$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d36c1525-172b-3965-a8db-ead5d762db8f.roa File: d36c1525-172b-3965-a8db-ead5d762db8f.roa (raw, json) Hash identifier: ERkExcb1ytXkLbXnyfDotm1QSv7MKlIaX0yUwMBukWQ= Subject key identifier: 72:9D:77:80:9B:7F:26:C7:A4:E9:0A:84:95:1F:F0:0D:95:1E:42:1F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858453584A158706ED4C412521C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d36c1525-172b-3965-a8db-ead5d762db8f.roa Signing time: Thu 14 Mar 2024 21:51:09 +0000 ROA not before: Thu 14 Mar 2024 21:51:09 +0000 ROA not after: Wed 12 Jun 2024 21:51:09 +0000 asID: 41264 IP address blocks: 104.133.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:35:84:a1:58:70:6e:d4:c4:12:52:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 14 21:51:09 2024 GMT Not After : Jun 12 21:51:09 2024 GMT Subject: CN=8b44fe5d-37f5-4198-83cf-672f7856c282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:99:d7:f2:62:dd:7d:4e:83:7c:64:94:85:8b: 87:84:5f:75:86:30:a7:1f:b8:cc:6b:7e:10:40:81: aa:88:f7:2c:72:39:a2:13:f0:8d:d1:b8:5e:c9:1b: 6a:e3:62:a6:cd:84:9a:cd:4f:f6:bf:aa:6f:6a:ff: 4d:00:f7:74:10:3c:9f:39:e3:e1:30:35:f8:72:9c: e7:0a:51:a3:47:65:de:17:72:b6:69:0c:b3:08:87: 9f:4f:4d:4e:95:0d:ad:b9:e0:2a:80:20:b3:d9:1f: b1:8a:ae:bd:c1:be:cf:20:67:d6:34:31:98:71:04: ec:18:77:24:b4:91:c0:f2:93:6d:bb:82:29:8f:7a: f9:bb:c3:5e:e7:c2:1f:7d:b7:90:f6:8a:f4:e2:02: 56:99:ee:d3:0b:d8:7e:1a:67:c3:dd:20:c7:f0:9c: 58:31:3a:f7:1b:2c:48:09:6c:d2:10:cf:08:38:22: 53:d0:0d:92:40:4b:d5:81:95:d5:be:0d:32:e4:1a: 07:5e:27:e9:e1:0d:4d:9b:f6:c8:26:f4:7f:07:0d: 43:42:f7:7c:7b:b0:39:56:10:98:37:f8:40:f3:27: f5:2a:e0:2a:23:88:e0:d2:ae:bf:ba:4a:65:49:7b: 00:08:75:a0:03:9c:91:ed:f1:26:8d:ac:85:c6:11: 00:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9D:77:80:9B:7F:26:C7:A4:E9:0A:84:95:1F:F0:0D:95:1E:42:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d36c1525-172b-3965-a8db-ead5d762db8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a9:7d:0d:be:80:85:47:f9:21:29:9b:2f:94:87:63:3a:2d: 97:74:55:bf:2b:36:56:2a:eb:1a:f5:f3:06:ab:78:b6:f9:65: d5:1d:3b:91:77:8a:ee:95:a0:d1:d8:c0:1c:32:a1:9c:72:48: 26:5a:d6:3b:88:42:70:21:99:1d:93:36:5d:10:14:00:1b:9e: b8:21:30:15:63:11:4e:c3:33:5c:32:3e:ac:9a:fb:41:c2:5d: 8d:b8:de:35:fa:04:cc:4b:89:e7:f1:26:c1:0d:5c:13:42:c2: f8:b2:e4:81:d5:36:82:33:29:29:35:1c:70:18:ca:4f:3b:7f: 5e:d5:8e:4e:df:ea:fe:1c:99:da:c5:54:d0:74:87:fa:33:cc: a8:6c:d3:b9:6a:74:07:9e:39:df:69:6a:21:84:51:f1:9d:ff: 53:74:4f:82:0c:0a:7a:1b:c4:b7:5d:0d:8d:fe:1e:ab:a3:10: 23:88:11:7a:d7:a1:e2:73:2d:6f:7f:5e:b8:3b:6a:4a:e2:e6: 05:8f:60:3e:5f:d4:d9:ca:1d:13:8c:b7:ec:ff:a4:78:a4:c2: a5:a2:e0:28:e0:63:1f:a4:d8:76:3b:1d:f0:5d:ca:21:1f:2b: 3f:1b:10:79:60:81:31:5e:71:ef:44:e3:cf:cb:77:c7:b5:8c: f0:cf:f1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hKFYcG7UxBJSHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MDMxNDIxNTEwOVoXDTI0MDYxMjIxNTEwOVowLzEtMCsGA1UEAxMk OGI0NGZlNWQtMzdmNS00MTk4LTgzY2YtNjcyZjc4NTZjMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZnX8mLdfU6DfGSUhYuHhF91hjCnH7jMa34Q QIGqiPcscjmiE/CN0bheyRtq42KmzYSazU/2v6pvav9NAPd0EDyfOePhMDX4cpzn ClGjR2XeF3K2aQyzCIefT01OlQ2tueAqgCCz2R+xiq69wb7PIGfWNDGYcQTsGHck tJHA8pNtu4Ipj3r5u8Ne58IffbeQ9or04gJWme7TC9h+GmfD3SDH8JxYMTr3GyxI CWzSEM8IOCJT0A2SQEvVgZXVvg0y5BoHXifp4Q1Nm/bIJvR/Bw1DQvd8e7A5VhCY N/hA8yf1KuAqI4jg0q6/ukplSXsACHWgA5yR7fEmjayFxhEA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKdd4CbfybHpOkKhJUf8A2VHkIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDM2YzE1MjUtMTcyYi0z OTY1LWE4ZGItZWFkNWQ3NjJkYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6pfQ2+gIVH+SEpmy+Uh2M6LZd0Vb8rNlYq6xr18wareLb5ZdUdO5F3 iu6VoNHYwBwyoZxySCZa1juIQnAhmR2TNl0QFAAbnrghMBVjEU7DM1wyPqya+0HC XY243jX6BMxLiefxJsENXBNCwviy5IHVNoIzKSk1HHAYyk87f17Vjk7f6v4cmdrF VNB0h/ozzKhs07lqdAeeOd9paiGEUfGd/1N0T4IMCnobxLddDY3+HqujECOIEXrX oeJzLW9/Xrg7akri5gWPYD5f1NnKHROMt+z/pHikwqWi4CjgYx+k2HY7HfBdyiEf Kz8bEHlggTFece9E48/Ld8e1jPDP8eQ= -----END CERTIFICATE-----Generated at Sat May 11 15:25:40 2024 by rpki-client on console-ams.rpki-client.org