$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffb07fd7-56d5-3ef2-829d-4f66a882c403.roa File: ffb07fd7-56d5-3ef2-829d-4f66a882c403.roa (raw, json) Hash identifier: RYG1Scc+/NUrOq+pfCYebHLTJoz5tLFsEp2ZrfhuaMQ= Subject key identifier: C8:34:52:F3:8B:0D:6A:E0:41:D9:32:8E:AC:B5:FC:00:4E:07:12:AD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858488F21B4CCABFD07590D4F3D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffb07fd7-56d5-3ef2-829d-4f66a882c403.roa Signing time: Thu 16 Jan 2025 02:35:24 +0000 ROA not before: Thu 16 Jan 2025 02:35:24 +0000 ROA not after: Wed 16 Apr 2025 01:35:24 +0000 asID: 15169 IP address blocks: 104.134.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:21:b4:cc:ab:fd:07:59:0d:4f:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 16 02:35:24 2025 GMT Not After : Apr 16 01:35:24 2025 GMT Subject: CN=280bac3d-c6a3-48f9-b4b2-c52ab5bfae3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:c0:e6:ef:00:63:99:5c:0e:85:a3:02:1a: 6c:c7:8e:47:eb:5b:29:5c:22:34:c2:c5:a1:ac:59: 47:d6:8e:81:4a:9b:ae:6a:df:cf:76:4f:c4:6b:ed: 1c:63:64:d2:65:a2:ff:27:38:e1:75:63:30:70:7b: e2:41:54:53:bf:6e:9e:f6:28:7f:c2:7f:45:67:04: 59:c3:49:d7:5f:06:7f:93:83:ae:e2:6b:2d:32:62: 2b:c1:2f:3a:6c:a8:16:c9:70:fb:cb:e0:a0:43:17: f6:fb:58:0b:6c:5b:a9:f4:fd:ec:f4:2a:e4:cd:53: d0:5d:2f:d4:1b:29:c6:0d:ad:f4:07:6e:66:f3:5f: 2d:21:90:7d:fb:9a:55:d0:73:90:6b:a6:0d:b0:c3: 05:9f:63:cb:8b:e8:d9:05:d0:c0:b7:e9:13:a7:16: e7:9c:42:f2:96:b3:00:00:98:da:bd:35:3b:12:91: 10:19:87:e5:4c:4c:3a:d0:51:0b:f3:8b:bc:bf:92: 39:4d:63:6a:9c:83:05:ee:76:2a:bc:18:35:33:67: 61:1e:85:0c:5f:37:04:98:07:5e:56:64:81:f0:b3: 12:28:5a:42:02:1c:54:b9:e3:53:d4:fe:46:c7:8d: 21:68:63:39:e7:8c:98:d9:2a:af:24:bb:c7:7b:0a: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:34:52:F3:8B:0D:6A:E0:41:D9:32:8E:AC:B5:FC:00:4E:07:12:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ffb07fd7-56d5-3ef2-829d-4f66a882c403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:40:fd:11:f1:e9:24:07:d8:48:8d:d1:16:b0:3a:3f:62:f1: 87:dd:cd:37:16:10:4c:30:7f:d3:a3:e8:c6:55:53:ea:c3:f1: d5:f9:7d:33:21:1e:9f:97:09:84:65:07:fe:35:c7:52:f0:d0: 03:22:96:19:d6:8b:df:54:cd:3a:aa:af:f4:32:8b:81:be:86: 01:92:31:c5:bc:b9:39:54:db:13:30:03:31:b7:c7:cd:0f:11: f9:ce:7e:15:b4:4e:4d:9e:69:82:25:18:e6:54:2a:57:bb:89: a7:8b:5d:ce:4b:eb:f9:6d:8b:53:91:0e:d8:2c:5f:9a:d0:96: 94:3d:41:ab:63:b4:d8:45:42:94:50:3a:c4:1b:a2:a5:48:36: 34:02:2e:45:48:bc:d3:7b:54:74:27:2f:b5:83:be:5c:ec:18: ac:ab:2a:e6:30:b0:43:0a:65:71:23:f0:aa:ac:bf:9b:15:3c: d4:a3:17:5f:89:f0:cb:9b:79:d5:e1:1c:fb:07:30:3d:fd:f2: 12:25:37:bc:d0:40:7d:e1:9c:64:18:1e:4c:35:42:97:64:56: 11:5c:87:01:79:dd:e7:9f:4d:7c:1e:93:c2:d5:b6:f4:99:69: 51:72:32:20:44:69:35:ab:bc:c7:dc:8a:cc:b6:a6:f3:58:6e: 61:0e:90:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPIbTMq/0HWQ1PPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDExNjAyMzUyNFoXDTI1MDQxNjAxMzUyNFowLzEtMCsGA1UEAxMk MjgwYmFjM2QtYzZhMy00OGY5LWI0YjItYzUyYWI1YmZhZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ/A5u8AY5lcDoWjAhpsx45H61spXCI0wsWh rFlH1o6BSpuuat/Pdk/Ea+0cY2TSZaL/JzjhdWMwcHviQVRTv26e9ih/wn9FZwRZ w0nXXwZ/k4Ou4mstMmIrwS86bKgWyXD7y+CgQxf2+1gLbFup9P3s9CrkzVPQXS/U GynGDa30B25m818tIZB9+5pV0HOQa6YNsMMFn2PLi+jZBdDAt+kTpxbnnELylrMA AJjavTU7EpEQGYflTEw60FEL84u8v5I5TWNqnIMF7nYqvBg1M2dhHoUMXzcEmAde VmSB8LMSKFpCAhxUueNT1P5Gx40haGM554yY2SqvJLvHewq10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg0UvOLDWrgQdkyjqy1/ABOBxKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmZiMDdmZDctNTZkNS0z ZWYyLTgyOWQtNGY2NmE4ODJjNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElA/RHx6SQH2EiN0RawOj9i8YfdzTcWEEwwf9Oj6MZVU+rD8dX5fTMh Hp+XCYRlB/41x1Lw0AMilhnWi99UzTqqr/Qyi4G+hgGSMcW8uTlU2xMwAzG3x80P EfnOfhW0Tk2eaYIlGOZUKle7iaeLXc5L6/lti1ORDtgsX5rQlpQ9QatjtNhFQpRQ OsQboqVINjQCLkVIvNN7VHQnL7WDvlzsGKyrKuYwsEMKZXEj8Kqsv5sVPNSjF1+J 8MubedXhHPsHMD398hIlN7zQQH3hnGQYHkw1QpdkVhFchwF53eefTXwek8LVtvSZ aVFyMiBEaTWrvMfcisy2pvNYbmEOkMY= -----END CERTIFICATE-----Generated at Fri Apr 4 08:45:19 2025 by rpki-client