$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e822e953-5fc5-33ef-a9d5-c633593d2c1c.roa File: e822e953-5fc5-33ef-a9d5-c633593d2c1c.roa (raw, json) Hash identifier: 9y3K2jV5JAfZe7r+iN10/o4Cqe9xcNGHuzn4x7KkUas= Subject key identifier: C9:F1:B9:9B:81:57:8B:66:25:9B:4F:71:47:59:28:B0:CC:5B:F8:84 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848AF2BBB7F31E3DD106DA9BD80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e822e953-5fc5-33ef-a9d5-c633593d2c1c.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.132.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:bb:7f:31:e3:dd:10:6d:a9:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=c498f947-3588-4b77-99d2-5d3caca19bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:0a:f7:c9:2b:dc:ff:1e:05:54:97:5a:3b: ba:64:33:39:86:85:fe:51:bf:51:50:20:c1:82:c7: 95:6b:9e:95:53:d8:47:53:17:5c:8d:65:42:72:b0: 4a:0e:c3:b6:8a:2a:1b:6e:e8:48:8a:92:08:21:b8: 8d:0b:1a:fe:f0:00:a7:38:c2:ce:71:6e:ba:73:5f: 29:ac:c5:de:fc:dd:f5:5d:9a:ff:a8:b5:f6:22:aa: 4e:7e:40:20:8f:20:e9:d8:8f:fd:0a:4c:83:40:46: 83:87:40:a4:6b:8b:18:19:d5:c6:66:73:75:2a:44: 61:a8:55:dd:cc:c5:63:e0:dd:9e:25:53:94:9e:98: 84:78:60:56:3e:73:80:9e:98:e1:5b:00:a8:b6:ae: 2a:74:e5:58:5f:72:39:6f:62:7d:8b:dd:21:19:31: b3:16:24:02:55:8b:67:63:d5:b5:70:f8:91:05:6f: a7:d7:cd:34:d9:e4:03:e0:98:20:84:9c:02:24:4e: 91:f4:39:84:fc:d9:90:24:bc:5f:80:cd:2c:be:2b: 29:45:c1:d9:17:28:35:6f:63:87:71:6e:a1:f1:44: 1a:11:37:07:6e:d6:f6:95:49:60:0b:c6:6e:e1:8e: 70:a9:27:0e:4a:40:6a:44:de:4c:12:57:1c:a1:99: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F1:B9:9B:81:57:8B:66:25:9B:4F:71:47:59:28:B0:CC:5B:F8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e822e953-5fc5-33ef-a9d5-c633593d2c1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:42:e8:1e:7f:93:76:ca:a7:d7:39:e1:14:36:ee:5a:5f:f1: 7c:d3:31:7c:df:f1:ab:e4:5c:0a:3d:79:a8:38:19:bf:8a:b8: cd:ea:ef:63:e8:6b:19:e3:0f:af:d0:17:82:de:a8:76:ee:67: 7e:62:fe:06:4d:80:05:1f:af:ab:f4:13:db:f1:83:b4:44:f2: 39:04:e6:d8:63:68:e0:52:6e:bd:74:11:48:26:66:a7:b1:55: 71:c7:74:26:e9:cd:cd:fb:b4:66:6f:d6:ee:81:3a:06:a1:c2: 5c:a2:a8:41:6e:44:fb:cb:1c:dc:90:f1:8e:bb:b7:b6:c9:55: 21:77:9d:a7:fa:48:b1:a3:4b:54:1a:f1:d1:20:12:71:10:93: bc:9c:dd:83:ff:aa:c8:c5:23:de:03:a9:fe:70:55:6a:2b:57: 98:65:12:a6:2c:cf:e0:8e:b5:8b:92:f5:38:5a:e3:e2:f9:fb: 39:31:93:46:bd:66:af:28:92:f6:98:3c:92:a4:81:7e:8e:0f: 88:04:95:a3:b5:40:54:bb:9a:11:9d:d2:2b:5c:1f:1e:de:42: 78:0f:69:0b:81:f4:2e:b0:2d:3c:b7:36:a4:ed:6e:4d:4e:89: 13:4c:e2:95:50:5d:f3:53:f1:26:68:c4:f4:db:e2:0c:57:3c: 0d:38:46:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK7t/MePdEG2pvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YzQ5OGY5NDctMzU4OC00Yjc3LTk5ZDItNWQzY2FjYTE5YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNAK98kr3P8eBVSXWju6ZDM5hoX+Ub9RUCDB gseVa56VU9hHUxdcjWVCcrBKDsO2iiobbuhIipIIIbiNCxr+8ACnOMLOcW66c18p rMXe/N31XZr/qLX2IqpOfkAgjyDp2I/9CkyDQEaDh0Cka4sYGdXGZnN1KkRhqFXd zMVj4N2eJVOUnpiEeGBWPnOAnpjhWwCotq4qdOVYX3I5b2J9i90hGTGzFiQCVYtn Y9W1cPiRBW+n18002eQD4JgghJwCJE6R9DmE/NmQJLxfgM0svispRcHZFyg1b2OH cW6h8UQaETcHbtb2lUlgC8Zu4Y5wqScOSkBqRN5MElccoZlRnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnxuZuBV4tmJZtPcUdZKLDMW/iEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTgyMmU5NTMtNWZjNS0z M2VmLWE5ZDUtYzYzMzU5M2QyYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItC6B5/k3bKp9c54RQ27lpf8XzTMXzf8avkXAo9eag4Gb+KuM3q72Po axnjD6/QF4LeqHbuZ35i/gZNgAUfr6v0E9vxg7RE8jkE5thjaOBSbr10EUgmZqex VXHHdCbpzc37tGZv1u6BOgahwlyiqEFuRPvLHNyQ8Y67t7bJVSF3naf6SLGjS1Qa 8dEgEnEQk7yc3YP/qsjFI94Dqf5wVWorV5hlEqYsz+COtYuS9Tha4+L5+zkxk0a9 Zq8okvaYPJKkgX6OD4gElaO1QFS7mhGd0itcHx7eQngPaQuB9C6wLTy3NqTtbk1O iRNM4pVQXfNT8SZoxPTb4gxXPA04Rjw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:39 2025 by rpki-client