$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa File: ba5383e6-ea95-3586-ab25-2ba523d21d63.roa (raw, json) Hash identifier: oQb7VpeVm+UjQqgINZSLS4VY5Rsu9ZJjoyU7+6FEPxI= Subject key identifier: 36:B2:59:AA:33:9D:B3:D8:B5:E7:E7:78:73:6C:EB:81:9A:ED:18:03 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F65A649244ECA8A2424E80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:5a:64:92:44:ec:a8:a2:42:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=a7457d83-fd39-496e-8503-3e9c074bb87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:76:53:02:c2:fb:a4:c1:b7:81:06:e9:59: ef:3a:73:be:be:9f:ed:02:4d:05:f6:b1:d3:ee:73: a5:48:fe:e1:de:ee:67:57:7f:f2:e3:0a:06:c6:9f: 8f:61:a5:c6:cb:17:10:85:b6:99:ef:be:15:bb:b9: ed:0d:b6:ac:90:7a:2d:78:65:dc:52:c2:2d:9e:1a: a8:14:9d:a2:48:72:8e:62:cf:98:07:8d:7c:73:c7: cd:a1:c4:a0:f1:80:bd:f2:c9:ae:fb:20:32:8c:0c: 2e:0e:66:55:86:40:df:97:52:f7:d7:4e:fb:50:58: 7e:30:df:bf:70:11:69:ed:ac:38:e9:c0:c0:bf:5a: 37:38:22:13:c9:11:b7:f5:bd:85:83:aa:df:d4:0a: 75:25:3d:97:6e:24:4a:99:c0:cd:dd:e9:65:cc:e2: 01:7b:66:5d:78:82:3d:77:e8:30:1c:65:3e:32:8b: a6:30:2a:01:53:22:d0:84:ec:2e:d0:f8:4c:ce:04: 39:92:6b:90:44:b1:37:f4:a2:34:dc:54:6e:17:48: a8:7b:fe:b3:55:df:00:47:49:cf:86:e6:65:e7:d1: d0:af:58:7a:b7:bc:1c:71:f9:c3:8f:eb:ec:f9:a9: 46:df:2d:bf:c1:0a:2f:5f:eb:02:bf:87:62:b5:05: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:59:AA:33:9D:B3:D8:B5:E7:E7:78:73:6C:EB:81:9A:ED:18:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d9:c3:c9:ad:c1:39:28:5c:6b:f1:34:b3:93:45:07:03:e6: e9:c9:b8:bd:44:16:60:47:45:5a:ac:54:d9:06:99:be:30:6e: bd:df:ea:40:af:35:4a:c9:9b:0a:b3:10:c6:16:ba:3e:55:55: 4a:e2:05:f4:ce:ef:e1:80:8b:0b:b8:89:bd:98:84:bc:3a:31: e7:14:41:bb:ca:ed:a4:b3:da:63:30:a6:f4:cd:dc:6b:ca:33: b5:ff:69:16:ca:78:98:5c:14:1a:23:62:5b:7b:ad:40:f2:31: ff:84:5e:de:69:e0:97:2a:25:c3:67:fc:bf:85:a0:89:ed:b4: e1:60:c7:b8:03:02:d8:9a:5b:fe:4e:ef:1b:4e:39:a5:5a:e2: c5:89:8f:bb:a2:56:05:e0:13:66:cd:f9:71:0e:2e:dc:3e:6f: 04:b9:e0:b8:9d:75:11:3a:99:29:f7:7d:96:61:26:1e:6d:7d: 09:dd:9c:01:4b:20:d1:11:a7:b0:e0:cf:e0:fd:83:7a:e2:01: 1f:51:a1:c2:06:7e:1f:1a:96:c1:78:07:6f:bb:de:30:43:e9: 12:c6:c2:f6:03:54:1e:11:77:ba:d5:2c:3d:ff:c7:54:0a:20: ce:66:ea:81:fc:55:a7:28:2f:54:68:db:42:2f:ef:60:89:7a: 4f:39:62:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lpkkkTsqKJCToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk YTc0NTdkODMtZmQzOS00OTZlLTg1MDMtM2U5YzA3NGJiODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9J2UwLC+6TBt4EG6VnvOnO+vp/tAk0F9rHT 7nOlSP7h3u5nV3/y4woGxp+PYaXGyxcQhbaZ774Vu7ntDbaskHoteGXcUsItnhqo FJ2iSHKOYs+YB418c8fNocSg8YC98smu+yAyjAwuDmZVhkDfl1L31077UFh+MN+/ cBFp7aw46cDAv1o3OCITyRG39b2Fg6rf1Ap1JT2XbiRKmcDN3ellzOIBe2ZdeII9 d+gwHGU+MoumMCoBUyLQhOwu0PhMzgQ5kmuQRLE39KI03FRuF0ioe/6zVd8AR0nP huZl59HQr1h6t7wccfnDj+vs+alG3y2/wQovX+sCv4ditQUj2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDayWaoznbPYtefneHNs64Ga7RgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmE1MzgzZTYtZWE5NS0z NTg2LWFiMjUtMmJhNTIzZDIxZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETZw8mtwTkoXGvxNLOTRQcD5unJuL1EFmBHRVqsVNkGmb4wbr3f6kCv NUrJmwqzEMYWuj5VVUriBfTO7+GAiwu4ib2YhLw6MecUQbvK7aSz2mMwpvTN3GvK M7X/aRbKeJhcFBojYlt7rUDyMf+EXt5p4JcqJcNn/L+FoInttOFgx7gDAtiaW/5O 7xtOOaVa4sWJj7uiVgXgE2bN+XEOLtw+bwS54LiddRE6mSn3fZZhJh5tfQndnAFL INERp7Dgz+D9g3riAR9RocIGfh8alsF4B2+73jBD6RLGwvYDVB4Rd7rVLD3/x1QK IM5m6oH8VacoL1Ro20Iv72CJek85Yhs= -----END CERTIFICATE-----Generated at Sat Apr 5 04:58:40 2025 by rpki-client