$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba74a687-cd45-3577-aaf0-c5080f1c2996.roa File: ba74a687-cd45-3577-aaf0-c5080f1c2996.roa (raw, json) Hash identifier: jodMXBgJaIyyasljzrF9kektl28FgGdJLL5/61p7GPU= Subject key identifier: 74:C7:34:08:4F:14:B7:7B:E2:3D:9D:13:A6:2C:30:B7:43:93:90:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64A37FAE65F3AD5720AA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba74a687-cd45-3577-aaf0-c5080f1c2996.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4a:37:fa:e6:5f:3a:d5:72:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=b4e9ec8a-4cc9-4edc-9a7b-ded37b8115a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:ec:29:4d:0e:88:65:06:00:d2:9f:81:a6: 73:65:9b:3b:1a:d3:a4:c3:74:cf:8c:ef:67:bd:9c: d5:c6:aa:46:3d:2d:e8:57:74:d8:6a:3b:9c:b5:72: 1c:20:cd:fd:45:3d:32:fd:8e:83:ec:64:5f:9f:bd: 19:f6:27:f0:41:67:f7:65:84:8c:a8:2c:18:78:20: d0:ec:a9:a8:15:e7:0d:c3:34:dd:85:47:c3:24:87: 8e:5f:d3:25:71:28:ad:cd:40:32:2a:02:6e:2a:35: ab:c8:a6:26:f5:05:ba:df:3d:98:05:f0:e3:85:ba: 22:bf:0c:cd:fa:3e:e6:f0:4d:7e:50:da:24:d7:4f: 70:c6:64:01:8c:f1:05:24:6c:2b:aa:3f:8e:7d:87: 42:1c:2c:38:b4:67:00:07:45:b6:94:b5:8e:a4:6e: 2c:86:8a:7b:3c:55:f4:25:07:04:8b:c6:51:43:95: 88:7b:f9:45:c1:6b:ac:b1:16:ca:d7:20:fb:b4:ca: eb:b7:19:1d:24:bb:93:b7:c4:19:13:b1:85:91:df: 4d:30:05:fb:13:ac:d5:7e:b5:e1:77:08:46:cb:b1: 12:eb:99:86:e9:67:26:18:f5:64:60:45:c6:0a:75: 84:12:c5:98:f5:6d:28:c7:25:55:f0:9d:ce:3a:47: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:34:08:4F:14:B7:7B:E2:3D:9D:13:A6:2C:30:B7:43:93:90:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba74a687-cd45-3577-aaf0-c5080f1c2996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ee:10:0d:05:d9:cd:d1:a4:86:d0:98:5c:5c:0d:30:fc:3a: 4a:ce:cf:4d:89:04:4b:ef:42:53:1f:ff:35:f3:8c:20:8f:54: c8:03:e6:6b:b0:da:5f:23:8f:64:5b:18:99:f1:61:6b:25:6f: 7d:80:80:3c:66:03:4d:02:53:b6:84:cc:4f:65:63:a4:e9:ba: 38:09:76:1b:9d:e3:c4:e0:df:83:6e:fa:9f:93:b5:bf:38:b7: 3e:b9:58:4e:b7:5a:74:08:a2:95:c1:05:7e:7e:4c:c7:2f:f5: 59:d0:98:f4:3c:18:3f:a6:0a:99:83:3b:93:2c:56:1c:b8:f7: 6c:46:fb:25:7a:60:c9:7a:85:ca:cc:e2:44:88:31:f5:fd:5c: ee:28:0c:f3:40:de:1c:bc:2b:50:f0:d4:0a:12:d7:15:b6:3a: d2:71:c9:99:36:7a:c5:d6:b4:c0:a4:be:cc:0f:0e:dd:92:33: 3b:05:d8:91:5c:26:45:a0:78:06:8b:d9:f7:29:82:98:3e:5f: 1d:26:0f:af:d5:85:40:48:35:5a:32:d8:e1:41:28:40:54:26: 9f:04:1c:65:9a:06:84:f2:7a:0b:85:bc:e7:74:09:90:d4:c8: 08:92:7b:7e:0a:c2:9a:97:fd:64:dc:1e:54:82:46:a9:16:4e: 88:5a:0e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9ko3+uZfOtVyCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk YjRlOWVjOGEtNGNjOS00ZWRjLTlhN2ItZGVkMzdiODExNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrsKU0OiGUGANKfgaZzZZs7GtOkw3TPjO9n vZzVxqpGPS3oV3TYajuctXIcIM39RT0y/Y6D7GRfn70Z9ifwQWf3ZYSMqCwYeCDQ 7KmoFecNwzTdhUfDJIeOX9MlcSitzUAyKgJuKjWryKYm9QW63z2YBfDjhboivwzN +j7m8E1+UNok109wxmQBjPEFJGwrqj+OfYdCHCw4tGcAB0W2lLWOpG4shop7PFX0 JQcEi8ZRQ5WIe/lFwWussRbK1yD7tMrrtxkdJLuTt8QZE7GFkd9NMAX7E6zVfrXh dwhGy7ES65mG6WcmGPVkYEXGCnWEEsWY9W0oxyVV8J3OOkfOPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTHNAhPFLd74j2dE6YsMLdDk5C/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmE3NGE2ODctY2Q0NS0z NTc3LWFhZjAtYzUwODBmMWMyOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfuEA0F2c3RpIbQmFxcDTD8OkrOz02JBEvvQlMf/zXzjCCPVMgD5muw 2l8jj2RbGJnxYWslb32AgDxmA00CU7aEzE9lY6TpujgJdhud48Tg34Nu+p+Ttb84 tz65WE63WnQIopXBBX5+TMcv9VnQmPQ8GD+mCpmDO5MsVhy492xG+yV6YMl6hcrM 4kSIMfX9XO4oDPNA3hy8K1Dw1AoS1xW2OtJxyZk2esXWtMCkvswPDt2SMzsF2JFc JkWgeAaL2fcpgpg+Xx0mD6/VhUBINVoy2OFBKEBUJp8EHGWaBoTyeguFvOd0CZDU yAiSe34KwpqX/WTcHlSCRqkWTohaDjY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:54 2025 by rpki-client