$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d66339fc-3f9c-39f5-ab4c-4dfd953029ea.roa File: d66339fc-3f9c-39f5-ab4c-4dfd953029ea.roa (raw, json) Hash identifier: S5DFz4d7P5zk0cOCetebdO65VWe+PvCcAIXmbj9bmWc= Subject key identifier: 33:07:4D:E8:7C:FE:54:79:DD:1B:8D:F8:40:5B:98:62:8D:8D:65:0F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F65A1002F461FB88619980 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d66339fc-3f9c-39f5-ab4c-4dfd953029ea.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.133.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:5a:10:02:f4:61:fb:88:61:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=cf4f1add-1810-4720-872f-e87141c4ebda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:b9:2f:19:e9:6c:09:1a:b7:6b:4f:b8:36: c8:8f:b3:51:13:48:09:ad:2f:8a:cf:04:8e:c0:9c: 7f:53:d2:90:b5:74:5e:39:da:3a:76:f8:ad:30:b4: ad:71:3a:b6:11:24:5a:65:a9:87:d8:a8:ae:4e:1f: 5d:52:7d:7e:32:99:7f:ef:aa:4b:51:f1:e3:e6:7e: a9:e0:51:ec:56:50:87:91:02:b0:ef:3c:82:a2:31: 20:0c:c2:6c:35:31:ad:65:91:a9:30:7f:a8:42:29: 08:61:5e:58:54:9f:17:6b:0b:0e:ac:76:1e:13:5b: 53:85:c9:90:d8:95:92:31:1f:3e:fa:ad:9d:f6:b4: 38:cd:9b:be:61:80:82:09:f0:fb:da:42:53:fe:56: a1:5c:3d:c0:8c:7f:93:6f:25:1c:e4:2d:43:37:41: ce:a2:d7:c3:f5:bf:7c:1c:f5:fb:01:3a:a1:49:d8: b4:17:47:ce:8f:c6:d3:58:16:c4:05:f9:30:5e:18: b1:c5:63:3b:a1:b3:57:93:df:e3:fd:e2:1e:83:29: 25:27:8c:e2:11:de:78:9e:e4:29:e2:e7:fd:17:99: ca:20:37:19:33:66:29:db:69:9d:09:47:ca:50:42: 29:09:13:59:3a:51:44:be:d7:6b:c6:1c:21:cf:96: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:4D:E8:7C:FE:54:79:DD:1B:8D:F8:40:5B:98:62:8D:8D:65:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d66339fc-3f9c-39f5-ab4c-4dfd953029ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:61:83:68:a5:06:37:07:60:59:bf:e0:19:d3:2d:c2:2a:9f: 3e:41:19:fa:e1:d2:db:c0:a4:5f:35:5a:99:52:52:7f:9d:33: ec:91:ef:4b:ed:6e:cb:4b:d9:45:8d:ea:28:73:e0:ba:80:5a: 7c:d6:15:06:22:c1:f0:4d:79:c8:ac:7d:40:da:cb:92:03:f8: 41:13:99:f1:94:dc:31:ee:7b:e8:cc:23:2d:87:55:ab:93:1c: 92:d7:07:96:ae:e3:ba:bf:c3:8f:ce:87:73:72:5f:39:da:b9: b7:ed:b1:5a:b3:1a:ef:75:17:40:d7:53:15:92:b4:41:31:c8: 60:c5:6f:d3:f2:11:62:6a:de:ca:ef:76:6f:ac:49:67:10:f8: df:1c:f6:2c:aa:1b:e5:93:c8:4d:65:a8:8f:ad:93:ff:2f:7f: aa:69:4f:7d:62:61:72:f1:c1:f3:3d:06:eb:ff:53:b0:47:39: 57:09:d5:3f:32:c8:6e:f0:95:a2:80:af:31:3e:81:a2:7b:51: 0e:d0:eb:10:4b:f1:0e:42:92:e2:9a:5d:a0:c3:61:58:7f:3a: bb:55:98:19:72:6e:66:0b:40:a8:c0:e7:97:ec:3f:b4:32:75: 34:88:d7:d1:83:c8:d0:45:95:89:42:50:8e:16:2f:5c:26:dc: 64:fe:64:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9loQAvRh+4hhmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk Y2Y0ZjFhZGQtMTgxMC00NzIwLTg3MmYtZTg3MTQxYzRlYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe25LxnpbAkat2tPuDbIj7NRE0gJrS+KzwSO wJx/U9KQtXReOdo6dvitMLStcTq2ESRaZamH2KiuTh9dUn1+Mpl/76pLUfHj5n6p 4FHsVlCHkQKw7zyCojEgDMJsNTGtZZGpMH+oQikIYV5YVJ8XawsOrHYeE1tThcmQ 2JWSMR8++q2d9rQ4zZu+YYCCCfD72kJT/lahXD3AjH+TbyUc5C1DN0HOotfD9b98 HPX7ATqhSdi0F0fOj8bTWBbEBfkwXhixxWM7obNXk9/j/eIegyklJ4ziEd54nuQp 4uf9F5nKIDcZM2Yp22mdCUfKUEIpCRNZOlFEvtdrxhwhz5YTgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMHTeh8/lR53RuN+EBbmGKNjWUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDY2MzM5ZmMtM2Y5Yy0z OWY1LWFiNGMtNGRmZDk1MzAyOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9hg2ilBjcHYFm/4BnTLcIqnz5BGfrh0tvApF81WplSUn+dM+yR70vt bstL2UWN6ihz4LqAWnzWFQYiwfBNecisfUDay5ID+EETmfGU3DHue+jMIy2HVauT HJLXB5au47q/w4/Oh3NyXznaubftsVqzGu91F0DXUxWStEExyGDFb9PyEWJq3srv dm+sSWcQ+N8c9iyqG+WTyE1lqI+tk/8vf6ppT31iYXLxwfM9Buv/U7BHOVcJ1T8y yG7wlaKArzE+gaJ7UQ7Q6xBL8Q5CkuKaXaDDYVh/OrtVmBlybmYLQKjA55fsP7Qy dTSI19GDyNBFlYlCUI4WL1wm3GT+ZOI= -----END CERTIFICATE-----Generated at Sat Apr 5 06:22:18 2025 by rpki-client