$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba174b33-108b-3d7a-b508-4c226394c6d0.roa File: ba174b33-108b-3d7a-b508-4c226394c6d0.roa (raw, json) Hash identifier: MZZ9uQjcwtZX2P9OQW28H/i4bqY0F3qWIY9ZlVAaz84= Subject key identifier: BE:51:2E:E8:27:30:A5:1B:7F:09:CB:2C:22:51:70:57:3C:95:29:F7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0FB6F97E9A7111A1ACEA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba174b33-108b-3d7a-b508-4c226394c6d0.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:fb:6f:97:e9:a7:11:1a:1a:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=8b0631ad-7594-4b4f-b8c0-be552c152b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:c5:ff:ff:4b:e7:d3:aa:5e:b9:40:c8:cd: d5:80:a6:93:00:33:c1:da:ed:5c:0d:e3:d4:77:76: 55:0f:10:47:73:36:1e:08:9e:51:ef:74:f3:4b:4e: 66:97:be:19:44:f5:e8:b6:00:68:d7:69:e2:14:8d: 03:65:1e:13:15:b2:9e:27:f7:76:2d:b9:ba:4c:21: 10:12:3a:60:f1:6a:ff:6a:2f:8a:61:a0:0e:96:bb: 25:d3:f6:9c:af:65:bd:52:44:9b:9e:6b:bf:0d:91: 61:b3:aa:30:9b:a5:49:0e:09:a3:25:65:26:e0:2f: 24:c2:e0:cf:3c:1a:a7:da:69:a7:19:88:ab:70:6c: b1:3d:47:00:ea:f8:6f:ab:4c:c4:5b:77:b5:33:56: 94:59:ce:3c:c6:46:72:a7:19:43:85:27:af:f5:72: c8:5d:43:92:00:1b:66:13:f5:0a:98:f3:37:a8:97: 56:d4:3d:b5:61:d5:84:48:23:82:08:48:ca:79:3e: 47:25:cb:48:bb:39:66:5c:14:10:5a:b5:d5:08:8f: 33:b2:d7:90:f9:bb:9d:2b:95:63:08:db:3a:14:fe: 7d:d9:e0:7f:99:bf:80:28:56:9a:ae:7a:b5:ca:d0: fb:2d:ed:55:99:5d:9e:e6:9f:02:27:be:ac:a1:e9: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:51:2E:E8:27:30:A5:1B:7F:09:CB:2C:22:51:70:57:3C:95:29:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba174b33-108b-3d7a-b508-4c226394c6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:31:c1:46:cb:8b:9a:be:22:c2:60:56:70:f9:ad:c7:72:ee: 70:d2:e0:1b:c2:8a:7f:c8:5e:57:40:2f:55:a6:e8:06:e5:41: 3b:c9:bb:62:40:85:ed:54:c5:a9:e1:85:a8:b4:0a:eb:85:72: db:78:c3:19:6a:34:95:e0:d8:ac:e0:4b:1d:3c:00:04:cb:80: 48:d1:1b:20:43:6d:35:64:5c:46:e4:a1:8f:75:ca:24:32:fc: ed:ba:4d:fb:db:c1:b9:60:89:13:dc:80:c4:23:05:f5:07:bf: bb:b1:16:7c:8b:79:6c:3a:89:dd:b1:ef:ec:e5:29:59:22:f2: bb:b2:c5:f2:5e:81:71:d7:cb:a5:49:66:7b:48:42:cb:3a:21: 41:e5:b1:dc:3a:25:ac:e7:37:f6:a8:71:eb:da:e9:f7:fa:16: 38:48:ed:1f:d1:4b:35:fb:b1:53:09:13:59:71:44:ab:8b:6b: b8:16:e3:1d:45:17:b1:28:a7:a8:bf:08:b2:d8:31:ba:91:31: fd:b0:db:53:ab:f2:22:66:71:1a:99:02:a7:07:9c:90:f9:86: 55:80:e8:f7:b8:51:8e:6b:c4:23:cb:43:97:31:ef:25:a7:05: f7:d8:79:ce:2b:00:44:e3:5d:df:99:ba:bf:89:c5:76:d6:6f: ed:00:61:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPtvl+mnERoazqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk OGIwNjMxYWQtNzU5NC00YjRmLWI4YzAtYmU1NTJjMTUyYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMHF//9L59OqXrlAyM3VgKaTADPB2u1cDePU d3ZVDxBHczYeCJ5R73TzS05ml74ZRPXotgBo12niFI0DZR4TFbKeJ/d2Lbm6TCEQ Ejpg8Wr/ai+KYaAOlrsl0/acr2W9UkSbnmu/DZFhs6owm6VJDgmjJWUm4C8kwuDP PBqn2mmnGYircGyxPUcA6vhvq0zEW3e1M1aUWc48xkZypxlDhSev9XLIXUOSABtm E/UKmPM3qJdW1D21YdWESCOCCEjKeT5HJctIuzlmXBQQWrXVCI8zsteQ+budK5Vj CNs6FP592eB/mb+AKFaarnq1ytD7Le1VmV2e5p8CJ76soelAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5RLugnMKUbfwnLLCJRcFc8lSn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmExNzRiMzMtMTA4Yi0z ZDdhLWI1MDgtNGMyMjYzOTRjNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIamMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAxwUbLi5q+IsJgVnD5rcdy7nDS4BvCin/IXldAL1Wm6AblQTvJu2JA he1Uxanhhai0CuuFctt4wxlqNJXg2KzgSx08AATLgEjRGyBDbTVkXEbkoY91yiQy /O26TfvbwblgiRPcgMQjBfUHv7uxFnyLeWw6id2x7+zlKVki8ruyxfJegXHXy6VJ ZntIQss6IUHlsdw6JaznN/aoceva6ff6FjhI7R/RSzX7sVMJE1lxRKuLa7gW4x1F F7Eop6i/CLLYMbqRMf2w21Or8iJmcRqZAqcHnJD5hlWA6Pe4UY5rxCPLQ5cx7yWn BffYec4rAETjXd+Zur+JxXbWb+0AYVE= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:32 2025 by rpki-client