$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa File: cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa (raw, json) Hash identifier: j/gXQc0hESL/X+caNRzSEJsKjYb/GhJQzQn274QSAOU= Subject key identifier: F8:E7:80:9D:66:B8:08:AE:B4:01:24:29:1C:EA:67:BF:BD:28:31:35 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E848537E870294485280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e8:48:53:7e:87:02:94:48:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=45b7d1c3-ac81-4db6-b07e-b936a8154577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:5b:76:45:e5:15:3a:96:3e:e6:cd:2b:17: d3:d8:28:8a:5c:1d:6b:74:c3:a1:c1:92:2a:6b:62: e5:98:01:c8:2d:fb:b5:79:eb:49:25:cb:8c:a5:19: 83:53:d2:2d:ce:63:82:cf:ee:80:a8:97:a4:00:58: 8a:d0:6a:dc:d9:66:29:f9:c6:8a:cc:67:63:5a:05: 07:b9:33:02:b3:5b:bc:cb:81:f2:d7:88:ad:d2:c7: 7e:6d:8e:16:2b:43:4f:e4:bc:8a:d7:c9:39:38:2e: e0:ab:5b:57:bd:ee:25:68:48:1b:62:12:27:ba:7c: de:71:e9:a2:47:7c:07:1e:0b:18:0c:8a:4c:4b:4a: 29:05:23:78:45:69:88:d3:dd:b1:c8:52:1a:80:78: 5c:35:3a:1a:00:58:a5:ae:17:76:40:a5:09:38:08: 4a:0b:8c:30:8e:d6:39:75:ff:46:d6:95:1f:ee:84: 25:f9:ab:a7:51:98:28:5f:2f:1d:ac:c8:80:5b:c9: 4f:57:52:2f:12:f0:90:34:3e:d6:cc:73:16:8e:b8: 08:d0:38:dc:49:3a:60:2f:31:04:34:d8:56:b8:a1: 21:45:cc:d9:0c:7c:ce:4a:37:a1:05:9e:43:ba:19: 11:f3:25:33:fa:de:4a:eb:f9:d1:02:4e:67:6f:83: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E7:80:9D:66:B8:08:AE:B4:01:24:29:1C:EA:67:BF:BD:28:31:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf06ce5d-9c64-3f04-9c80-65cf1f0d812d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:18:56:a6:08:86:10:cf:27:0a:a5:7c:94:bb:32:37:3e:32: c0:fa:fc:dd:e1:eb:df:00:b6:ce:74:c2:ee:ae:77:fe:c2:47: b0:63:4c:87:ba:7e:f6:12:ff:33:d2:35:b0:dd:24:af:d7:9f: 57:8b:81:f4:6c:b6:a5:12:c4:9d:4f:9b:42:25:f4:71:d5:2e: 58:56:ad:11:3f:f9:9e:33:0b:e2:34:b1:49:9d:09:35:95:b0: f7:42:ac:54:10:16:aa:a1:5d:4b:16:90:a1:56:df:be:29:1c: 59:64:54:59:42:1e:01:6f:61:1f:9e:b4:f3:d9:4a:30:31:08: e7:65:4b:55:78:61:f1:cf:7b:38:a6:af:bd:94:e9:a8:76:df: 28:4d:3a:28:26:9f:29:31:2c:bb:95:3d:c8:7a:42:18:be:78: 01:2b:a9:7e:0d:3d:63:ec:56:f8:c7:52:5d:fc:6f:e3:df:e4: 1e:a0:c1:d3:27:18:35:77:1b:30:4a:57:69:63:51:f7:34:00: 2e:ab:d0:ae:5c:ab:c1:ed:c3:25:32:df:51:4e:3d:54:59:ec: 5d:82:49:d1:b5:a1:98:cc:b0:3b:91:c7:55:5d:46:16:e3:52: 7b:db:53:c2:ca:41:3a:cf:06:96:cf:f4:12:88:20:42:79:6b: 90:27:15:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOhIU36HApRIUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NDViN2QxYzMtYWM4MS00ZGI2LWIwN2UtYjkzNmE4MTU0NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW9bdkXlFTqWPubNKxfT2CiKXB1rdMOhwZIq a2LlmAHILfu1eetJJcuMpRmDU9ItzmOCz+6AqJekAFiK0Grc2WYp+caKzGdjWgUH uTMCs1u8y4Hy14it0sd+bY4WK0NP5LyK18k5OC7gq1tXve4laEgbYhInunzecemi R3wHHgsYDIpMS0opBSN4RWmI092xyFIagHhcNToaAFilrhd2QKUJOAhKC4wwjtY5 df9G1pUf7oQl+aunUZgoXy8drMiAW8lPV1IvEvCQND7WzHMWjrgI0DjcSTpgLzEE NNhWuKEhRczZDHzOSjehBZ5DuhkR8yUz+t5K6/nRAk5nb4MJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjngJ1muAiutAEkKRzqZ7+9KDE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YwNmNlNWQtOWM2NC0z ZjA0LTljODAtNjVjZjFmMGQ4MTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMYVqYIhhDPJwqlfJS7Mjc+MsD6/N3h698Ats50wu6ud/7CR7BjTIe6 fvYS/zPSNbDdJK/Xn1eLgfRstqUSxJ1Pm0Il9HHVLlhWrRE/+Z4zC+I0sUmdCTWV sPdCrFQQFqqhXUsWkKFW374pHFlkVFlCHgFvYR+etPPZSjAxCOdlS1V4YfHPezim r72U6ah23yhNOigmnykxLLuVPch6Qhi+eAErqX4NPWPsVvjHUl38b+Pf5B6gwdMn GDV3GzBKV2ljUfc0AC6r0K5cq8HtwyUy31FOPVRZ7F2CSdG1oZjMsDuRx1VdRhbj UnvbU8LKQTrPBpbP9BKIIEJ5a5AnFbc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:07 2025 by rpki-client