$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee555de6-d117-34c9-a85f-5f2680d75736.roa File: ee555de6-d117-34c9-a85f-5f2680d75736.roa (raw, json) Hash identifier: eSoTOQfe/SSYxA/YUYkS1HDziF7XdP3LuijdNzC6DJU= Subject key identifier: 95:04:18:E9:ED:2B:D3:9A:6F:D3:20:7A:0A:3B:A4:A2:0E:8F:F1:F2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0E61369E787D8A5BE2408 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee555de6-d117-34c9-a85f-5f2680d75736.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 104.134.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:e6:13:69:e7:87:d8:a5:be:24:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=3d443356-a746-4a3a-a350-d12ce2f1990e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:7d:b0:8a:9d:99:0e:86:24:58:94:3b:bf: 97:35:37:8b:cf:df:bb:93:85:bf:81:6f:8a:ff:8b: 0c:0f:66:d3:b5:b4:2c:93:c7:a7:32:e7:db:d7:5c: 4e:36:3e:15:4c:44:8f:0d:5a:9a:17:73:80:cf:9c: d0:09:66:98:09:0e:59:d1:13:61:27:91:24:56:e8: 02:c2:78:37:14:d6:4c:1b:c6:63:f0:99:b8:cf:80: 46:c9:0b:ba:ed:e9:86:07:74:0f:46:97:7f:c8:50: 7d:31:3b:28:7d:45:5f:a5:c1:58:d7:b1:79:c7:ed: a0:d0:e6:6b:58:0f:69:57:58:c9:82:0e:23:7f:da: 57:b7:31:df:8d:96:23:38:50:d6:9e:d7:76:f1:26: 09:e7:75:ff:d7:2a:aa:47:2a:24:27:c1:d7:17:52: d4:b0:9c:b4:d6:c2:45:9b:a8:d9:fc:8d:d3:47:06: e2:6c:da:ce:35:82:2e:81:7c:fb:ed:b2:89:5b:b4: 01:2e:1b:96:18:ea:77:d8:8c:cf:1a:b5:15:ff:6e: 43:b5:57:02:4b:45:ed:f5:fe:12:93:e5:e7:f5:5c: be:0e:c0:20:57:12:04:2e:5b:d3:8f:5d:6f:47:30: 66:56:42:50:4b:5d:06:bd:4b:e9:6b:5d:c1:23:89: b2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:04:18:E9:ED:2B:D3:9A:6F:D3:20:7A:0A:3B:A4:A2:0E:8F:F1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ee555de6-d117-34c9-a85f-5f2680d75736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:23:5c:45:52:a4:8d:3a:50:68:e4:e8:03:60:78:97:22:1f: d3:63:87:a8:ae:69:df:2b:78:4e:37:a8:f4:48:aa:d6:2e:61: ff:45:f7:42:99:c9:39:7d:bd:5b:84:73:82:a3:ff:b3:31:39: 00:0b:3b:ee:79:09:d1:8a:c8:18:be:ac:f0:de:7d:d5:cf:72: 86:17:25:00:3e:76:bf:40:82:38:4d:66:08:f9:7e:a1:09:13: ad:d4:1c:78:9f:6a:94:2d:48:64:21:a4:a1:cf:e3:95:63:24: 45:54:27:69:cd:6f:f1:e3:91:a5:5b:85:46:8c:35:ef:75:aa: ea:82:70:8e:8e:7b:15:d2:57:49:24:fc:24:08:75:18:b3:bf: ab:aa:f8:66:18:3e:85:31:46:1d:a6:82:f9:8a:15:b5:79:a0: e6:13:39:5b:af:0b:ed:33:f3:24:80:ed:1a:fd:f2:20:22:62: 8a:c4:39:5c:22:29:ed:89:8c:b4:08:74:01:50:30:9f:04:94: c7:4b:13:5b:ce:da:c3:46:ff:8c:73:7f:50:d2:13:53:98:5b: 68:87:b1:9d:d5:0f:d1:ad:ff:77:fd:5d:a9:97:e2:26:fc:38: 74:1e:b7:32:be:89:aa:d0:e9:7b:77:2b:49:f3:6e:d2:49:ec: 36:91:d3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOYTaeeH2KW+JAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk M2Q0NDMzNTYtYTc0Ni00YTNhLWEzNTAtZDEyY2UyZjE5OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQd9sIqdmQ6GJFiUO7+XNTeLz9+7k4W/gW+K /4sMD2bTtbQsk8enMufb11xONj4VTESPDVqaF3OAz5zQCWaYCQ5Z0RNhJ5EkVugC wng3FNZMG8Zj8Jm4z4BGyQu67emGB3QPRpd/yFB9MTsofUVfpcFY17F5x+2g0OZr WA9pV1jJgg4jf9pXtzHfjZYjOFDWntd28SYJ53X/1yqqRyokJ8HXF1LUsJy01sJF m6jZ/I3TRwbibNrONYIugXz77bKJW7QBLhuWGOp32IzPGrUV/25DtVcCS0Xt9f4S k+Xn9Vy+DsAgVxIELlvTj11vRzBmVkJQS10GvUvpa13BI4myFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUEGOntK9Oab9Mgego7pKIOj/HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWU1NTVkZTYtZDExNy0z NGM5LWE4NWYtNWYyNjgwZDc1NzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0jXEVSpI06UGjk6ANgeJciH9Njh6iuad8reE43qPRIqtYuYf9F90KZ yTl9vVuEc4Kj/7MxOQALO+55CdGKyBi+rPDefdXPcoYXJQA+dr9AgjhNZgj5fqEJ E63UHHifapQtSGQhpKHP45VjJEVUJ2nNb/HjkaVbhUaMNe91quqCcI6OexXSV0kk /CQIdRizv6uq+GYYPoUxRh2mgvmKFbV5oOYTOVuvC+0z8ySA7Rr98iAiYorEOVwi Ke2JjLQIdAFQMJ8ElMdLE1vO2sNG/4xzf1DSE1OYW2iHsZ3VD9Gt/3f9XamX4ib8 OHQetzK+iarQ6Xt3K0nzbtJJ7DaR05g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:31 2025 by rpki-client