$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6630ba8-5c86-3158-86e4-b8ffc34058b3.roa File: d6630ba8-5c86-3158-86e4-b8ffc34058b3.roa (raw, json) Hash identifier: SS458OSZOLVm49mKDdN6f/Z070cAbSy8YAu6F4wjox4= Subject key identifier: D0:8E:B9:E1:D1:00:C9:A8:88:DD:7D:9E:32:09:6D:4B:B7:C4:CF:A5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E86847740944A955FEC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6630ba8-5c86-3158-86e4-b8ffc34058b3.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e8:68:47:74:09:44:a9:55:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=5cc9c86d-41e3-4619-be13-a85dca19d3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:23:09:e7:66:d5:cb:4f:ba:d1:75:dc:f6:b2: c5:35:27:4c:a4:46:19:d7:9b:31:06:62:22:00:c0: 9a:eb:56:78:65:36:4b:c6:07:18:8f:d6:69:78:45: ce:08:b6:1f:a8:ca:7e:58:d2:1d:ec:b5:7d:f0:6f: 2f:d4:14:98:d7:89:4f:93:89:e1:81:0e:d0:95:5c: fc:02:95:58:7c:1a:23:25:b7:ba:c8:f1:db:22:ff: dd:31:fd:6d:1d:ec:8c:68:25:3d:4b:62:9b:47:56: cd:8f:95:74:c5:eb:7c:bd:23:7f:0f:26:2d:b5:5b: 42:8b:21:32:b8:1e:ab:a5:75:ae:2f:7c:86:bb:cb: d5:27:bb:4e:aa:d5:3e:b9:3e:ea:7d:50:58:ea:68: 14:35:3d:78:a7:77:14:05:ea:40:35:01:65:ab:fe: 07:5f:8e:6a:34:fe:f6:49:51:f1:fa:76:21:f9:ee: 16:61:88:44:2e:cb:4e:f1:59:c7:c3:5f:44:39:5d: f1:17:0c:32:15:8c:b9:b7:e4:95:bc:5e:86:94:a3: 37:f4:4b:af:96:88:65:e4:69:69:c2:8e:79:b9:5c: f8:4f:40:22:a1:60:e1:b9:d8:9b:85:b7:a8:5b:d6: 72:fe:4e:24:58:52:e2:fb:0c:38:13:f1:0a:3e:3c: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8E:B9:E1:D1:00:C9:A8:88:DD:7D:9E:32:09:6D:4B:B7:C4:CF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6630ba8-5c86-3158-86e4-b8ffc34058b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6d:40:29:ab:e4:0f:b1:58:2f:15:d2:42:57:42:d3:ea:07: f9:5d:b9:55:6b:0d:6e:eb:0e:96:cb:2e:c8:17:a7:50:c9:3e: 72:0a:88:34:a9:b4:65:6e:b0:4d:a6:b3:ae:d7:86:ea:ad:eb: 23:79:d6:27:9c:f8:0e:e9:06:52:98:dc:5c:a1:69:1b:bc:86: 5e:3d:0e:59:31:b4:79:0c:31:c0:6a:51:da:19:f9:13:d5:30: 98:3c:e6:0d:29:26:59:9a:98:b7:75:c3:3c:c9:a5:45:5e:8f: cf:e1:9e:27:ed:f1:95:3a:24:2f:1a:dd:1c:36:9e:03:1c:4d: 47:99:06:f8:fd:1c:30:f5:e8:09:33:65:e0:5a:7d:f1:b0:cd: 71:90:2f:c7:62:68:b8:a9:bb:81:4f:8a:e6:0f:89:71:a2:4a: 1b:72:6d:8f:0b:05:68:64:ff:95:5c:d0:3b:75:70:29:79:0f: 6d:e2:41:17:8a:13:6b:ad:6f:e8:e5:c8:b1:b1:72:37:82:2d: 43:b6:c3:f0:bb:84:6e:14:4f:e8:bf:a2:2e:79:3a:46:da:97: 45:a2:72:d8:52:e9:2a:97:28:b1:fd:38:b4:1a:08:8f:d6:3c: 5a:73:0f:50:d7:f9:4b:88:22:91:84:96:04:66:d0:32:9f:85: 8f:0f:0d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOhoR3QJRKlV/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk NWNjOWM4NmQtNDFlMy00NjE5LWJlMTMtYTg1ZGNhMTlkM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCMJ52bVy0+60XXc9rLFNSdMpEYZ15sxBmIi AMCa61Z4ZTZLxgcYj9ZpeEXOCLYfqMp+WNId7LV98G8v1BSY14lPk4nhgQ7QlVz8 ApVYfBojJbe6yPHbIv/dMf1tHeyMaCU9S2KbR1bNj5V0xet8vSN/DyYttVtCiyEy uB6rpXWuL3yGu8vVJ7tOqtU+uT7qfVBY6mgUNT14p3cUBepANQFlq/4HX45qNP72 SVHx+nYh+e4WYYhELstO8VnHw19EOV3xFwwyFYy5t+SVvF6GlKM39Euvlohl5Glp wo55uVz4T0AioWDhudibhbeoW9Zy/k4kWFLi+ww4E/EKPjyL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCOueHRAMmoiN19njIJbUu3xM+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDY2MzBiYTgtNWM4Ni0z MTU4LTg2ZTQtYjhmZmMzNDA1OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEttQCmr5A+xWC8V0kJXQtPqB/lduVVrDW7rDpbLLsgXp1DJPnIKiDSp tGVusE2ms67Xhuqt6yN51iec+A7pBlKY3FyhaRu8hl49DlkxtHkMMcBqUdoZ+RPV MJg85g0pJlmamLd1wzzJpUVej8/hnift8ZU6JC8a3Rw2ngMcTUeZBvj9HDD16Akz ZeBaffGwzXGQL8diaLipu4FPiuYPiXGiShtybY8LBWhk/5Vc0Dt1cCl5D23iQReK E2utb+jlyLGxcjeCLUO2w/C7hG4UT+i/oi55Okbal0WicthS6SqXKLH9OLQaCI/W PFpzD1DX+UuIIpGElgRm0DKfhY8PDZo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:45 2025 by rpki-client