$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa File: a8835133-fb2f-31b1-84bb-28bccfab0933.roa (raw, json) Hash identifier: jgbakR4PvxAo9m2IfBViejtzfuqr5SQ7fathhyV1zrs= Subject key identifier: C9:E8:36:6E:0F:BC:FA:C8:7C:5E:CF:1C:4B:04:F1:9C:40:BC:3E:D8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F51DFB77207E3F9D83C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f5:1d:fb:77:20:7e:3f:9d:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=387f436c-36f1-408f-bf5b-cef65e0515ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:ec:a5:13:9f:59:1b:d8:02:18:b6:99:65: 66:ce:0e:ab:8b:11:1b:c2:b4:ae:ec:11:2d:f0:28: 13:1b:bc:f5:81:24:52:33:cd:6c:ee:16:bb:21:8c: 0e:5c:df:3b:41:e2:0b:9f:7f:d6:4e:ca:46:60:4d: a7:cb:14:44:11:df:9a:07:8b:03:b1:65:e6:a1:92: 35:a4:4c:cc:49:ed:fe:54:7c:99:7a:26:8a:6e:4a: 26:4a:47:78:c4:97:63:db:2f:ef:c3:b3:d3:4d:77: 4b:5d:b6:b4:a2:f4:b1:9f:38:c8:5b:f3:07:58:04: 2d:71:21:33:63:9f:32:45:9b:56:cd:1d:e5:50:7e: 25:98:53:0b:cb:e1:32:dc:4b:1d:76:e7:25:98:8b: 14:e1:3e:7b:9f:1a:44:f1:87:3c:78:20:78:a3:4c: 01:d3:ae:3e:04:34:c0:04:6b:6c:30:69:9b:db:6b: 1c:f0:c4:28:5c:46:96:06:0e:01:f0:d0:c7:6a:8a: 8e:df:99:17:5d:a8:7f:d0:ec:48:c7:70:17:1e:2d: a8:f9:ee:1c:cb:27:00:ca:d5:99:8c:42:d3:63:0b: 30:c3:11:fe:b6:b7:75:11:64:51:06:3a:4f:f9:3d: 03:79:24:ce:b3:94:2c:33:21:f2:f1:44:50:3a:e4: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E8:36:6E:0F:BC:FA:C8:7C:5E:CF:1C:4B:04:F1:9C:40:BC:3E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:12:83:3f:f7:6c:f8:39:0e:50:ce:66:41:8e:cf:3e:28:7c: ce:74:00:bd:bf:96:9f:4b:9b:6e:80:21:54:a9:47:f5:ae:a9: cb:f7:c0:72:25:86:d4:f0:d2:3a:c5:a0:69:37:43:76:c4:62: c1:17:eb:29:da:ad:17:34:07:e6:34:a8:2c:45:06:1a:b5:52: 65:dc:49:bf:eb:66:26:c5:6e:a9:f6:95:05:2e:7f:4f:08:a9: 89:1c:c2:f6:4d:49:0c:22:45:5f:87:58:53:4e:8e:7f:85:7e: fb:3f:a3:ae:d5:2e:63:f5:50:0c:56:9e:2f:0b:d1:51:11:41: cd:16:a5:b3:2d:64:a2:46:f8:13:c2:a2:59:2b:23:7c:3f:12: bc:45:34:ca:91:22:6f:be:bb:df:f7:77:5e:5e:0d:d9:67:30: 0e:60:99:1f:7a:81:14:5c:4e:f6:dc:86:50:24:19:86:b9:7f: f7:54:f2:34:aa:51:ad:c7:15:8e:08:b8:13:a9:66:f0:9b:40: 82:ba:3b:e0:c0:5e:ca:f9:5d:53:30:03:28:c4:6e:42:ef:fe: 56:15:02:f6:f3:3a:27:48:1c:30:e4:30:f1:76:c1:0d:a1:86: 76:f6:f0:30:e8:f2:7a:b8:e6:9c:db:86:35:eb:90:d2:40:71: ce:12:cb:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPUd+3cgfj+dg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk Mzg3ZjQzNmMtMzZmMS00MDhmLWJmNWItY2VmNjVlMDUxNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6fspROfWRvYAhi2mWVmzg6rixEbwrSu7BEt 8CgTG7z1gSRSM81s7ha7IYwOXN87QeILn3/WTspGYE2nyxREEd+aB4sDsWXmoZI1 pEzMSe3+VHyZeiaKbkomSkd4xJdj2y/vw7PTTXdLXba0ovSxnzjIW/MHWAQtcSEz Y58yRZtWzR3lUH4lmFMLy+Ey3EsdduclmIsU4T57nxpE8Yc8eCB4o0wB064+BDTA BGtsMGmb22sc8MQoXEaWBg4B8NDHaoqO35kXXah/0OxIx3AXHi2o+e4cyycAytWZ jELTYwswwxH+trd1EWRRBjpP+T0DeSTOs5QsMyHy8URQOuRAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnoNm4PvPrIfF7PHEsE8ZxAvD7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTg4MzUxMzMtZmIyZi0z MWIxLTg0YmItMjhiY2NmYWIwOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoSgz/3bPg5DlDOZkGOzz4ofM50AL2/lp9Lm26AIVSpR/Wuqcv3wHIl htTw0jrFoGk3Q3bEYsEX6ynarRc0B+Y0qCxFBhq1UmXcSb/rZibFbqn2lQUuf08I qYkcwvZNSQwiRV+HWFNOjn+Ffvs/o67VLmP1UAxWni8L0VERQc0WpbMtZKJG+BPC olkrI3w/ErxFNMqRIm++u9/3d15eDdlnMA5gmR96gRRcTvbchlAkGYa5f/dU8jSq Ua3HFY4IuBOpZvCbQIK6O+DAXsr5XVMwAyjEbkLv/lYVAvbzOidIHDDkMPF2wQ2h hnb28DDo8nq45pzbhjXrkNJAcc4Sy7c= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:28 2025 by rpki-client