$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa File: ebc89f47-058f-303c-ba73-dd10592f859d.roa (raw, json) Hash identifier: hZRXhK9AiVHTgntGGxy2g3sky5I9vJOKBfbNeQbucy0= Subject key identifier: A0:5E:84:DB:F3:6B:61:6A:D8:E7:DE:10:1E:82:A8:4B:BF:0C:B0:59 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E6C1FD676CD2EAE56700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 41264 IP address blocks: 104.133.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e6:c1:fd:67:6c:d2:ea:e5:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=e5f16087-9406-4bc8-be5d-4ddd8c54a7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:4b:ba:2b:4d:a5:39:45:7d:43:3a:0d:3b: 46:09:17:74:41:94:ed:a6:f3:90:5c:90:6c:25:2b: cb:20:2c:20:88:f1:49:5f:93:21:f0:f0:21:a7:25: 6f:79:f4:79:d5:87:2f:a6:03:8b:06:ad:51:7c:0a: 02:5e:1a:8a:cd:cd:f5:ec:64:82:d1:8d:f5:ce:15: ff:50:89:13:c0:81:79:11:6e:65:b1:11:14:de:59: 0e:70:98:6c:35:94:01:5e:6f:bc:95:6b:21:26:23: 66:35:e3:1d:43:70:99:db:32:45:72:c9:c0:9e:e8: 06:44:c4:fc:62:f0:66:63:5c:6b:b9:16:dd:d7:87: f9:23:9b:ca:e2:65:cf:7e:6b:fa:3f:59:c6:9a:a8: 9a:27:c3:cf:78:b7:23:2c:06:4f:64:93:a3:35:66: 6b:63:35:b8:2f:6d:9e:cb:d8:a8:32:f9:55:c6:2e: 60:12:2c:42:55:1b:d3:8c:69:e6:8b:56:2b:7f:9d: d2:fb:c8:dc:c1:32:40:5e:da:0f:cb:b4:c4:0c:df: 8b:c2:f9:00:2d:01:4d:73:dd:cc:d6:d6:9c:85:c6: f7:00:9e:bd:e6:5a:97:c3:b9:52:e0:45:7e:b0:b9: 4a:9e:4e:4f:0e:35:48:78:2e:0f:18:fd:22:25:27: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5E:84:DB:F3:6B:61:6A:D8:E7:DE:10:1E:82:A8:4B:BF:0C:B0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebc89f47-058f-303c-ba73-dd10592f859d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f9:68:68:cd:f4:b7:af:a3:de:f8:ec:ac:76:d6:b4:fa:98: d4:bd:0c:cc:42:6b:4d:c8:e8:e3:bd:f7:69:1b:44:ac:e4:42: 96:c5:3d:d9:24:89:6f:10:7e:97:f3:2f:22:cb:32:b7:d3:cf: a7:e5:15:74:87:df:35:70:f1:d3:ed:99:c9:d8:44:6c:87:0f: 66:63:01:c7:1b:02:0c:0d:8a:ed:fe:31:ff:87:e2:6b:2a:e7: 9b:90:ff:a2:4d:75:c0:4a:01:16:1e:4e:ac:40:4b:7d:98:b2: 5d:6d:48:d7:1c:7e:e1:a1:5a:42:c9:6d:61:35:0b:bd:54:c4: 0b:fa:5f:b5:a1:c1:c8:9f:c3:4b:fb:ac:27:7c:9f:90:18:cf: 13:c1:f8:64:6f:02:2a:07:6b:f6:15:f9:f8:9b:ec:2f:49:0a: 50:a1:85:cc:15:36:c3:aa:6d:99:eb:67:28:59:18:e8:96:76: 73:dc:06:12:cb:d2:39:1c:e4:4f:e9:7a:f8:20:2e:a7:aa:c7: b6:65:6c:6e:ff:d3:db:32:4c:c7:b9:1e:08:24:de:9b:19:c6: bc:1c:b3:01:fd:59:0e:89:4a:a1:71:5e:ba:b0:fd:ee:31:ea: 6b:eb:44:47:ed:da:3e:9a:79:0b:4a:96:f3:93:59:99:93:02: d5:af:56:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wObB/Wds0urlZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk ZTVmMTYwODctOTQwNi00YmM4LWJlNWQtNGRkZDhjNTRhN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum5LuitNpTlFfUM6DTtGCRd0QZTtpvOQXJBs JSvLICwgiPFJX5Mh8PAhpyVvefR51YcvpgOLBq1RfAoCXhqKzc317GSC0Y31zhX/ UIkTwIF5EW5lsREU3lkOcJhsNZQBXm+8lWshJiNmNeMdQ3CZ2zJFcsnAnugGRMT8 YvBmY1xruRbd14f5I5vK4mXPfmv6P1nGmqiaJ8PPeLcjLAZPZJOjNWZrYzW4L22e y9ioMvlVxi5gEixCVRvTjGnmi1Yrf53S+8jcwTJAXtoPy7TEDN+LwvkALQFNc93M 1tachcb3AJ695lqXw7lS4EV+sLlKnk5PDjVIeC4PGP0iJSccMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBehNvza2Fq2OfeEB6CqEu/DLBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWJjODlmNDctMDU4Zi0z MDNjLWJhNzMtZGQxMDU5MmY4NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb5aGjN9Levo9747Kx21rT6mNS9DMxCa03I6OO992kbRKzkQpbFPdkk iW8QfpfzLyLLMrfTz6flFXSH3zVw8dPtmcnYRGyHD2ZjAccbAgwNiu3+Mf+H4msq 55uQ/6JNdcBKARYeTqxAS32Ysl1tSNccfuGhWkLJbWE1C71UxAv6X7Whwcifw0v7 rCd8n5AYzxPB+GRvAioHa/YV+fib7C9JClChhcwVNsOqbZnrZyhZGOiWdnPcBhLL 0jkc5E/pevggLqeqx7ZlbG7/09syTMe5Hggk3psZxrwcswH9WQ6JSqFxXrqw/e4x 6mvrREft2j6aeQtKlvOTWZmTAtWvVgo= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:58 2025 by rpki-client