$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aebac6c9-b84d-34f7-a531-00adff290c22.roa File: aebac6c9-b84d-34f7-a531-00adff290c22.roa (raw, json) Hash identifier: 8isT1rrFpLD4C+pafNrekwymdYHer4MmR1jEPQCNXzo= Subject key identifier: 5E:94:9F:73:03:61:40:4E:3E:E7:1E:59:A8:B1:78:34:66:05:E3:69 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FB2A359CEF8168124A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aebac6c9-b84d-34f7-a531-00adff290c22.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fb:2a:35:9c:ef:81:68:12:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=748d72b5-e27a-454d-ad04-a3e1f71c20e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:e7:03:e1:0c:3e:79:a3:43:a6:61:59:da: 89:42:37:93:ec:a5:57:9f:11:96:ee:09:f8:5f:19: 25:4e:3d:97:3d:83:9b:26:c4:c4:ab:9d:53:0b:7a: 7d:c9:80:f5:01:8e:88:a2:82:6c:37:1b:6e:c4:76: 54:9b:0d:36:b5:4c:47:ec:0f:80:43:09:ea:f3:40: 61:43:6b:c7:13:aa:8b:c0:e1:73:c1:66:31:e9:d9: 9c:68:4b:d3:c6:f6:bc:fb:57:df:91:f6:cb:61:d3: a9:fb:b1:9c:ea:57:f2:51:7c:12:0a:1f:c8:cc:7d: ab:bd:56:cc:59:66:b8:cf:e5:22:ae:9e:27:24:b3: ac:f6:8b:43:ce:5b:71:cf:01:ea:0a:87:9f:fa:b2: 37:ba:42:41:86:c7:d5:a8:ab:ee:14:35:9b:dc:57: 5d:13:d5:67:0c:d1:9a:af:90:e0:0a:fb:88:54:03: 4c:1d:5f:7d:9b:9d:9d:d5:16:45:0f:9d:c1:b0:0b: 31:7f:1a:e4:ed:a0:51:24:ed:54:0b:b4:e1:7a:d6: 7a:0f:41:50:9e:96:54:13:52:f6:5a:15:5b:e5:fc: f1:f1:5e:dc:d5:f9:1a:51:46:b0:94:8c:0f:e6:1e: 56:ba:14:59:00:f6:b5:9a:83:01:9e:43:28:c7:4f: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:94:9F:73:03:61:40:4E:3E:E7:1E:59:A8:B1:78:34:66:05:E3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aebac6c9-b84d-34f7-a531-00adff290c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:11:fc:20:15:93:1e:26:49:8b:77:67:99:a7:7c:71:22:0e: d6:bb:55:1e:f1:2c:32:89:05:0e:a1:f7:c1:82:82:98:b3:3a: af:17:2a:d4:b9:21:e1:f2:43:1e:b8:78:94:d9:08:95:4b:50: f2:38:65:9d:55:68:9b:89:fc:ea:3c:ee:29:9d:fe:75:34:7e: 11:b9:3f:01:32:68:33:b0:16:63:de:3f:02:62:d1:7b:32:81: 0a:c0:a5:cd:62:2b:76:70:36:c3:f1:47:60:a4:96:40:79:36: 92:b7:84:01:26:bf:a3:0d:fa:4b:c8:0d:fe:d3:3c:74:aa:9d: fe:a9:e2:a8:0e:52:9f:ef:17:81:b4:6a:10:22:ed:4b:e1:89: aa:a3:04:4c:e4:05:0f:62:81:5c:bb:a7:a9:dd:69:63:b0:35: f5:98:42:c0:60:50:38:93:9a:60:ed:c3:5e:5a:18:2c:a0:72: bd:90:c7:76:0b:db:ec:2c:cd:79:7e:c1:39:bd:2f:68:e7:c3: dd:c3:f8:e7:04:54:14:0a:48:44:18:f7:c4:c2:b4:71:2f:30: 42:93:83:82:de:f6:41:3e:27:fb:d2:72:46:db:a4:8a:fd:ee: 12:62:fa:fb:83:54:51:01:ee:91:6f:d6:a2:d9:45:0d:8f:5f: cb:4a:0b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPsqNZzvgWgSSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NzQ4ZDcyYjUtZTI3YS00NTRkLWFkMDQtYTNlMWY3MWMyMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQTnA+EMPnmjQ6ZhWdqJQjeT7KVXnxGW7gn4 XxklTj2XPYObJsTEq51TC3p9yYD1AY6IooJsNxtuxHZUmw02tUxH7A+AQwnq80Bh Q2vHE6qLwOFzwWYx6dmcaEvTxva8+1ffkfbLYdOp+7Gc6lfyUXwSCh/IzH2rvVbM WWa4z+Uirp4nJLOs9otDzltxzwHqCoef+rI3ukJBhsfVqKvuFDWb3FddE9VnDNGa r5DgCvuIVANMHV99m52d1RZFD53BsAsxfxrk7aBRJO1UC7ThetZ6D0FQnpZUE1L2 WhVb5fzx8V7c1fkaUUawlIwP5h5WuhRZAPa1moMBnkMox0+pDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6Un3MDYUBOPuceWaixeDRmBeNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWViYWM2YzktYjg0ZC0z NGY3LWE1MzEtMDBhZGZmMjkwYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcR/CAVkx4mSYt3Z5mnfHEiDta7VR7xLDKJBQ6h98GCgpizOq8XKtS5 IeHyQx64eJTZCJVLUPI4ZZ1VaJuJ/Oo87imd/nU0fhG5PwEyaDOwFmPePwJi0Xsy gQrApc1iK3ZwNsPxR2CklkB5NpK3hAEmv6MN+kvIDf7TPHSqnf6p4qgOUp/vF4G0 ahAi7UvhiaqjBEzkBQ9igVy7p6ndaWOwNfWYQsBgUDiTmmDtw15aGCygcr2Qx3YL 2+wszXl+wTm9L2jnw93D+OcEVBQKSEQY98TCtHEvMEKTg4Le9kE+J/vSckbbpIr9 7hJi+vuDVFEB7pFv1qLZRQ2PX8tKC+s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:39 2025 by rpki-client