$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a78d0c6d-0744-3547-990b-6b44e5532c90.roa File: a78d0c6d-0744-3547-990b-6b44e5532c90.roa (raw, json) Hash identifier: cMWeLyK9vwJSqWJP5/poYQ4b8RnV0bAKw7V97D2iQ3s= Subject key identifier: 3F:88:8F:6A:9B:15:2B:3B:B1:1C:8D:88:D1:C2:5A:E1:D0:23:77:D7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0EA25E8076CD8F0E25680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a78d0c6d-0744-3547-990b-6b44e5532c90.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:ea:25:e8:07:6c:d8:f0:e2:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=9948a75e-3a13-4d0e-bbb5-181ab95d2156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:33:2b:01:30:12:13:23:14:12:0a:f7:b8: 11:b0:0c:e1:45:26:ab:be:7b:e7:43:67:16:94:16: 10:42:71:07:0b:f9:bd:fc:c3:94:5c:4f:bc:af:b5: cf:43:93:02:71:cf:ee:97:ef:68:d2:01:e6:bc:02: 81:44:f8:7c:ec:d8:4d:0a:9c:1c:25:0c:6e:26:b0: cf:ca:8e:1e:ff:41:37:88:e6:b4:4d:23:53:2d:28: 36:26:f0:b2:c9:e7:18:40:42:b9:82:fe:ce:c7:09: e5:09:5a:7b:53:98:99:5e:2b:b1:a6:86:64:98:dd: 7d:40:cf:a5:6e:d5:a1:74:64:51:6f:76:36:ca:84: 0e:c6:35:0f:a2:31:50:98:61:9b:2c:e5:10:f9:51: e0:44:52:0b:57:45:e3:86:28:38:d0:40:d3:46:00: a8:66:48:88:ae:82:0b:2b:d4:c9:b3:28:c9:25:b8: 59:a4:a7:85:70:22:93:8e:ab:f3:56:58:78:57:18: 13:bd:ad:ff:96:8c:9c:42:52:58:15:a9:dc:ed:33: 01:a3:a6:38:2c:d4:72:3d:08:ce:9a:e9:62:fc:ac: 39:eb:c5:53:78:ad:e6:42:ca:6f:4b:88:70:fc:aa: b2:78:c9:ac:96:d2:6e:76:ba:c3:40:89:06:88:9f: 21:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:8F:6A:9B:15:2B:3B:B1:1C:8D:88:D1:C2:5A:E1:D0:23:77:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a78d0c6d-0744-3547-990b-6b44e5532c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:10:94:1b:99:75:cb:f6:f2:4e:25:d1:4a:dc:1f:a4:fc:29: b7:22:73:e6:cd:c5:c4:00:fd:ce:8b:fe:6b:53:db:a7:f0:84: 0b:2a:78:f5:07:cd:32:93:74:ac:bc:7d:2d:d5:eb:bf:55:92: a3:db:af:b4:43:69:70:e9:21:15:c1:55:bd:24:2e:3c:80:0e: f0:1a:1d:db:ff:33:cc:e7:d2:d7:8c:cf:bf:4b:fb:97:cf:ea: d3:86:12:0d:51:2b:15:62:a3:0a:22:5c:d2:e5:f2:88:ad:6c: fd:59:ba:8f:aa:b5:5f:b7:e8:66:f9:65:66:fb:a7:4b:fb:9f: 94:3a:82:e8:5d:3b:e7:3d:a6:43:d6:0f:4e:cf:eb:37:7a:91: dc:75:a6:88:30:b6:8a:1d:75:29:16:d3:8a:d4:b3:3f:5f:af: 90:3f:df:ea:e4:70:74:66:b1:e8:82:3a:89:ef:38:7c:a0:93: 40:fa:80:d4:c6:e8:5f:7d:99:a7:10:06:42:88:fc:63:01:e7: 05:ce:02:8f:da:01:9a:78:a2:f7:cc:41:ac:7c:35:0c:b7:f9: 36:d4:7c:18:10:40:54:12:de:b2:04:19:1e:45:0f:a2:4a:82: 1e:c0:e7:33:7b:6e:42:4d:9f:b3:ca:bb:60:69:9d:85:ff:38: 28:98:97:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOol6Ads2PDiVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk OTk0OGE3NWUtM2ExMy00ZDBlLWJiYjUtMTgxYWI5NWQyMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwYzKwEwEhMjFBIK97gRsAzhRSarvnvnQ2cW lBYQQnEHC/m9/MOUXE+8r7XPQ5MCcc/ul+9o0gHmvAKBRPh87NhNCpwcJQxuJrDP yo4e/0E3iOa0TSNTLSg2JvCyyecYQEK5gv7OxwnlCVp7U5iZXiuxpoZkmN19QM+l btWhdGRRb3Y2yoQOxjUPojFQmGGbLOUQ+VHgRFILV0Xjhig40EDTRgCoZkiIroIL K9TJsyjJJbhZpKeFcCKTjqvzVlh4VxgTva3/loycQlJYFanc7TMBo6Y4LNRyPQjO muli/Kw568VTeK3mQspvS4hw/KqyeMmsltJudrrDQIkGiJ8hnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+Ij2qbFSs7sRyNiNHCWuHQI3fXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTc4ZDBjNmQtMDc0NC0z NTQ3LTk5MGItNmI0NGU1NTMyYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQQlBuZdcv28k4l0UrcH6T8Kbcic+bNxcQA/c6L/mtT26fwhAsqePUH zTKTdKy8fS3V679VkqPbr7RDaXDpIRXBVb0kLjyADvAaHdv/M8zn0teMz79L+5fP 6tOGEg1RKxViowoiXNLl8oitbP1Zuo+qtV+36Gb5ZWb7p0v7n5Q6guhdO+c9pkPW D07P6zd6kdx1pogwtooddSkW04rUsz9fr5A/3+rkcHRmseiCOonvOHygk0D6gNTG 6F99macQBkKI/GMB5wXOAo/aAZp4ovfMQax8NQy3+TbUfBgQQFQS3rIEGR5FD6JK gh7A5zN7bkJNn7PKu2BpnYX/OCiYl2g= -----END CERTIFICATE-----Generated at Fri Mar 14 11:13:39 2025 by rpki-client