$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/df370ee2-60f4-3d87-879e-faf4b2767453.roa File: df370ee2-60f4-3d87-879e-faf4b2767453.roa (raw, json) Hash identifier: +tbHTMXnMuqAx+Tc0+PcXgmEdbtw5RNUoCuQm/tw3h8= Subject key identifier: 29:62:B8:62:6F:3D:7C:69:24:72:48:A7:DD:36:4C:0B:E6:47:A2:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F64C3DB41D310059A12C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/df370ee2-60f4-3d87-879e-faf4b2767453.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4c:3d:b4:1d:31:00:59:a1:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=974e21ca-27b2-4705-b3b4-47f1e0a4d341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:c8:41:29:ff:6b:04:2f:44:1d:ab:4c:07: 0c:f0:b1:9f:8f:8e:b5:c7:de:93:74:58:4c:46:98: eb:8d:ac:f0:11:0c:c9:8e:d2:ed:a6:d7:5c:86:6e: c3:16:c1:f2:8e:71:29:89:03:a9:bd:5a:f4:60:71: 1f:6c:09:2f:63:bc:0e:85:26:7c:1d:3a:cd:4c:4b: 98:46:f3:01:ff:82:22:58:31:d8:65:5e:a0:c9:55: e8:bd:4d:ee:e8:09:d1:d1:a4:04:13:c6:03:9d:d5: f7:75:8d:51:47:af:48:c1:34:8e:50:4c:71:20:fe: d9:3d:a1:f5:0a:8a:4f:d1:96:c6:3d:37:24:5b:ea: cb:d6:d3:88:a0:38:5f:2a:7e:22:37:71:60:5d:b6: 5d:4a:67:70:57:73:0f:31:3d:33:df:78:f2:9a:06: 18:78:40:0c:b6:fd:fd:07:8d:9c:4d:56:f5:35:50: 50:4b:b2:42:1f:4e:2a:ad:ff:43:c2:da:2e:1b:c7: 90:0a:0c:56:a1:40:87:f7:ae:2e:1c:40:03:33:22: 6f:6d:c9:53:78:f7:7c:6d:87:51:73:f6:37:6f:02: 7e:dd:3e:8b:2f:bd:44:0e:34:fe:ac:a7:ef:8d:19: d9:d5:0f:c8:61:88:c2:b6:89:f7:60:d2:da:87:b1: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:62:B8:62:6F:3D:7C:69:24:72:48:A7:DD:36:4C:0B:E6:47:A2:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/df370ee2-60f4-3d87-879e-faf4b2767453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d0:03:6d:3e:57:64:ea:ae:78:19:b0:f7:c5:8f:0e:c1:c4: 65:9d:ec:bd:c9:a9:7e:01:d8:87:9e:eb:8d:ec:a6:c2:05:c3: a4:50:a7:26:24:60:43:51:cf:fb:63:d8:87:b4:67:48:ba:a3: 3b:b8:3f:5e:ba:27:5a:bd:22:e9:8e:57:ae:2a:94:17:80:a4: 76:16:02:9f:44:e5:b5:97:17:ae:3d:7d:6f:df:4d:f7:79:c3: c1:cf:22:fc:94:35:78:e0:8c:6e:fa:46:40:34:03:b8:10:97: ef:2a:67:80:2b:f7:74:33:d3:f7:24:a2:b3:87:d1:d5:6e:0b: 18:07:8d:cb:dc:62:3b:5a:96:4b:aa:0b:54:b0:1e:e1:a4:2c: 2d:d7:a8:2c:fb:31:3a:36:40:46:b6:f3:f9:86:a8:91:b3:d6: af:9d:3c:f2:76:dc:e6:92:ad:01:40:22:52:98:e5:41:80:86: ca:37:b2:bc:45:a6:09:d4:a6:e5:95:21:30:86:dc:15:1a:1b: ef:1d:9c:d7:61:59:f5:76:7a:c6:db:7a:61:7b:21:24:af:c4: 37:09:a8:e9:21:1b:22:4c:90:ed:ac:11:08:87:d8:31:55:81: 70:9d:3e:dd:5a:5e:7d:29:13:0f:52:67:76:ff:3d:85:c0:be: 36:cc:01:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kw9tB0xAFmhLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk OTc0ZTIxY2EtMjdiMi00NzA1LWIzYjQtNDdmMWUwYTRkMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohDIQSn/awQvRB2rTAcM8LGfj461x96TdFhM RpjrjazwEQzJjtLtptdchm7DFsHyjnEpiQOpvVr0YHEfbAkvY7wOhSZ8HTrNTEuY RvMB/4IiWDHYZV6gyVXovU3u6AnR0aQEE8YDndX3dY1RR69IwTSOUExxIP7ZPaH1 CopP0ZbGPTckW+rL1tOIoDhfKn4iN3FgXbZdSmdwV3MPMT0z33jymgYYeEAMtv39 B42cTVb1NVBQS7JCH04qrf9DwtouG8eQCgxWoUCH964uHEADMyJvbclTePd8bYdR c/Y3bwJ+3T6LL71EDjT+rKfvjRnZ1Q/IYYjCton3YNLah7HgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCliuGJvPXxpJHJIp902TAvmR6ImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGYzNzBlZTItNjBmNC0z ZDg3LTg3OWUtZmFmNGIyNzY3NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLQA20+V2TqrngZsPfFjw7BxGWd7L3JqX4B2Iee643spsIFw6RQpyYk YENRz/tj2Ie0Z0i6ozu4P166J1q9IumOV64qlBeApHYWAp9E5bWXF649fW/fTfd5 w8HPIvyUNXjgjG76RkA0A7gQl+8qZ4Ar93Qz0/ckorOH0dVuCxgHjcvcYjtalkuq C1SwHuGkLC3XqCz7MTo2QEa28/mGqJGz1q+dPPJ23OaSrQFAIlKY5UGAhso3srxF pgnUpuWVITCG3BUaG+8dnNdhWfV2esbbemF7ISSvxDcJqOkhGyJMkO2sEQiH2DFV gXCdPt1aXn0pEw9SZ3b/PYXAvjbMAcg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:23 2025 by rpki-client