$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beca674b-eb85-39cf-ade4-3304f0d0953c.roa File: beca674b-eb85-39cf-ade4-3304f0d0953c.roa (raw, json) Hash identifier: nqiH5/A+sRgzd5DYR2+bmbL8T+o51QXfs+7p9LvRp7M= Subject key identifier: D9:27:4D:12:E0:9D:67:AA:25:48:46:92:E7:9A:29:B7:A2:59:16:0C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E7D566EC11A6390A7680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beca674b-eb85-39cf-ade4-3304f0d0953c.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e7:d5:66:ec:11:a6:39:0a:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=3a057f8e-2391-430f-8159-80e774e191a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:93:ba:da:5f:51:49:c6:02:06:3b:62:59: 43:3d:f6:21:67:75:9e:d7:9b:77:50:14:42:d4:42: 4a:1a:b1:d2:fc:7c:3f:ea:ec:9e:91:be:60:aa:f0: 0e:ff:a4:4f:b3:89:20:19:07:65:eb:a3:79:72:75: c3:87:28:a7:cd:00:35:25:e2:54:fd:dd:93:8f:7c: 29:ba:6d:97:ca:9e:5e:33:b2:3a:ae:0d:b9:8c:89: b9:d8:cd:9e:ac:94:dd:20:07:2c:8a:e1:18:64:74: b7:29:57:89:22:bf:cb:05:6b:83:9c:db:55:1b:9e: ad:e7:f5:80:99:c8:47:c1:ca:fa:d2:d8:53:07:f4: 7c:c7:11:bb:44:2c:15:ab:be:7c:69:6a:fa:81:2d: 54:f9:d0:ec:ea:8e:4e:11:8b:97:6a:38:d9:b9:f5: 44:1a:16:53:d5:bb:4e:cb:0e:2f:02:5a:f6:f6:d4: da:1e:5e:f5:71:c9:50:84:5f:64:3c:e2:05:f3:88: 45:a8:41:6c:23:67:39:f5:db:fe:93:ee:fa:18:7a: bf:6d:51:6d:da:b8:63:1b:d8:d2:a6:1f:10:27:62: 3d:95:b8:e0:29:7b:0b:48:9f:4a:81:e3:63:d2:c3: 83:80:63:d2:a9:59:04:ce:7e:2e:7f:fb:d9:e1:54: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:27:4D:12:E0:9D:67:AA:25:48:46:92:E7:9A:29:B7:A2:59:16:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beca674b-eb85-39cf-ade4-3304f0d0953c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:88:3f:db:ed:d7:22:41:7a:e8:9c:49:09:dd:62:ba:66:1a: 96:c0:04:0a:6d:aa:34:0e:ca:51:1f:fa:50:cb:76:d5:3f:f9: e3:a0:59:73:83:0c:1f:11:27:85:4c:8c:43:35:1b:2b:9a:b5: 34:a7:f7:59:6f:43:ae:bc:a4:de:e9:9e:a1:fa:c1:7b:c8:e3: 42:69:b2:f8:28:e8:2d:e9:af:f6:92:48:5c:dc:30:bd:93:3e: ae:3c:82:b5:27:ec:3a:f5:71:33:34:ce:61:73:db:60:c6:15: 1d:71:07:bb:97:ba:ff:32:12:4f:6e:a6:44:31:a1:43:8f:e7: ed:9c:da:1a:de:dc:39:9f:28:21:eb:e5:18:55:55:8b:aa:f3: 9d:fa:41:61:c7:56:11:57:50:fb:60:35:6d:25:a7:83:4b:20: c7:d2:17:e5:9f:41:58:75:7f:b9:fd:e1:ea:df:7e:08:1b:c3: 53:84:53:65:ab:e4:c5:f5:39:f4:2a:c1:38:08:33:b5:ea:b5: f5:6c:80:3c:52:c4:4a:8c:2c:65:55:be:26:7b:d1:65:86:ad: 5d:c6:74:ae:4d:7e:b5:bb:d2:8a:16:f6:68:c4:6a:54:e0:0a: e0:ae:4e:d8:fd:29:b0:5a:76:b4:65:14:a7:5b:02:65:c2:3e: 8e:b7:2a:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOfVZuwRpjkKdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk M2EwNTdmOGUtMjM5MS00MzBmLTgxNTktODBlNzc0ZTE5MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSSTutpfUUnGAgY7YllDPfYhZ3We15t3UBRC 1EJKGrHS/Hw/6uyekb5gqvAO/6RPs4kgGQdl66N5cnXDhyinzQA1JeJU/d2Tj3wp um2Xyp5eM7I6rg25jIm52M2erJTdIAcsiuEYZHS3KVeJIr/LBWuDnNtVG56t5/WA mchHwcr60thTB/R8xxG7RCwVq758aWr6gS1U+dDs6o5OEYuXajjZufVEGhZT1btO yw4vAlr29tTaHl71cclQhF9kPOIF84hFqEFsI2c59dv+k+76GHq/bVFt2rhjG9jS ph8QJ2I9lbjgKXsLSJ9KgeNj0sODgGPSqVkEzn4uf/vZ4VTPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNknTRLgnWeqJUhGkueaKbeiWRYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmVjYTY3NGItZWI4NS0z OWNmLWFkZTQtMzMwNGYwZDA5NTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmIP9vt1yJBeuicSQndYrpmGpbABAptqjQOylEf+lDLdtU/+eOgWXOD DB8RJ4VMjEM1GyuatTSn91lvQ668pN7pnqH6wXvI40Jpsvgo6C3pr/aSSFzcML2T Pq48grUn7Dr1cTM0zmFz22DGFR1xB7uXuv8yEk9upkQxoUOP5+2c2hre3DmfKCHr 5RhVVYuq8536QWHHVhFXUPtgNW0lp4NLIMfSF+WfQVh1f7n94erffggbw1OEU2Wr 5MX1OfQqwTgIM7XqtfVsgDxSxEqMLGVVviZ70WWGrV3GdK5NfrW70ooW9mjEalTg CuCuTtj9KbBadrRlFKdbAmXCPo63Kro= -----END CERTIFICATE-----Generated at Fri Apr 4 08:56:07 2025 by rpki-client