$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a18b44be-63d1-3f1d-9264-564a7e507182.roa File: a18b44be-63d1-3f1d-9264-564a7e507182.roa (raw, json) Hash identifier: HNG1kJvh0EIO1XFX1eCL3VrS+V0SwOzgxjcBDZ85M/I= Subject key identifier: CB:39:70:D0:A7:14:D6:CF:88:95:46:7D:F7:B5:63:1E:4A:3B:3B:98 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2BBB52BD9415CC9C134FA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a18b44be-63d1-3f1d-9264-564a7e507182.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:bb:52:bd:94:15:cc:9c:13:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=f428c418-3bab-4fab-94ee-ea76b829f151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:74:13:1e:67:52:77:72:fa:96:00:a9:83: 72:26:71:37:90:91:b5:7b:05:22:cf:52:2e:57:d0: 55:8e:ef:1b:01:5e:29:bb:cc:39:a9:fd:97:26:a5: e1:d3:3a:c8:e4:9f:c0:71:d1:b8:03:55:32:0d:90: c9:87:85:fc:0c:dc:58:7f:0d:b1:75:62:4f:2c:d5: 1e:07:5c:b3:70:8b:4f:a5:db:1b:14:6f:5d:a7:cb: 75:d3:ff:e1:c9:97:91:0a:d6:67:20:d9:84:02:00: 0a:fb:58:5c:16:6c:c7:db:2e:c3:bf:48:2b:73:d6: 7b:47:19:28:3c:36:8f:3a:42:59:23:68:49:58:6a: 1f:8b:c0:40:be:61:d0:1f:1a:60:dd:01:56:17:08: 4a:42:5e:63:ab:e9:39:66:2a:43:66:e0:ce:a8:0c: e4:e8:fb:a4:38:52:07:da:5c:e9:fd:1e:22:a2:4f: ef:08:42:4f:d8:02:78:41:db:f0:da:60:52:20:bc: 80:ad:80:c4:24:1e:57:e4:a5:6f:c4:8c:11:63:e6: 6f:be:34:f1:e1:4a:93:5d:f9:5c:ab:15:77:57:31: 87:c0:2f:36:d9:d8:10:87:9b:b5:ff:59:03:ee:28: 01:e8:10:94:57:c7:86:85:ff:dc:03:04:5d:ef:48: 8c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:39:70:D0:A7:14:D6:CF:88:95:46:7D:F7:B5:63:1E:4A:3B:3B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a18b44be-63d1-3f1d-9264-564a7e507182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:94:ea:06:71:ce:0f:7f:1f:73:6f:32:62:f9:3d:88:99:74: f7:83:c8:cc:7a:a8:34:0f:81:12:3e:1c:c2:87:c4:fd:41:0a: ee:84:7b:d8:a1:cf:a9:1a:43:60:0d:6b:2c:a5:6f:f3:1e:af: d8:49:e2:5a:b3:9e:0e:d3:b0:ab:5a:be:b4:f4:9c:6c:14:14: 9b:e2:cb:30:3b:1a:0c:27:f1:66:f8:c4:53:e4:68:be:8c:60: f1:77:4e:58:06:f7:07:90:55:b9:2f:14:24:01:2a:31:74:af: 04:c9:93:84:ef:22:4a:80:6c:ee:0c:c1:0d:58:df:c5:82:80: f9:a5:2e:65:5a:de:21:95:9c:96:3a:82:9e:9d:98:7e:eb:62: e7:f5:06:48:87:5e:cb:26:2a:3a:12:86:17:0e:bc:dc:a3:48: 70:93:89:96:02:b0:4b:21:21:b3:ef:8b:66:17:c6:17:78:06: 71:31:bc:c0:27:f1:02:e8:83:cc:cf:59:cf:59:c6:02:2e:54: 42:6a:61:16:e0:0c:54:f7:bd:30:e6:d0:bd:05:c8:6f:d3:e4: c4:e1:2d:5e:c2:79:c8:0f:51:75:b4:10:df:8b:1e:c0:83:d5: 1c:f9:13:b3:92:f0:16:20:44:4d:74:1f:c2:1a:82:f9:8c:bc: f2:1f:94:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK7tSvZQVzJwTT6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjQyOGM0MTgtM2JhYi00ZmFiLTk0ZWUtZWE3NmI4MjlmMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDJ0Ex5nUndy+pYAqYNyJnE3kJG1ewUiz1Iu V9BVju8bAV4pu8w5qf2XJqXh0zrI5J/AcdG4A1UyDZDJh4X8DNxYfw2xdWJPLNUe B1yzcItPpdsbFG9dp8t10//hyZeRCtZnINmEAgAK+1hcFmzH2y7Dv0grc9Z7Rxko PDaPOkJZI2hJWGofi8BAvmHQHxpg3QFWFwhKQl5jq+k5ZipDZuDOqAzk6PukOFIH 2lzp/R4iok/vCEJP2AJ4Qdvw2mBSILyArYDEJB5X5KVvxIwRY+ZvvjTx4UqTXflc qxV3VzGHwC822dgQh5u1/1kD7igB6BCUV8eGhf/cAwRd70iMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs5cNCnFNbPiJVGffe1Yx5KOzuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTE4YjQ0YmUtNjNkMS0z ZjFkLTkyNjQtNTY0YTdlNTA3MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuU6gZxzg9/H3NvMmL5PYiZdPeDyMx6qDQPgRI+HMKHxP1BCu6Ee9ih z6kaQ2ANayylb/Mer9hJ4lqzng7TsKtavrT0nGwUFJviyzA7Ggwn8Wb4xFPkaL6M YPF3TlgG9weQVbkvFCQBKjF0rwTJk4TvIkqAbO4MwQ1Y38WCgPmlLmVa3iGVnJY6 gp6dmH7rYuf1BkiHXssmKjoShhcOvNyjSHCTiZYCsEshIbPvi2YXxhd4BnExvMAn 8QLog8zPWc9ZxgIuVEJqYRbgDFT3vTDm0L0FyG/T5MThLV7CecgPUXW0EN+LHsCD 1Rz5E7OS8BYgRE10H8IagvmMvPIflOo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:01 2025 by rpki-client