf:64:3f:d5:8c:ab:22:7a:47:81:64:b8:13:19:b6: b1:f6:ab:f9:ed:a5:5d:77:e5:24:b9:a1:87:42:c4:f2:df:17: cb:ee:b1:c6:ac:bf:0f:6b:b3:e3:08:74:fd:f6:93:8f:4d:c1: 8b:2b:67:07:90:5a:ee:fd:9e:64:f2:fa:92:da:e1:c4:dd:5c: 61:8b:d8:07:92:e3:30:d0:36:07:aa:0a:87:c9:e0:3b:55:b7: 2b:bf:90:12:4c:7e:b8:0c:81:ed:00:57:83:60:81:66:6a:94: a4:b5:5d:2b:5a:df:70:0e:60:0a:04:61:db:4f:3f:7c:7e:cf: ed:16:ef:65:5a:5e:89:0e:d9:b6:c7:c0:46:b9:13:6e:4d:a9: 7d:87:ae:f3:19:b6:b0:73:ab:8a:bb:33:ac:19:fd:4c:90:f5: cd:c5:d8:e5:10:97:c2:67:18:69:54:d0:11:9f:a5:ff:f3:9a: 32:ce:4f:97:bd:db:52:ac:0d:c1:d0:f2:e8:d2:1b:ce:4c:ac: 04:92:9b:0b:04:b9:6d:40:b6:5e:6e:ce:0a:d9:e0:ca:f9:d6: 1f:d4:9a:ea:eb:3b:d5:73:17:7a:c8:79:15:b7:cf:31:82:54: 05:31:f0:77:7f:3c:a6:0f:5c:d1:63:97:f0:67:98:9b:42:3e: 24:8a:68:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+utKBkRQu4VxlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk MTIxZjc5MmYtYzFmMC00ZDU3LWJkODUtOTc5MjYyZWUzNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjORjUqUlb+bOutnLEWQs26Rtci9rsxKW9xnA zHvmBcvsq1+KMmaNUnBn1axo4rAtoteVLAmrf2DH949VU0/qw2Bja2I57GO0mE21 kZ9MOnxRwDVvC2V3VkPjTK0hg2pwsZRJDgSK4SMrvGQl3TYpO1KMTYD4XMIwG08K 6bMPaZLNMhs8/QFtw912bvSZbaeVTHFw2x6Wv2XBDYoFk4oAJgZ3ha3zWxUA9E1w 0SSJBeEAFbYrvKkgYY/KrHgskeC6HJrHaunNh7IbNEdQw0FfQUrO+49jnkkSqTqo GeWk0Ba8lryiNMGkCRQMBPdEZfCqp1xXNlEcGOVO4LMm38Oy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQrLeIwnKmkdVB5P2O4jXDmPJyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWRlOGM2NGEtMTJmNC0z MWI0LWFhMjMtNGIyZmRjMGY3YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE/Vr9kP9WMqyJ6R4FkuBMZtrH2q/ntpV135SS5oYdCxPLfF8vuscas vw9rs+MIdP32k49NwYsrZweQWu79nmTy+pLa4cTdXGGL2AeS4zDQNgeqCofJ4DtV tyu/kBJMfrgMge0AV4NggWZqlKS1XSta33AOYAoEYdtPP3x+z+0W72VaXokO2bbH wEa5E25NqX2HrvMZtrBzq4q7M6wZ/UyQ9c3F2OUQl8JnGGlU0BGfpf/zmjLOT5e9 21KsDcHQ8ujSG85MrASSmwsEuW1Atl5uzgrZ4Mr51h/UmurrO9VzF3rIeRW3zzGC VAUx8Hd/PKYPXNFjl/BnmJtCPiSKaNQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:49 2025 by rpki-client