$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa File: cecb8fd1-3349-3a59-8802-c852e28ef747.roa (raw, json) Hash identifier: 420Q7Uoju4wQXNF/SVKJswUHzogJIK7P0BGkl7EKmGE= Subject key identifier: 58:98:C8:8A:5A:D6:54:24:05:94:D8:95:94:48:B3:0C:E4:8B:86:62 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848BFEBBE1B63D457ECF7D6EC00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 15169 IP address blocks: 104.134.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:be:1b:63:d4:57:ec:f7:d6:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=68beb4a6-263a-4132-ac35-2bf0f265f1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:ad:f4:24:41:13:b5:a5:22:1a:eb:86:f3: c2:45:eb:61:2c:51:3d:ba:ef:3a:12:fb:db:a7:81: 68:02:ca:78:d7:2f:85:f1:73:d7:34:83:72:c7:66: d9:0a:14:a2:8b:d2:45:0b:12:01:07:fc:1f:4e:53: ff:1f:20:5e:a1:a9:13:32:7a:df:7b:eb:4b:2a:fd: 26:c0:d9:a0:f5:4f:b0:6b:48:c0:fa:4f:90:f7:cb: c4:71:41:44:7e:65:39:35:97:2f:2d:07:9f:4c:6a: 88:80:7a:3d:35:07:82:46:41:28:61:55:38:c4:11: 54:0b:15:ba:23:a1:e4:44:f2:8e:d1:2a:51:4c:70: 35:93:9b:a3:48:73:ed:08:d9:81:b5:5d:50:c9:6d: ce:ff:80:44:0b:96:73:a6:27:02:8b:95:9c:95:b6: 6d:77:94:ca:f2:e3:5e:8c:99:88:5f:72:d3:9b:1f: 3e:56:e7:d5:47:44:d0:51:0a:20:be:a6:9b:8f:2a: b8:c1:d7:bb:bd:84:ed:9e:41:e5:99:e3:ed:3c:48: b2:58:a1:ba:90:6c:f4:93:c7:5f:d2:9f:4e:42:26: 14:3e:7c:99:6f:70:dd:1d:a0:c0:3f:cc:00:cc:3f: 78:84:bd:96:0d:69:d4:6b:41:c8:ac:39:aa:fb:7d: 12:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:98:C8:8A:5A:D6:54:24:05:94:D8:95:94:48:B3:0C:E4:8B:86:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:99:5f:cc:79:ae:60:ac:01:1a:7e:c4:37:5c:f4:c0:ad:5d: 11:df:ce:65:f1:2c:01:fd:55:e7:00:7a:9f:83:0d:f5:b7:62: 36:0a:ef:36:07:06:84:d7:42:8c:39:1a:a8:a5:b4:15:f4:1e: 69:bc:ce:b5:e3:45:2c:46:eb:41:9c:b3:8f:05:7d:bb:8b:ef: 62:c0:d1:3f:e0:18:6c:85:05:99:46:e7:69:0d:c1:2b:9e:18: 14:90:c1:5f:b5:8a:4d:2c:80:52:88:f7:30:9b:a5:95:81:72: 86:de:ad:90:f4:cd:d2:6c:23:51:93:ff:97:65:47:33:02:d8: 87:6b:3b:c4:93:50:f8:83:8c:1a:5e:62:53:b6:2e:82:e6:17: c2:f4:a9:b6:f4:f1:01:a9:29:99:5a:1d:ce:38:72:1a:40:25: f9:d0:bc:53:76:17:e3:c6:4c:da:54:3b:fc:c3:d6:31:50:fa: 0f:eb:95:92:e3:5e:85:71:8b:4d:97:43:c6:b9:79:e3:c0:f4: ce:9a:00:dd:86:27:93:8c:8a:5b:f3:b9:ad:c9:09:a1:21:de: 5b:c7:0a:f5:90:02:8b:ad:92:31:8d:cc:b1:c0:9e:94:df:1b: 2d:00:0d:6d:8c:23:97:1b:5c:88:b9:6e:cb:8c:82:bc:cc:cf: 99:0f:31:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/674bY9RX7PfW7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NjhiZWI0YTYtMjYzYS00MTMyLWFjMzUtMmJmMGYyNjVmMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTet9CRBE7WlIhrrhvPCRethLFE9uu86Evvb p4FoAsp41y+F8XPXNINyx2bZChSii9JFCxIBB/wfTlP/HyBeoakTMnrfe+tLKv0m wNmg9U+wa0jA+k+Q98vEcUFEfmU5NZcvLQefTGqIgHo9NQeCRkEoYVU4xBFUCxW6 I6HkRPKO0SpRTHA1k5ujSHPtCNmBtV1QyW3O/4BEC5ZzpicCi5WclbZtd5TK8uNe jJmIX3LTmx8+VufVR0TQUQogvqabjyq4wde7vYTtnkHlmePtPEiyWKG6kGz0k8df 0p9OQiYUPnyZb3DdHaDAP8wAzD94hL2WDWnUa0HIrDmq+30ScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiYyIpa1lQkBZTYlZRIswzki4ZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2VjYjhmZDEtMzM0OS0z YTU5LTg4MDItYzg1MmUyOGVmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiZX8x5rmCsARp+xDdc9MCtXRHfzmXxLAH9VecAep+DDfW3YjYK7zYH BoTXQow5GqiltBX0Hmm8zrXjRSxG60Gcs48FfbuL72LA0T/gGGyFBZlG52kNwSue GBSQwV+1ik0sgFKI9zCbpZWBcoberZD0zdJsI1GT/5dlRzMC2IdrO8STUPiDjBpe YlO2LoLmF8L0qbb08QGpKZlaHc44chpAJfnQvFN2F+PGTNpUO/zD1jFQ+g/rlZLj XoVxi02XQ8a5eePA9M6aAN2GJ5OMilvzua3JCaEh3lvHCvWQAoutkjGNzLHAnpTf Gy0ADW2MI5cbXIi5bsuMgrzMz5kPMbE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:37:32 2025 by rpki-client