$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa File: ae43273c-3272-3c44-8061-d922ad832252.roa (raw, json) Hash identifier: I3c9MS4/9Q3ojepvxufDWcJnC31mGLTlOt+0/hqKSA4= Subject key identifier: 0A:48:DA:85:E0:9F:67:02:51:82:12:19:76:91:A4:7F:9A:72:59:F5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858481F653AB94DA16433CDD07E60 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa Signing time: Sat 07 Dec 2024 02:00:39 +0000 ROA not before: Sat 07 Dec 2024 02:00:39 +0000 ROA not after: Fri 07 Mar 2025 02:00:39 +0000 asID: 395973 IP address blocks: 104.134.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:65:3a:b9:4d:a1:64:33:cd:d0:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Dec 7 02:00:39 2024 GMT Not After : Mar 7 02:00:39 2025 GMT Subject: CN=2a1836ac-b1cc-4d13-ac3d-de21b4227da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:e6:0e:8d:02:16:fa:ee:19:c1:59:33:dc: ca:e0:4d:08:b2:9f:2f:9f:d2:f4:0d:c9:93:8b:21: d9:0b:75:b7:d9:f6:39:f2:46:9b:ad:95:f3:97:05: 3e:7e:1f:3d:d3:95:ec:06:f9:4e:22:d7:c8:11:95: 99:4b:63:76:61:98:27:85:8a:ae:1d:16:13:91:47: bb:9e:0d:28:60:ef:18:7e:1e:82:01:61:9a:e1:fc: a4:d0:41:ff:c9:25:b6:9d:18:7c:b7:a3:60:66:f1: a8:aa:5c:60:5e:ed:28:03:4d:9f:5b:e7:aa:b3:34: 68:88:70:76:43:55:00:a9:65:66:75:a6:8c:f2:57: f1:23:9f:cb:ec:36:a2:94:24:22:b4:c6:18:0d:cb: ed:c3:60:be:5c:ed:a0:e5:c9:af:2a:a3:a2:dc:c2: af:3e:f6:1a:b8:7d:35:03:32:0e:46:a5:7e:fa:e0: cc:b5:0c:91:76:21:5d:4c:83:10:e1:4e:1a:6c:f4: cc:d8:8a:65:27:1a:6c:fd:f5:fd:d2:c5:72:32:ad: 8d:aa:e9:85:7b:18:f4:e8:32:22:e5:f8:ac:a7:ee: ad:bd:60:c3:c8:ad:33:b5:41:3c:f2:7e:2b:3d:a8: 0c:5c:f4:4b:64:fb:51:2f:dd:e5:ee:d3:5b:aa:a3: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:DA:85:E0:9F:67:02:51:82:12:19:76:91:A4:7F:9A:72:59:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f3:fc:6d:9f:bf:46:8a:a3:01:6a:23:59:06:c3:f1:a1:85: 58:f2:8a:2c:0f:da:51:ec:e8:3e:ae:6a:51:95:6c:01:c5:a4: 39:42:41:7b:c0:64:d3:94:95:9a:ae:f8:60:fa:62:02:91:95: 05:04:d1:48:90:f1:24:f3:0b:ba:28:db:33:c4:44:7b:fa:80: 20:9c:f1:40:83:71:38:52:2a:40:16:9b:93:bf:87:6d:79:cd: a8:d3:0d:26:17:59:21:0b:9f:83:94:15:80:0a:3b:3e:67:0e: 43:ae:c8:22:2f:ce:d3:e0:88:6e:cd:dc:8c:67:37:f1:af:76: 78:5a:f3:2b:7b:7e:7e:f7:47:7d:1d:86:6f:b8:92:70:f8:9e: 63:f9:0b:ab:b6:0f:37:21:1d:bf:1c:89:8c:c4:2e:ba:49:2f: a8:4c:c3:c7:c7:5e:24:97:56:38:e3:1b:ab:c5:52:a7:46:84: cc:59:50:0b:f9:a5:dc:e4:31:a2:4f:4b:6c:19:34:53:ce:3d: 35:ad:8e:d1:cf:4b:1c:1e:27:06:39:14:ef:94:b7:e1:76:77: b0:41:ad:20:32:e1:f6:4e:3d:c8:97:1a:f1:38:8e:1c:2a:6a: 19:1f:a5:51:16:c1:3d:69:ad:4b:c3:4d:88:94:67:4b:62:ab: d5:c4:ff:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTq5TaFkM83QfmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk MmExODM2YWMtYjFjYy00ZDEzLWFjM2QtZGUyMWI0MjI3ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwnmDo0CFvruGcFZM9zK4E0Isp8vn9L0DcmT iyHZC3W32fY58kabrZXzlwU+fh8905XsBvlOItfIEZWZS2N2YZgnhYquHRYTkUe7 ng0oYO8Yfh6CAWGa4fyk0EH/ySW2nRh8t6NgZvGoqlxgXu0oA02fW+eqszRoiHB2 Q1UAqWVmdaaM8lfxI5/L7DailCQitMYYDcvtw2C+XO2g5cmvKqOi3MKvPvYauH01 AzIORqV++uDMtQyRdiFdTIMQ4U4abPTM2IplJxps/fX90sVyMq2NqumFexj06DIi 5fisp+6tvWDDyK0ztUE88n4rPagMXPRLZPtRL93l7tNbqqPEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApI2oXgn2cCUYISGXaRpH+acln1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWU0MzI3M2MtMzI3Mi0z YzQ0LTgwNjEtZDkyMmFkODMyMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzz/G2fv0aKowFqI1kGw/GhhVjyiiwP2lHs6D6ualGVbAHFpDlCQXvA ZNOUlZqu+GD6YgKRlQUE0UiQ8STzC7oo2zPERHv6gCCc8UCDcThSKkAWm5O/h215 zajTDSYXWSELn4OUFYAKOz5nDkOuyCIvztPgiG7N3IxnN/Gvdnha8yt7fn73R30d hm+4knD4nmP5C6u2DzchHb8ciYzELrpJL6hMw8fHXiSXVjjjG6vFUqdGhMxZUAv5 pdzkMaJPS2wZNFPOPTWtjtHPSxweJwY5FO+Ut+F2d7BBrSAy4fZOPciXGvE4jhwq ahkfpVEWwT1prUvDTYiUZ0tiq9XE/0A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:57 2025 by rpki-client