$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa File: b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa (raw, json) Hash identifier: otNEkWzgMidg0bevH1NbqTobroEHE3XWmwTx7D7Wmy0= Subject key identifier: 03:3D:8C:E3:CE:F1:43:63:88:0C:45:D2:20:6D:1A:39:A7:A4:00:44 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E0C9D24A2366A62DB200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e0:c9:d2:4a:23:66:a6:2d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=b0e40165-423e-49a9-a87b-f07373580a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:6d:8e:26:62:0c:3b:2c:af:f6:c1:ad:87: 6d:84:6f:a2:a3:b6:f6:31:fd:cc:a4:9e:1d:e7:1e: 95:91:57:a5:61:af:20:31:f3:2f:3c:ee:8f:e7:2b: 4a:16:2b:b4:24:8c:e9:81:72:e1:06:f7:d9:d7:97: 9a:89:af:48:e8:29:9c:3b:aa:d1:7f:29:1c:0b:d0: 18:04:6b:13:77:e3:06:07:4e:c1:b3:9f:5c:a7:24: aa:50:b5:47:9c:65:fc:d7:9d:40:a7:f8:3c:41:d7: b1:7d:4a:2a:46:94:61:86:a0:0b:9b:21:f9:e0:73: b3:b4:14:86:29:45:c1:e4:b6:ab:31:1a:b9:ff:6c: 55:66:2d:49:f4:ed:ac:26:af:95:43:db:33:30:ae: db:96:7a:24:fb:a2:9e:c2:f2:d8:02:62:bc:02:54: 75:99:76:a7:1e:17:95:b0:15:7e:9d:87:78:cd:16: f3:44:00:c9:50:7a:18:08:1a:7a:07:ed:64:9f:a6: 8e:3f:fe:07:7e:06:04:50:81:1e:a0:ee:de:b2:fa: 1f:fd:d7:63:e3:7a:4d:71:e9:af:7d:80:1d:a5:39: 50:30:52:53:7a:5c:02:f3:48:12:b9:28:2d:b2:f5: f6:87:39:26:93:67:8a:70:e0:38:b0:35:25:b9:87: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3D:8C:E3:CE:F1:43:63:88:0C:45:D2:20:6D:1A:39:A7:A4:00:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7d:f3:61:bf:ea:da:ee:c8:c6:22:1f:ec:0d:94:60:c4:ca: f8:6a:96:d7:d5:ee:c7:fc:e8:41:38:30:da:bf:79:20:f2:f9: 06:93:10:a7:91:0d:41:07:92:df:d5:12:f8:37:0b:a1:48:ae: 57:ad:e6:8e:b1:2a:e8:ae:3f:41:39:42:dd:81:b1:fb:8f:4a: f4:d6:c9:be:66:f4:24:dd:70:4c:1a:a3:b9:e5:8d:ee:42:09: 53:40:1d:1a:29:cb:ca:0e:4d:3d:53:d4:13:ee:22:cb:22:01: 52:1a:a6:04:26:7e:84:97:98:cf:c5:f6:44:79:6f:cb:ce:05: 4e:1f:de:72:8b:30:40:14:90:13:0d:69:5e:b1:d3:da:45:f8: 6b:82:b5:0c:1c:07:f2:d6:12:7e:e7:1f:ae:4f:bb:e4:66:b2: 5a:7a:d9:d9:a7:8a:8b:0c:5e:5b:67:06:6e:ae:39:5c:e4:38: 1a:c5:22:4f:2e:da:ec:b3:c4:b4:bb:53:46:80:2f:78:d6:f6: 12:13:03:ab:8f:0e:bc:37:b9:da:2a:19:dc:be:e2:d3:50:e3: 06:85:10:17:10:04:68:de:53:94:e7:11:5e:c9:c8:5e:d8:81: df:5d:c5:16:30:72:f2:f4:56:53:f3:ca:67:ec:23:fc:f8:e9: 81:c9:a9:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wODJ0kojZqYtsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YjBlNDAxNjUtNDIzZS00OWE5LWE4N2ItZjA3MzczNTgwYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ltjiZiDDssr/bBrYdthG+io7b2Mf3MpJ4d 5x6VkVelYa8gMfMvPO6P5ytKFiu0JIzpgXLhBvfZ15eaia9I6CmcO6rRfykcC9AY BGsTd+MGB07Bs59cpySqULVHnGX8151Ap/g8QdexfUoqRpRhhqALmyH54HOztBSG KUXB5LarMRq5/2xVZi1J9O2sJq+VQ9szMK7blnok+6KewvLYAmK8AlR1mXanHheV sBV+nYd4zRbzRADJUHoYCBp6B+1kn6aOP/4HfgYEUIEeoO7esvof/ddj43pNcemv fYAdpTlQMFJTelwC80gSuSgtsvX2hzkmk2eKcOA4sDUluYfUpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM9jOPO8UNjiAxF0iBtGjmnpABEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjg1OTRhMWQtODhlOC0z ZTI0LTliMDktNjRlMGNiZTI1MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ982G/6truyMYiH+wNlGDEyvhqltfV7sf86EE4MNq/eSDy+QaTEKeR DUEHkt/VEvg3C6FIrlet5o6xKuiuP0E5Qt2BsfuPSvTWyb5m9CTdcEwao7nlje5C CVNAHRopy8oOTT1T1BPuIssiAVIapgQmfoSXmM/F9kR5b8vOBU4f3nKLMEAUkBMN aV6x09pF+GuCtQwcB/LWEn7nH65Pu+Rmslp62dmniosMXltnBm6uOVzkOBrFIk8u 2uyzxLS7U0aAL3jW9hITA6uPDrw3udoqGdy+4tNQ4waFEBcQBGjeU5TnEV7JyF7Y gd9dxRYwcvL0VlPzymfsI/z46YHJqZc= -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:29 2025 by rpki-client