$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9df81f11-d317-39a4-ab1d-325da3db03ca.roa File: 9df81f11-d317-39a4-ab1d-325da3db03ca.roa (raw, json) Hash identifier: 8/bko/nz/aOwXKkO5UqJdab8NnaK4wtQbNLBXAeix4I= Subject key identifier: 3F:D6:43:DA:2B:48:9A:41:7E:EC:4D:09:8E:1F:3B:8B:F7:5D:61:2D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64CC995E993B134ADC780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9df81f11-d317-39a4-ab1d-325da3db03ca.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4c:c9:95:e9:93:b1:34:ad:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=d05fb7cf-85db-46d1-b464-e92fd7cb53e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a5:8a:a3:d8:26:92:89:a0:10:d4:3d:33:f5: 77:d8:44:af:96:16:2d:2c:6f:d7:a2:bd:f4:0a:30: b2:a8:5c:3b:20:ed:d7:c4:21:ab:f6:2b:ba:1c:b5: 32:9a:5d:f3:12:7d:46:88:c0:04:51:1c:bd:27:c8: d6:09:39:8b:10:47:89:20:39:be:c6:93:c5:90:df: cf:9e:4f:b0:9b:f8:1c:34:3b:e2:b9:5e:62:31:87: 0d:e1:f7:f3:0e:92:93:ce:0b:29:6f:2a:55:62:e6: 62:95:b9:83:35:ca:dc:1b:c0:52:2a:06:ad:12:a0: ca:8a:74:07:8f:a9:15:68:b1:6f:0e:e3:9f:1b:e6: 01:f1:ac:1e:d6:ab:36:d9:09:e7:71:de:f0:6c:84: 42:f5:f9:27:4f:07:57:3b:2d:ae:3c:d2:ac:40:2b: a2:36:f8:4f:22:24:9b:d5:f4:8c:a9:38:0e:b5:77: 7e:2e:aa:a7:06:2b:bd:4b:be:cd:88:03:94:2e:93: 75:6d:33:2e:bd:8b:82:5f:eb:c8:7b:44:6c:91:de: bd:3f:2f:e4:a8:19:24:50:27:06:af:fa:92:0c:b9: 72:b6:f5:ef:8d:67:ce:ac:83:74:a2:52:64:34:f2: ed:97:19:25:3d:3a:73:92:12:7d:02:41:69:79:d6: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D6:43:DA:2B:48:9A:41:7E:EC:4D:09:8E:1F:3B:8B:F7:5D:61:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9df81f11-d317-39a4-ab1d-325da3db03ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:80:97:d5:cd:6d:c9:cc:aa:9e:e4:ee:1d:80:b4:58:a3:00: 4b:7a:1e:4e:1b:c1:04:87:9f:69:3b:15:d7:43:8c:74:ef:74: de:dd:fb:72:c8:73:cd:36:2a:4c:a1:11:14:51:4b:63:06:3b: 58:d0:5d:3f:4d:14:7e:fd:40:96:2a:54:c0:5d:6d:ef:48:2f: b2:6b:0d:ed:1d:f2:07:01:71:5b:a4:03:0f:79:d5:eb:2e:3a: 2b:1d:f5:05:18:92:02:e9:cd:c4:10:7b:5a:fb:af:73:66:e3: 71:dc:da:68:2c:7b:99:9b:05:1d:b2:31:09:be:11:f4:61:ee: 8d:15:a7:bd:db:f8:2e:bf:67:81:19:5a:f4:e5:31:58:d1:62: 42:71:bd:3a:d8:77:e8:cb:4a:88:41:4c:e5:9b:a3:7e:3a:27: 28:3c:3d:70:c7:5b:6a:6b:09:56:5c:dd:e4:2e:b3:7b:d7:ab: 94:5a:5c:85:88:3d:29:03:94:d9:8e:c0:59:f6:c8:cd:a3:0b: b8:67:33:ca:b8:9f:98:4d:fc:9c:fc:02:88:68:5d:4e:b9:c7: c6:45:1c:76:57:1b:f6:01:5e:c7:08:6b:01:ae:c5:b9:33:4e: 91:9d:a6:da:4b:aa:e8:e9:08:9c:21:91:18:04:a9:21:34:9e: 0d:ae:b5:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kzJlemTsTStx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk ZDA1ZmI3Y2YtODVkYi00NmQxLWI0NjQtZTkyZmQ3Y2I1M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6WKo9gmkomgENQ9M/V32ESvlhYtLG/Xor30 CjCyqFw7IO3XxCGr9iu6HLUyml3zEn1GiMAEURy9J8jWCTmLEEeJIDm+xpPFkN/P nk+wm/gcNDviuV5iMYcN4ffzDpKTzgspbypVYuZilbmDNcrcG8BSKgatEqDKinQH j6kVaLFvDuOfG+YB8awe1qs22Qnncd7wbIRC9fknTwdXOy2uPNKsQCuiNvhPIiSb 1fSMqTgOtXd+LqqnBiu9S77NiAOULpN1bTMuvYuCX+vIe0Rskd69Py/kqBkkUCcG r/qSDLlytvXvjWfOrIN0olJkNPLtlxklPTpzkhJ9AkFpedaoAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/WQ9orSJpBfuxNCY4fO4v3XWEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWRmODFmMTEtZDMxNy0z OWE0LWFiMWQtMzI1ZGEzZGIwM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaAl9XNbcnMqp7k7h2AtFijAEt6Hk4bwQSHn2k7FddDjHTvdN7d+3LI c802KkyhERRRS2MGO1jQXT9NFH79QJYqVMBdbe9IL7JrDe0d8gcBcVukAw951esu Oisd9QUYkgLpzcQQe1r7r3Nm43Hc2mgse5mbBR2yMQm+EfRh7o0Vp73b+C6/Z4EZ WvTlMVjRYkJxvTrYd+jLSohBTOWbo346Jyg8PXDHW2prCVZc3eQus3vXq5RaXIWI PSkDlNmOwFn2yM2jC7hnM8q4n5hN/Jz8AohoXU65x8ZFHHZXG/YBXscIawGuxbkz TpGdptpLqujpCJwhkRgEqSE0ng2utU0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:58 2025 by rpki-client