$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa File: cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa (raw, json) Hash identifier: YmPM1kYu1PtCa6fDlGQw7oU9KF9rFVdWxKoL75xPMr4= Subject key identifier: CB:1F:1C:FC:B4:93:96:7F:14:89:86:3D:40:D9:5B:5A:45:3C:CC:53 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F6586215F93E3681635460 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.133.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:58:62:15:f9:3e:36:81:63:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=12a496f2-330f-4dca-b9ac-4f9ba3824821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:b5:b4:54:4c:9c:fe:6f:c1:45:18:ad:23: 24:6a:41:bd:58:40:1c:be:3b:77:b1:74:83:33:27: 7f:f3:d2:92:2b:0a:e5:2b:49:51:a5:76:77:f9:89: 8d:8c:c5:03:e6:96:6d:d7:80:0d:e9:3c:90:25:ac: 0e:55:c2:8e:8b:33:da:ff:cf:f5:04:60:8b:c4:55: cb:7a:2c:e2:73:fa:6f:3c:12:0a:f7:6e:52:19:c5: 87:6a:1c:ed:43:f3:70:b7:01:e7:22:a5:14:97:61: ab:0b:8d:e4:c2:7b:89:5f:38:7e:a1:c0:18:ef:f0: 47:63:61:af:22:b4:ba:1d:37:cf:04:f2:35:01:96: da:5d:8e:7f:1f:c1:b0:a0:10:76:be:d1:f3:25:16: 85:cc:ce:02:19:ec:c4:31:91:bb:c4:be:cc:62:13: 8d:b3:5a:18:62:56:9e:f5:e7:30:b6:19:8e:80:e0: 47:1b:1f:45:b8:51:b8:34:bb:c1:5a:a4:ea:dd:96: 92:92:c8:df:23:78:96:35:7e:a2:09:a0:a1:40:58: a2:43:d3:c7:ef:35:37:46:81:b6:d2:b2:d3:cd:19: dd:15:91:74:12:45:f7:f1:67:c1:a3:1d:95:49:29: 76:b7:7f:07:db:f0:d6:10:35:bc:4f:4d:3e:96:62: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:1C:FC:B4:93:96:7F:14:89:86:3D:40:D9:5B:5A:45:3C:CC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8a:d9:8f:19:08:de:e0:a0:72:c4:f6:68:6d:67:c0:25:6d: 43:19:c3:69:f1:d9:b3:b2:2a:d5:b2:d8:ec:ff:e4:d0:96:2b: 63:8f:3a:9f:98:fe:fa:86:0d:fc:ba:52:e0:d5:45:ee:9c:35: bc:c6:67:e4:3b:f9:b4:66:74:66:db:a8:9a:93:bc:93:4e:d8: f3:c3:7b:5f:ab:35:13:8c:4f:ea:e2:b1:2f:7e:b3:9f:a9:53: 5f:34:18:99:6c:bc:85:3d:2d:cc:c9:1e:fe:4d:d6:48:65:56: 4b:45:7a:1f:b6:68:09:c8:e0:75:57:86:d3:c5:2b:a4:71:aa: f9:22:a1:50:f5:ed:30:3d:57:25:78:c6:27:0b:b0:a2:8f:03: d7:85:b5:e9:02:b6:4d:c7:ad:42:24:74:9c:49:ec:a9:e5:24: cf:a2:7f:a6:b9:e9:6f:bf:00:fe:59:50:e2:e3:93:d4:44:8a: a0:15:6c:48:1f:05:30:2d:fa:6b:d7:6b:30:36:38:aa:0d:7f: aa:d3:08:52:fe:7c:89:60:99:db:e1:2b:a3:27:b8:8c:e5:59: f9:53:4c:5c:2c:14:24:68:d1:5b:d0:5a:fd:19:8c:6f:0f:c8: b2:04:ce:89:ec:7b:e6:b9:d2:95:6f:83:22:c7:16:ea:0b:d0: ea:36:7a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lhiFfk+NoFjVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk MTJhNDk2ZjItMzMwZi00ZGNhLWI5YWMtNGY5YmEzODI0ODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2K1tFRMnP5vwUUYrSMkakG9WEAcvjt3sXSD Myd/89KSKwrlK0lRpXZ3+YmNjMUD5pZt14AN6TyQJawOVcKOizPa/8/1BGCLxFXL eizic/pvPBIK925SGcWHahztQ/NwtwHnIqUUl2GrC43kwnuJXzh+ocAY7/BHY2Gv IrS6HTfPBPI1AZbaXY5/H8GwoBB2vtHzJRaFzM4CGezEMZG7xL7MYhONs1oYYlae 9ecwthmOgOBHGx9FuFG4NLvBWqTq3ZaSksjfI3iWNX6iCaChQFiiQ9PH7zU3RoG2 0rLTzRndFZF0EkX38WfBox2VSSl2t38H2/DWEDW8T00+lmLbiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsfHPy0k5Z/FImGPUDZW1pFPMxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2FmZDFiYzEtZTY5YS0z NmZkLTlmODktYzgzZmEzN2Q2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCK2Y8ZCN7goHLE9mhtZ8AlbUMZw2nx2bOyKtWy2Oz/5NCWK2OPOp+Y /vqGDfy6UuDVRe6cNbzGZ+Q7+bRmdGbbqJqTvJNO2PPDe1+rNROMT+risS9+s5+p U180GJlsvIU9LczJHv5N1khlVktFeh+2aAnI4HVXhtPFK6RxqvkioVD17TA9VyV4 xicLsKKPA9eFtekCtk3HrUIkdJxJ7KnlJM+if6a56W+/AP5ZUOLjk9REiqAVbEgf BTAt+mvXazA2OKoNf6rTCFL+fIlgmdvhK6MnuIzlWflTTFwsFCRo0VvQWv0ZjG8P yLIEzonse+a50pVvgyLHFuoL0Oo2el8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:04 2025 by rpki-client