$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa File: bbc23896-de06-3c39-806b-499d05c366e6.roa (raw, json) Hash identifier: G4NESMVy8+4+FCy4jrmTIQLxMUvA2esMU7ft/iQzcos= Subject key identifier: 5C:5A:1E:BD:B8:22:09:56:CC:5F:90:13:28:BD:45:BE:FA:76:F2:55 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBCEA2FEF8868B2A6A1300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 395973 IP address blocks: 104.134.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:ce:a2:fe:f8:86:8b:2a:6a:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=707d1bcb-d192-4d2f-ad2e-f98b353b2db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:c5:da:52:94:38:2d:d6:3d:21:04:99:d5: 6e:2d:a9:89:7a:4a:55:67:c3:a9:f9:41:6b:c2:60: 09:5d:c7:6d:11:ea:dd:ee:c3:81:80:f9:c3:83:e1: a5:b3:e7:04:38:f2:80:72:74:f1:81:37:c7:f6:fe: 6b:30:91:ca:a4:60:1e:9f:a5:63:37:d5:33:8e:93: a9:c1:c0:8d:25:ee:39:fd:70:d7:43:00:95:db:7a: 41:f4:cb:e8:2e:16:96:a8:71:c3:a4:22:8c:4c:1b: 9b:06:c6:f9:25:c0:67:7b:33:bf:21:c8:61:25:41: 03:27:ca:5f:9b:cf:6e:1c:3c:d7:f7:0a:bf:23:af: 96:bf:7a:b5:50:98:4b:f5:5e:3d:18:33:69:a2:2f: f7:49:78:74:cb:c9:d7:0e:1e:20:b5:49:71:92:82: 64:40:e8:12:66:7c:f5:ae:2e:97:be:d0:cd:8a:fa: 10:c0:fb:f5:95:f4:5f:00:65:47:af:75:72:cf:ca: 9c:e3:6f:0d:89:54:47:91:ae:38:80:11:97:bb:e3: 87:db:90:a8:e3:a6:6e:86:f9:6a:1b:17:d2:07:0b: ff:b3:71:9b:99:63:c7:65:27:ac:b1:e6:32:b7:bb: 08:a6:97:50:72:d2:34:a2:4a:a6:85:8c:39:3c:e9: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5A:1E:BD:B8:22:09:56:CC:5F:90:13:28:BD:45:BE:FA:76:F2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:96:b4:13:48:ef:0d:39:5f:98:27:93:f6:7d:fc:79:89:35: 9c:ca:04:f8:fe:0a:d3:cc:e2:6e:35:db:cc:0b:28:44:27:02: 82:a1:71:bc:52:06:a4:73:d7:87:f8:88:85:3b:98:78:43:17: 0a:89:31:0b:61:ff:9f:8c:08:be:d4:a4:5f:bd:62:a3:f9:46: d3:0a:95:f0:17:3f:f4:36:69:23:1b:b1:e4:11:78:a5:af:75: 2f:15:26:77:57:0e:8f:90:8b:4d:9a:99:66:ab:57:bd:03:03: 32:e6:ef:21:c5:55:b1:e3:87:5c:5f:8b:bf:b3:76:25:15:01: f8:84:b4:d3:7a:01:22:aa:6b:5d:83:a6:22:11:39:7d:7f:0b: 02:0d:b0:2f:bf:3a:da:db:6a:af:b3:45:ee:95:b6:e3:ac:54: 38:73:ad:24:eb:83:cd:f0:10:16:29:e4:9a:ed:84:20:b1:83: 1f:5d:b2:e9:3d:af:06:d4:f1:f3:1a:72:d9:9b:94:2e:94:ea: f3:99:9c:6b:f2:1a:f7:57:d8:bc:5b:c7:35:fe:79:63:de:90: 88:4b:69:d5:57:c3:60:b4:21:d8:e9:9d:40:99:5d:93:6e:49: 4c:c4:87:70:8b:a6:e4:bc:d0:cb:d2:e5:c8:a3:b6:06:8b:6b: 0c:cf:55:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/686i/viGiypqEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NzA3ZDFiY2ItZDE5Mi00ZDJmLWFkMmUtZjk4YjM1M2IyZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpTF2lKUOC3WPSEEmdVuLamJekpVZ8Op+UFr wmAJXcdtEerd7sOBgPnDg+Gls+cEOPKAcnTxgTfH9v5rMJHKpGAen6VjN9UzjpOp wcCNJe45/XDXQwCV23pB9MvoLhaWqHHDpCKMTBubBsb5JcBnezO/IchhJUEDJ8pf m89uHDzX9wq/I6+Wv3q1UJhL9V49GDNpoi/3SXh0y8nXDh4gtUlxkoJkQOgSZnz1 ri6XvtDNivoQwPv1lfRfAGVHr3Vyz8qc428NiVRHka44gBGXu+OH25Co46Zuhvlq GxfSBwv/s3GbmWPHZSesseYyt7sIppdQctI0okqmhYw5POmHEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxaHr24IglWzF+QEyi9Rb76dvJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmJjMjM4OTYtZGUwNi0z YzM5LTgwNmItNDk5ZDA1YzM2NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmWtBNI7w05X5gnk/Z9/HmJNZzKBPj+CtPM4m4128wLKEQnAoKhcbxS BqRz14f4iIU7mHhDFwqJMQth/5+MCL7UpF+9YqP5RtMKlfAXP/Q2aSMbseQReKWv dS8VJndXDo+Qi02amWarV70DAzLm7yHFVbHjh1xfi7+zdiUVAfiEtNN6ASKqa12D piIROX1/CwINsC+/Otrbaq+zRe6VtuOsVDhzrSTrg83wEBYp5JrthCCxgx9dsuk9 rwbU8fMactmblC6U6vOZnGvyGvdX2LxbxzX+eWPekIhLadVXw2C0IdjpnUCZXZNu SUzEh3CLpuS80MvS5cijtgaLawzPVQs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:20 2025 by rpki-client