$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa File: a0b3e32c-e284-32e7-b3de-255155fd2f08.roa (raw, json) Hash identifier: dnFo85/m2ZmC9aND+mLyj2p0Ap3TiUfbrrevK5I99cg= Subject key identifier: E2:06:AD:D5:7C:9F:AA:69:9E:6D:5B:C9:DB:16:ED:3B:99:30:36:07 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F65734B36EEB028935D000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.133.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:57:34:b3:6e:eb:02:89:35:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=3c11dd52-957a-4cc2-85c8-318f2c88339a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:18:e2:61:88:da:0c:d4:e0:1b:c4:f0:5a: aa:32:2a:c8:6e:78:bf:da:fa:da:06:51:13:91:df: 4d:2a:73:06:f0:be:6f:7b:bc:86:6b:f1:eb:08:f4: d6:35:b8:d2:09:ab:b5:68:e8:f1:7e:ef:fa:0b:fa: 0a:ae:50:31:65:a4:33:4a:59:e5:7f:79:f0:27:bb: 3e:27:88:4a:cb:c7:d2:b2:4e:cd:87:69:cc:87:09: 9b:fb:9a:38:34:91:81:c4:20:61:45:f8:29:4a:ee: ac:d4:4d:b9:79:d6:9c:e2:da:31:57:bb:07:52:8e: 5c:72:6d:eb:fb:aa:d3:ef:e8:01:70:da:43:3c:54: e7:b8:7a:44:e9:47:d4:6d:45:3a:b6:a7:d1:81:cf: 50:71:cf:d3:aa:02:df:bf:3c:ab:9f:97:23:ea:e1: 35:aa:24:29:28:e9:ef:f5:79:f1:32:56:cd:e6:af: cb:f9:a9:fa:a5:bf:70:ce:c6:f4:0a:4d:e3:4d:ed: e2:52:22:11:b4:23:ec:81:b3:23:b3:b5:97:fa:35: a8:62:86:ec:1c:58:04:69:33:6f:d1:d7:8b:c7:18: 61:0a:21:16:be:88:70:00:c4:d7:36:78:ea:bf:e1: 70:3c:64:69:d6:4e:0f:5b:93:a4:01:4b:9d:9b:ac: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:AD:D5:7C:9F:AA:69:9E:6D:5B:C9:DB:16:ED:3B:99:30:36:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b3e32c-e284-32e7-b3de-255155fd2f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3c:bc:b2:d7:fa:28:1f:4c:9f:44:91:6b:79:8b:ec:de:50: 50:a7:27:f3:e1:5b:1b:eb:ff:02:a2:45:6f:0b:a1:8b:f4:06: f1:5d:6e:1d:cc:b0:45:2b:7e:54:ed:be:dd:da:b5:87:fb:87: 62:8c:17:91:8e:d8:22:8e:7b:79:43:f6:da:69:43:2d:e2:8a: b5:58:e5:c2:00:ef:70:78:21:94:d2:92:e6:31:20:4d:70:f9: c1:3a:86:90:1f:59:fd:66:b0:9d:5a:0b:5c:b2:eb:65:de:da: a9:53:80:2d:6d:54:9e:45:33:6f:5d:ca:73:b1:e8:91:0d:f2: d0:5f:1c:63:14:40:37:06:3b:1a:6d:b7:0f:50:82:5b:43:ec: 8c:02:45:3f:b4:36:16:da:cc:e0:bf:b6:89:00:6b:c3:23:2d: 70:b3:4c:94:96:3a:8c:7a:0e:a6:6f:e2:10:08:c1:78:5b:bb: 31:49:f0:0c:0e:bf:76:d4:62:e2:66:3b:50:dc:80:37:8c:13: 9c:9d:87:53:b0:f4:f5:81:14:95:f2:0e:26:23:30:81:2a:a5: 2b:83:c6:2b:ef:7f:04:10:d2:26:00:40:54:0a:54:ee:95:c9: 75:65:58:21:ac:72:58:9a:85:5c:54:4c:e7:64:ef:bf:bf:da: db:d3:a0:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lc0s27rAok10AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk M2MxMWRkNTItOTU3YS00Y2MyLTg1YzgtMzE4ZjJjODgzMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQkY4mGI2gzU4BvE8FqqMirIbni/2vraBlET kd9NKnMG8L5ve7yGa/HrCPTWNbjSCau1aOjxfu/6C/oKrlAxZaQzSlnlf3nwJ7s+ J4hKy8fSsk7Nh2nMhwmb+5o4NJGBxCBhRfgpSu6s1E25edac4toxV7sHUo5ccm3r +6rT7+gBcNpDPFTnuHpE6UfUbUU6tqfRgc9Qcc/TqgLfvzyrn5cj6uE1qiQpKOnv 9XnxMlbN5q/L+an6pb9wzsb0Ck3jTe3iUiIRtCPsgbMjs7WX+jWoYobsHFgEaTNv 0deLxxhhCiEWvohwAMTXNnjqv+FwPGRp1k4PW5OkAUudm6x/OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIGrdV8n6ppnm1bydsW7TuZMDYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTBiM2UzMmMtZTI4NC0z MmU3LWIzZGUtMjU1MTU1ZmQyZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU8vLLX+igfTJ9EkWt5i+zeUFCnJ/PhWxvr/wKiRW8LoYv0BvFdbh3M sEUrflTtvt3atYf7h2KMF5GO2CKOe3lD9tppQy3iirVY5cIA73B4IZTSkuYxIE1w +cE6hpAfWf1msJ1aC1yy62Xe2qlTgC1tVJ5FM29dynOx6JEN8tBfHGMUQDcGOxpt tw9QgltD7IwCRT+0NhbazOC/tokAa8MjLXCzTJSWOox6DqZv4hAIwXhbuzFJ8AwO v3bUYuJmO1DcgDeME5ydh1Ow9PWBFJXyDiYjMIEqpSuDxivvfwQQ0iYAQFQKVO6V yXVlWCGscliahVxUTOdk77+/2tvToMs= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:37 2025 by rpki-client