$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb60623a-3388-3f0f-b042-e1e19d4224a1.roa File: cb60623a-3388-3f0f-b042-e1e19d4224a1.roa (raw, json) Hash identifier: oXYB5U5fpo4PgkV7kTq74GrhRvM+s8ngYXsy6KQPBfU= Subject key identifier: 1F:41:C6:FE:79:7F:82:F9:A8:24:9D:11:23:EE:DB:38:30:DC:5F:92 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2B999C884CC10F95E4D400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb60623a-3388-3f0f-b042-e1e19d4224a1.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:99:9c:88:4c:c1:0f:95:e4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=2dcc3d62-4132-49e0-b07c-7923795dc70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:8e:0c:02:8c:04:a2:c7:5e:8d:71:05:3e: b3:a8:43:14:d3:0e:88:4e:6e:d3:f0:f1:f7:af:f8: 5e:83:9b:7c:16:0b:3e:db:a0:bc:fe:07:6d:49:67: 5f:aa:c3:27:b0:bc:65:47:35:e6:8e:d9:12:3b:4b: 9d:86:10:5b:ab:21:b7:db:34:15:91:1a:bd:56:00: 96:50:12:ba:e7:9c:46:44:ca:66:7c:11:c6:51:db: 34:21:cd:85:10:29:50:ff:39:5e:fb:b4:ae:60:af: d6:f5:4f:2a:13:f5:56:6b:df:ea:b4:e8:46:43:30: dd:bd:3c:c5:d1:d3:2a:8f:9b:9b:97:06:dc:2a:1f: 80:de:d5:bc:f5:af:c1:f0:03:0e:96:e3:1c:b6:cd: b2:fa:23:95:82:9e:36:f8:51:79:80:a9:b7:de:2a: c1:81:ab:01:44:da:cd:87:6c:59:2f:cf:b4:7d:b8: c5:f9:01:11:a8:fb:a5:99:6d:3e:13:03:d2:5f:2b: 54:2e:3a:ca:a7:55:48:01:6c:4d:06:82:c7:05:0e: a2:ce:4e:00:d5:b7:45:c1:cc:5a:0e:f9:7f:45:b1: 04:6b:e8:d0:3a:b2:e4:ad:00:12:96:d4:fa:4a:17: 39:1f:00:0f:87:05:67:3d:26:e5:3b:95:77:35:c7: df:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:41:C6:FE:79:7F:82:F9:A8:24:9D:11:23:EE:DB:38:30:DC:5F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb60623a-3388-3f0f-b042-e1e19d4224a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:68:c3:be:7c:76:44:0f:06:9a:8f:16:dd:1f:61:68:b6:c2: 6c:87:fa:36:47:41:fe:58:fd:4b:86:ab:31:57:23:a9:fe:95: 8b:84:9e:77:41:db:78:7c:99:90:17:80:fe:62:1d:b9:92:f8: ee:44:b8:a7:fd:de:47:f1:06:d5:48:ea:ec:6b:10:1f:d0:54: c1:02:21:4e:00:68:ed:a8:cf:49:97:8f:a1:c0:a6:fa:aa:fe: 63:75:0c:6b:7e:8e:80:1a:43:f4:c2:b7:a4:f3:a0:d4:c9:42: 0d:e8:ab:6c:c6:80:82:2a:8d:4f:f7:4a:a1:b9:85:bf:28:b6: e5:f3:35:8a:f0:16:bc:88:50:0b:d2:03:be:75:dd:72:69:0b: d4:82:ec:b5:23:05:c1:9d:b3:8b:73:7c:f1:2e:64:0e:3d:e5: 0b:28:4a:ad:1b:90:2c:26:18:b2:46:a0:1f:9a:0f:6c:cf:97: 2e:f0:32:dd:b4:4f:79:de:13:dc:7f:2f:28:80:ae:5b:43:d6: e7:27:60:d1:88:8d:e2:34:51:43:57:31:49:69:f6:d3:f3:44: a6:be:d1:09:f9:1a:8a:6f:67:3b:1b:e0:88:2d:a2:cd:e9:b1: 47:e2:30:06:16:d9:2d:16:44:56:a8:02:d2:71:db:3b:30:8b: cf:87:80:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5mciEzBD5Xk1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MmRjYzNkNjItNDEzMi00OWUwLWIwN2MtNzkyMzc5NWRjNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVuODAKMBKLHXo1xBT6zqEMU0w6ITm7T8PH3 r/heg5t8Fgs+26C8/gdtSWdfqsMnsLxlRzXmjtkSO0udhhBbqyG32zQVkRq9VgCW UBK655xGRMpmfBHGUds0Ic2FEClQ/zle+7SuYK/W9U8qE/VWa9/qtOhGQzDdvTzF 0dMqj5ublwbcKh+A3tW89a/B8AMOluMcts2y+iOVgp42+FF5gKm33irBgasBRNrN h2xZL8+0fbjF+QERqPulmW0+EwPSXytULjrKp1VIAWxNBoLHBQ6izk4A1bdFwcxa Dvl/RbEEa+jQOrLkrQASltT6Shc5HwAPhwVnPSblO5V3Ncff2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Bxv55f4L5qCSdESPu2zgw3F+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2I2MDYyM2EtMzM4OC0z ZjBmLWIwNDItZTFlMTlkNDIyNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtow758dkQPBpqPFt0fYWi2wmyH+jZHQf5Y/UuGqzFXI6n+lYuEnndB 23h8mZAXgP5iHbmS+O5EuKf93kfxBtVI6uxrEB/QVMECIU4AaO2oz0mXj6HApvqq /mN1DGt+joAaQ/TCt6TzoNTJQg3oq2zGgIIqjU/3SqG5hb8otuXzNYrwFryIUAvS A7513XJpC9SC7LUjBcGds4tzfPEuZA495QsoSq0bkCwmGLJGoB+aD2zPly7wMt20 T3neE9x/LyiArltD1ucnYNGIjeI0UUNXMUlp9tPzRKa+0Qn5GopvZzsb4Igtos3p sUfiMAYW2S0WRFaoAtJx2zswi8+HgOg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:34 2025 by rpki-client