$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db1ad954-9fb6-3d36-859e-49db91e69215.roa File: db1ad954-9fb6-3d36-859e-49db91e69215.roa (raw, json) Hash identifier: 7cNh5tXXAqzg2Ky6/BkOxx7KZnV2zpDtmcneLy441xw= Subject key identifier: 96:8E:45:27:E7:0C:63:B0:74:7D:C4:60:CC:54:7A:20:99:73:0A:5A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E6D13185EE1BB582D680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db1ad954-9fb6-3d36-859e-49db91e69215.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e6:d1:31:85:ee:1b:b5:82:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=9922a2a7-95f8-4e3c-82b3-1238181782ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:80:28:a2:a7:4b:86:c4:13:66:86:f5:25: 45:c0:fd:10:4e:bd:43:02:77:22:fd:33:62:c5:32: 7c:5e:f3:36:2b:f8:f4:44:58:9e:fb:b2:3e:fa:ee: dc:84:63:2c:1a:cb:ed:62:96:23:fd:e9:a6:d0:af: 9c:ee:46:33:37:45:e9:64:1f:28:98:ac:62:15:94: 24:c8:d0:79:61:8a:5d:48:98:e8:0d:d7:78:e7:10: 4e:23:47:96:91:1a:d6:e2:ca:49:6b:c1:1a:c8:16: 38:72:c3:98:a6:38:8b:cd:9b:ad:55:2f:90:22:e7: 80:32:9e:3b:87:46:6e:00:ea:b0:e1:47:3c:ac:86: 4f:a8:55:8a:81:98:e5:b5:60:12:27:14:52:1e:13: 72:14:73:d6:20:a7:31:b5:13:1e:83:f4:e0:3c:65: 54:29:65:17:f9:e8:c6:77:69:43:6e:bc:92:63:5f: cd:bd:f2:86:8c:4f:1f:d3:39:b3:5d:3c:48:ec:73: ce:7c:8a:ba:e0:fa:f3:dc:fb:44:ce:99:43:25:38: d2:de:4d:33:24:4a:b7:3a:22:51:72:ab:59:6d:f6: 47:23:2a:09:fa:53:49:91:de:ae:54:3b:0a:1b:c8: 01:97:d8:10:c5:6d:8d:63:77:c3:e6:0e:fb:05:8e: d5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8E:45:27:E7:0C:63:B0:74:7D:C4:60:CC:54:7A:20:99:73:0A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db1ad954-9fb6-3d36-859e-49db91e69215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:10:0e:02:3a:b7:34:93:18:dc:52:3c:01:01:53:be:47:74: 82:29:dd:f4:76:0c:74:a7:04:98:fd:f8:d1:e5:a7:1e:2f:7a: f9:a6:95:40:d6:7d:21:32:bb:b5:dd:d4:7b:29:c6:8c:71:39: 38:1f:4c:ac:35:d6:08:70:1d:ff:29:4f:5d:3a:0f:17:cd:4d: 3e:9d:0a:a7:f3:41:e7:77:33:6b:31:5d:3c:0b:83:12:24:28: 8c:dd:fb:46:4e:f0:98:54:21:c4:13:72:7a:c1:9b:e1:cf:77: 3a:1e:54:02:ab:e6:a0:f4:76:6c:bd:27:ca:94:37:43:a9:be: bf:bf:4d:5d:f8:8d:e0:9c:fe:78:93:d0:35:0e:6c:84:96:bd: 60:d8:13:b5:36:cf:0f:9a:b8:54:6d:e2:99:4f:3c:d3:f1:6f: d3:47:e4:e8:85:d6:66:c7:de:50:a3:af:dd:8c:61:88:64:c9: 45:91:78:86:24:d0:5e:b0:b5:df:be:3c:91:8e:ea:b4:4c:42: a0:93:dc:c8:77:5c:b2:1a:7e:54:3b:41:f7:e0:80:89:ac:29: 81:bd:37:b5:4a:5e:cf:0b:8f:10:d5:f3:d0:41:43:0d:10:10: 4e:fd:23:42:fa:d6:2d:01:83:59:1d:cd:68:c8:64:6d:d5:74: 3c:85:e5:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wObRMYXuG7WC1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk OTkyMmEyYTctOTVmOC00ZTNjLTgyYjMtMTIzODE4MTc4MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroiAKKKnS4bEE2aG9SVFwP0QTr1DAnci/TNi xTJ8XvM2K/j0RFie+7I++u7chGMsGsvtYpYj/emm0K+c7kYzN0XpZB8omKxiFZQk yNB5YYpdSJjoDdd45xBOI0eWkRrW4spJa8EayBY4csOYpjiLzZutVS+QIueAMp47 h0ZuAOqw4Uc8rIZPqFWKgZjltWASJxRSHhNyFHPWIKcxtRMeg/TgPGVUKWUX+ejG d2lDbrySY1/NvfKGjE8f0zmzXTxI7HPOfIq64Prz3PtEzplDJTjS3k0zJEq3OiJR cqtZbfZHIyoJ+lNJkd6uVDsKG8gBl9gQxW2NY3fD5g77BY7VdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaORSfnDGOwdH3EYMxUeiCZcwpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGIxYWQ5NTQtOWZiNi0z ZDM2LTg1OWUtNDlkYjkxZTY5MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAQDgI6tzSTGNxSPAEBU75HdIIp3fR2DHSnBJj9+NHlpx4vevmmlUDW fSEyu7Xd1HspxoxxOTgfTKw11ghwHf8pT106DxfNTT6dCqfzQed3M2sxXTwLgxIk KIzd+0ZO8JhUIcQTcnrBm+HPdzoeVAKr5qD0dmy9J8qUN0Opvr+/TV34jeCc/niT 0DUObISWvWDYE7U2zw+auFRt4plPPNPxb9NH5OiF1mbH3lCjr92MYYhkyUWReIYk 0F6wtd++PJGO6rRMQqCT3Mh3XLIaflQ7QffggImsKYG9N7VKXs8LjxDV89BBQw0Q EE79I0L61i0Bg1kdzWjIZG3VdDyF5co= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:57 2025 by rpki-client