$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a513bfba-4e81-320e-96fb-997df554f5f3.roa File: a513bfba-4e81-320e-96fb-997df554f5f3.roa (raw, json) Hash identifier: G8QJKSqN32qBJFuPE8fZKdzvrgbNr7iSMOTivgJMik4= Subject key identifier: 95:51:2F:CE:6B:23:71:58:B6:0A:E2:01:3A:30:6C:91:6A:79:6F:29 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBCD6CEC35C3C806CAC240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a513bfba-4e81-320e-96fb-997df554f5f3.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cd:6c:ec:35:c3:c8:06:ca:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=ef0f4a83-0c23-44a6-b806-84dde3df550c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:e2:11:5d:ba:6b:be:05:19:84:ff:d7:f8: f0:ce:7d:a4:c5:67:fe:34:63:28:e4:28:d0:e0:bc: 33:2d:4b:10:f5:ae:ca:b9:e5:28:43:4e:16:5e:77: 7d:13:8f:c3:74:71:1c:3b:21:0c:8d:e8:f8:e4:9d: 76:c7:e4:30:78:88:9c:f1:8f:97:86:86:6d:ce:31: c7:9d:a3:50:69:3a:0a:6d:1c:dd:26:77:ec:99:f2: 7b:91:50:a3:20:f9:07:81:b2:7d:6b:0c:4f:5c:40: 41:37:d0:6c:fb:f0:20:bb:de:28:3a:d1:55:aa:4a: 31:88:25:2f:4d:c6:98:01:02:1b:ed:eb:96:02:f4: 91:c0:81:d8:aa:dc:42:89:4c:2e:b0:eb:bf:57:4c: c0:63:69:3d:ff:ec:d6:da:4b:7d:96:89:1c:8e:16: 4e:01:7a:3d:24:88:48:8f:d5:ef:8b:85:41:f9:57: d5:64:eb:6b:cb:38:8b:f1:04:96:d5:19:ab:20:fe: d4:9d:13:87:4c:41:6d:21:84:ef:69:29:25:16:0a: 89:e0:b1:54:03:88:45:57:2d:39:c7:ed:9d:2a:03: b8:da:07:a2:76:14:db:69:b8:f7:c5:e7:6a:ff:3a: 5f:08:7f:33:b4:5f:60:93:88:0e:6a:59:50:b0:50: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:2F:CE:6B:23:71:58:B6:0A:E2:01:3A:30:6C:91:6A:79:6F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a513bfba-4e81-320e-96fb-997df554f5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dc:eb:f9:2c:d0:69:18:71:76:61:f6:61:66:6a:b1:4b:6e: c7:7e:57:2e:81:34:f2:24:64:57:0b:04:d6:33:47:54:df:f3: 11:3e:51:fa:90:ab:f2:6f:3e:b8:d8:dd:2c:ca:96:12:ef:23: c3:df:48:87:bf:34:36:9c:c9:17:5b:a1:4a:6a:39:30:fb:ef: 2a:c8:c0:4d:a8:3d:39:aa:6c:cf:81:98:74:25:a2:a7:77:d5: b4:a3:d1:d3:d1:48:92:b4:4f:7a:a5:1d:11:35:e3:80:75:58: 12:8f:38:83:95:40:98:42:a4:f1:4e:5c:f9:b1:a2:7a:ff:a5: 67:93:96:41:0b:ed:6d:91:8d:84:a8:6f:00:60:1a:57:1d:38: 01:b2:30:70:81:9c:ee:e5:c8:94:a7:b1:0e:78:1b:f2:52:78: b3:6f:f2:60:4f:88:50:a2:87:7b:b9:be:a2:3c:2c:ef:4b:ff: 4d:f9:68:13:43:cb:90:21:14:1a:78:ab:35:45:7e:29:ce:fe: 77:b0:03:c0:e4:c4:91:36:03:57:2f:86:99:c5:4a:0e:a4:63: 90:31:5e:d7:f8:e1:02:5e:2d:35:46:a8:28:1f:80:e7:81:d9: 85:bd:23:0b:0b:6a:77:26:b4:a5:8b:18:d2:d2:51:c7:b6:3c: 9d:d9:6f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/681s7DXDyAbKwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZWYwZjRhODMtMGMyMy00NGE2LWI4MDYtODRkZGUzZGY1NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg03iEV26a74FGYT/1/jwzn2kxWf+NGMo5CjQ 4LwzLUsQ9a7KueUoQ04WXnd9E4/DdHEcOyEMjej45J12x+QweIic8Y+XhoZtzjHH naNQaToKbRzdJnfsmfJ7kVCjIPkHgbJ9awxPXEBBN9Bs+/Agu94oOtFVqkoxiCUv TcaYAQIb7euWAvSRwIHYqtxCiUwusOu/V0zAY2k9/+zW2kt9lokcjhZOAXo9JIhI j9Xvi4VB+VfVZOtryziL8QSW1RmrIP7UnROHTEFtIYTvaSklFgqJ4LFUA4hFVy05 x+2dKgO42geidhTbabj3xedq/zpfCH8ztF9gk4gOallQsFCc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVRL85rI3FYtgriATowbJFqeW8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTUxM2JmYmEtNGU4MS0z MjBlLTk2ZmItOTk3ZGY1NTRmNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHc6/ks0GkYcXZh9mFmarFLbsd+Vy6BNPIkZFcLBNYzR1Tf8xE+UfqQ q/JvPrjY3SzKlhLvI8PfSIe/NDacyRdboUpqOTD77yrIwE2oPTmqbM+BmHQloqd3 1bSj0dPRSJK0T3qlHRE144B1WBKPOIOVQJhCpPFOXPmxonr/pWeTlkEL7W2RjYSo bwBgGlcdOAGyMHCBnO7lyJSnsQ54G/JSeLNv8mBPiFCih3u5vqI8LO9L/035aBND y5AhFBp4qzVFfinO/newA8DkxJE2A1cvhpnFSg6kY5AxXtf44QJeLTVGqCgfgOeB 2YW9IwsLancmtKWLGNLSUce2PJ3Zbz4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:24 2025 by rpki-client