$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa File: ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa (raw, json) Hash identifier: H4z3H/qPNpKGnCEzW0IGEVaCQcA6nYkIpUniyJnFwxw= Subject key identifier: 3F:33:8D:6D:E5:E9:B9:94:7A:B2:16:79:9E:30:2E:2E:99:37:DC:4B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2BBA44C4506C8944AAB1F0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:ba:44:c4:50:6c:89:44:aa:b1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=2ec128a3-630d-44d5-9ae5-9583716cdf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:ee:c0:ae:eb:bd:57:7d:bc:59:bd:dc:91: 99:2b:c6:5e:63:5a:cb:c5:64:bd:a3:c6:1f:ec:6b: ae:2a:6f:eb:b1:b7:9a:84:1a:2d:f6:ec:b4:e0:1a: a7:b0:a5:8e:92:96:80:98:75:ad:68:bd:92:78:d6: f9:48:b1:1f:e4:95:e0:ee:c8:d8:73:89:4f:25:3f: 11:8d:d2:80:29:d8:ca:0a:ae:16:80:18:7d:cf:7f: 11:83:c2:6c:cd:c4:d8:6e:1e:20:6f:6c:7a:a4:23: 4d:ad:f0:86:ce:4a:d2:8d:06:47:b9:62:19:43:63: 44:fc:01:a6:9c:5c:0a:07:de:ff:3e:af:7a:e4:ad: 22:a3:a0:af:4c:b8:0b:61:18:1b:b1:5e:22:41:c3: df:72:6e:05:94:42:2b:7f:4b:da:04:eb:ad:eb:c2: 96:80:8c:b2:49:53:78:77:49:af:09:f6:f5:35:e9: 88:0c:e6:09:58:b4:19:f4:c4:cc:69:7e:29:e9:6c: 39:21:32:05:4a:3e:9b:97:76:e0:6c:7f:7b:e9:ce: d4:20:e4:16:05:3e:a3:d7:ac:a6:da:18:e2:a6:0f: 23:04:71:ee:36:90:be:74:9a:07:9e:1f:a2:aa:0b: 08:c5:a9:64:5f:33:31:5c:bc:2f:64:8e:d4:1d:f0: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:33:8D:6D:E5:E9:B9:94:7A:B2:16:79:9E:30:2E:2E:99:37:DC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab8449f9-1f56-3031-aec7-d23b008e6c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:08:d5:0d:f7:64:99:33:26:87:6f:14:66:0c:cc:a4:e7:5a: 96:6e:cb:03:9a:3a:c3:91:2d:3b:38:38:fd:ef:5a:25:2c:ac: 21:d0:ea:b4:85:c0:5a:36:10:c0:77:91:96:54:ce:e0:ad:dd: dc:b5:d7:e8:a8:98:78:04:b2:20:83:8f:9c:22:a4:be:94:b1: 34:56:4b:dd:d8:b8:c7:c8:55:42:ee:9c:69:43:f9:0b:3f:5f: ab:d8:be:23:8d:be:f1:df:c5:40:38:32:29:ff:67:b1:13:4e: 28:13:61:79:ca:fe:c8:47:16:5a:85:27:74:43:94:35:c8:52: 1e:af:8f:a7:8b:4e:1a:c5:76:b7:9c:d2:e2:d0:3c:de:4b:0f: a8:a8:ea:62:ea:ff:fb:f2:3d:59:70:63:11:15:8b:59:11:f2: 0a:80:24:53:83:92:ad:64:39:18:10:1f:f9:80:63:83:8b:9f: 66:97:78:7e:af:38:c7:d8:13:e9:e1:bd:cc:3f:8c:2e:8b:1b: a8:0b:c9:b6:27:f1:15:6a:f4:ff:4b:a6:a3:52:5c:4d:9c:ce: 6f:9c:77:73:ec:18:2f:90:7f:41:ce:b1:2f:b4:c0:44:b2:5d: 75:0f:a8:40:f3:d1:ce:50:76:3d:21:d3:30:20:6b:76:97:07: 05:12:f2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK7pExFBsiUSqsfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MmVjMTI4YTMtNjMwZC00NGQ1LTlhZTUtOTU4MzcxNmNkZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTfuwK7rvVd9vFm93JGZK8ZeY1rLxWS9o8Yf 7GuuKm/rsbeahBot9uy04BqnsKWOkpaAmHWtaL2SeNb5SLEf5JXg7sjYc4lPJT8R jdKAKdjKCq4WgBh9z38Rg8JszcTYbh4gb2x6pCNNrfCGzkrSjQZHuWIZQ2NE/AGm nFwKB97/Pq965K0io6CvTLgLYRgbsV4iQcPfcm4FlEIrf0vaBOut68KWgIyySVN4 d0mvCfb1NemIDOYJWLQZ9MTMaX4p6Ww5ITIFSj6bl3bgbH976c7UIOQWBT6j16ym 2hjipg8jBHHuNpC+dJoHnh+iqgsIxalkXzMxXLwvZI7UHfBqMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8zjW3l6bmUerIWeZ4wLi6ZN9xLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWI4NDQ5ZjktMWY1Ni0z MDMxLWFlYzctZDIzYjAwOGU2YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAI1Q33ZJkzJodvFGYMzKTnWpZuywOaOsORLTs4OP3vWiUsrCHQ6rSF wFo2EMB3kZZUzuCt3dy11+iomHgEsiCDj5wipL6UsTRWS93YuMfIVULunGlD+Qs/ X6vYviONvvHfxUA4Min/Z7ETTigTYXnK/shHFlqFJ3RDlDXIUh6vj6eLThrFdrec 0uLQPN5LD6io6mLq//vyPVlwYxEVi1kR8gqAJFODkq1kORgQH/mAY4OLn2aXeH6v OMfYE+nhvcw/jC6LG6gLybYn8RVq9P9LpqNSXE2czm+cd3PsGC+Qf0HOsS+0wESy XXUPqEDz0c5Qdj0h0zAga3aXBwUS8i4= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:47 2025 by rpki-client