$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa File: f0440698-04bf-35f0-99b8-a957ee70ef6d.roa (raw, json) Hash identifier: I53bcT2KxwsnekLGZGo5v7C+YvjDVubReYuRQHbdC0E= Subject key identifier: F5:E2:CB:32:0F:42:88:AD:AF:19:11:B4:B2:30:94:71:45:68:44:26 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B1F649A2EAC2C8E120707840 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 41264 IP address blocks: 104.133.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:49:a2:ea:c2:c8:e1:20:70:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=78aa874c-118b-4ab7-ab67-424b66daa8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:15:c2:39:aa:12:d9:bd:21:80:9f:1a:0d: 3c:cf:38:ee:ee:a5:f1:f3:c4:c4:2d:f5:05:d3:80: 12:a6:fb:5a:ad:ec:e6:16:94:93:00:c7:04:d5:2c: aa:38:a8:af:b6:31:50:1e:5c:d2:a9:f8:d3:4f:8b: 58:31:59:ae:0c:42:78:64:c9:04:09:77:e7:a2:85: db:2e:42:35:8e:9a:88:c5:cd:a0:19:28:cf:79:1a: 2d:e2:03:73:63:ae:ea:8a:fa:f7:f5:b3:64:b0:88: 8f:9e:17:5e:74:43:9b:ea:eb:f3:0d:4c:29:71:19: 7c:76:02:4c:a9:6d:4e:8f:f6:fc:c4:4c:32:8e:db: 2d:3d:fc:e1:42:30:ca:df:fe:21:de:53:e6:b0:f7: 77:1c:65:8d:6d:b2:29:a1:47:23:4b:b6:cb:45:0b: 17:79:27:11:00:1a:40:27:18:4b:9b:7d:ae:8c:ef: e6:bf:35:9e:6f:aa:ba:89:9b:5f:f4:f4:75:6c:50: e5:69:48:33:3a:3c:4c:c3:75:17:3b:4f:62:c5:1a: 94:a4:06:5e:b5:63:39:6b:ab:78:24:bd:bd:e9:e5: 0e:34:79:2b:80:85:e8:8f:d5:bf:87:bc:98:f6:d9: f0:46:28:e2:75:eb:be:d3:15:81:c0:92:83:2a:a8: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:CB:32:0F:42:88:AD:AF:19:11:B4:B2:30:94:71:45:68:44:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0440698-04bf-35f0-99b8-a957ee70ef6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5a:3a:82:35:66:57:06:2a:7d:2f:22:89:0c:9d:20:28:07: 46:88:88:28:bd:23:3b:d6:cd:e1:23:89:05:b2:06:8f:6a:54: 6d:56:c8:bb:5b:5d:da:68:97:ed:08:4f:0b:b1:ad:35:58:26: 53:a5:07:68:72:22:54:6b:83:ca:46:7a:91:76:0e:45:31:ac: a7:48:ba:92:85:59:57:aa:fb:43:33:de:b3:6d:f2:47:81:d8: 7c:10:21:cb:4c:b8:71:d6:c3:74:f9:43:13:cd:b5:3f:c0:25: f5:b2:ae:ba:b5:de:62:07:b6:41:3a:19:d1:94:61:af:79:4b: 2f:25:e7:52:4b:9b:28:ca:0e:50:1b:b2:bc:81:e8:9e:dd:12: 0d:cc:33:db:7b:6e:d7:3b:f2:4f:ac:d8:4d:17:9d:fc:04:f8: b1:8b:ce:41:40:f0:f9:77:f2:69:d2:af:75:b0:78:bd:64:7e: b2:dc:20:a3:ac:9c:7e:69:06:a3:be:e8:b9:b8:5a:e8:cc:6c: 00:72:70:78:ad:d0:ec:e2:18:50:d4:4d:5a:d9:b5:5a:16:1c: cf:12:a9:8e:be:de:e4:50:cf:d1:44:79:14:57:d4:99:27:58: e4:67:23:5c:db:48:ec:63:7b:1b:02:1d:65:9a:9a:70:ce:70: 67:0e:a8:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kmi6sLI4SBweEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NzhhYTg3NGMtMTE4Yi00YWI3LWFiNjctNDI0YjY2ZGFhOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj4VwjmqEtm9IYCfGg08zzju7qXx88TELfUF 04ASpvtarezmFpSTAMcE1SyqOKivtjFQHlzSqfjTT4tYMVmuDEJ4ZMkECXfnooXb LkI1jpqIxc2gGSjPeRot4gNzY67qivr39bNksIiPnhdedEOb6uvzDUwpcRl8dgJM qW1Oj/b8xEwyjtstPfzhQjDK3/4h3lPmsPd3HGWNbbIpoUcjS7bLRQsXeScRABpA JxhLm32ujO/mvzWeb6q6iZtf9PR1bFDlaUgzOjxMw3UXO09ixRqUpAZetWM5a6t4 JL296eUONHkrgIXoj9W/h7yY9tnwRijideu+0xWBwJKDKqjaqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXiyzIPQoitrxkRtLIwlHFFaEQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjA0NDA2OTgtMDRiZi0z NWYwLTk5YjgtYTk1N2VlNzBlZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtaOoI1ZlcGKn0vIokMnSAoB0aIiCi9IzvWzeEjiQWyBo9qVG1WyLtb Xdpol+0ITwuxrTVYJlOlB2hyIlRrg8pGepF2DkUxrKdIupKFWVeq+0Mz3rNt8keB 2HwQIctMuHHWw3T5QxPNtT/AJfWyrrq13mIHtkE6GdGUYa95Sy8l51JLmyjKDlAb sryB6J7dEg3MM9t7btc78k+s2E0XnfwE+LGLzkFA8Pl38mnSr3WweL1kfrLcIKOs nH5pBqO+6Lm4WujMbABycHit0OziGFDUTVrZtVoWHM8SqY6+3uRQz9FEeRRX1Jkn WORnI1zbSOxjexsCHWWamnDOcGcOqPc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:13 2025 by rpki-client