$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa File: 08dd8f01-f24b-30a6-8e14-4514805f2501.roa (raw, json) Hash identifier: vVZcrO5GeDx88YO1Lu3W50pWk6ptDjHcUFciHGaAAa0= Subject key identifier: C3:4C:00:7C:40:C6:6D:71:C9:16:FD:CE:0E:3F:CD:33:CC:D8:BE:1B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285845883DE9C42E24D867AAE66900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa Signing time: Sat 13 Apr 2024 13:00:34 +0000 ROA not before: Sat 13 Apr 2024 13:00:34 +0000 ROA not after: Fri 12 Jul 2024 13:00:34 +0000 asID: 9009 IP address blocks: 104.250.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:88:3d:e9:c4:2e:24:d8:67:aa:e6:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 13 13:00:34 2024 GMT Not After : Jul 12 13:00:34 2024 GMT Subject: CN=a318d442-771a-486f-a5cf-e3994701b0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:c8:70:42:0b:26:09:f4:32:fb:6d:7a:b4: a1:aa:71:53:6a:8e:37:77:00:32:bc:63:c6:66:30: 4a:7b:18:3e:cf:e7:30:07:56:f9:63:d4:11:39:f1: a6:ac:e1:07:60:f4:ec:08:11:1f:68:4e:02:78:dd: 70:b8:37:00:c6:09:9b:18:0b:0e:cd:4d:57:d4:25: ce:fe:de:e2:2a:ad:e5:7f:0d:cf:93:7e:79:20:0a: 93:7f:bc:15:bf:42:f8:10:c0:0d:4a:24:d0:98:04: 67:75:73:70:13:86:d8:c5:f7:e7:66:b0:04:94:18: f4:d8:ed:74:19:6f:8b:91:dc:1b:f1:7f:f1:2a:14: 14:84:ea:0a:6b:b5:92:79:5b:6d:47:9a:7a:5d:97: 7f:ba:98:de:3b:28:b8:c7:1f:13:e4:a5:96:af:52: 8f:56:3c:ce:ab:13:02:ce:ae:7d:eb:fa:65:9b:1e: d7:5d:d1:27:bf:21:8b:23:c9:bb:3e:e2:c6:6d:3d: 67:0a:12:ff:ef:a1:27:81:82:74:fe:96:64:10:da: 13:2f:e2:30:bb:a0:73:30:ab:b0:14:49:87:17:ca: 67:a8:0b:b5:7a:b4:94:c5:d9:28:64:e0:a5:29:0e: 7f:4a:79:66:b0:81:45:4b:ba:91:e4:95:8f:9d:dc: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:00:7C:40:C6:6D:71:C9:16:FD:CE:0E:3F:CD:33:CC:D8:BE:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8b:55:0b:ec:dc:8b:4b:10:2a:5e:78:09:0c:52:67:f8:47: 92:43:0b:33:fa:f6:ac:a6:62:f6:91:20:fd:b1:e1:9c:5c:d2: 86:e1:5c:38:6a:9b:87:41:91:a4:15:90:09:cc:84:42:d5:fb: ab:ce:55:89:66:a2:91:cf:58:fe:85:bb:50:67:f2:8d:a1:40: 2d:79:9a:06:2d:bd:48:a6:a1:8d:72:3b:bf:6d:b3:f7:72:a0: 76:6a:dd:71:07:7c:16:e5:70:f1:71:9a:8d:dd:1b:6a:dd:ed: 0e:14:fd:e5:45:a9:e5:e7:49:5f:a2:11:76:9d:c9:fd:9b:bf: b7:cc:77:33:81:1e:2e:40:a8:e5:97:ee:23:90:24:80:5e:c6: bb:6f:77:76:bd:cc:87:09:56:0e:c3:78:e9:af:b0:0b:aa:df: 31:3e:e4:f3:8f:66:dc:45:f8:1a:d7:44:ad:2f:d9:6d:17:a8: d4:f2:30:18:ce:17:08:7f:df:08:75:8b:46:b2:0c:17:0d:a2: 01:84:46:bc:54:df:e8:1e:d5:9b:1e:1c:34:cb:a7:a5:df:d1: 10:ac:7a:dc:d6:e9:30:de:36:d5:c6:a4:58:ed:81:03:ca:67: f1:f1:b1:ce:4e:be:ba:31:9a:ba:63:e3:db:49:29:59:4e:54: 79:92:e3:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWIPenELiTYZ6rmaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDQxMzEzMDAzNFoXDTI0MDcxMjEzMDAzNFowLzEtMCsGA1UEAxMk YTMxOGQ0NDItNzcxYS00ODZmLWE1Y2YtZTM5OTQ3MDFiMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpTIcEILJgn0MvtterShqnFTao43dwAyvGPG ZjBKexg+z+cwB1b5Y9QROfGmrOEHYPTsCBEfaE4CeN1wuDcAxgmbGAsOzU1X1CXO /t7iKq3lfw3Pk355IAqTf7wVv0L4EMANSiTQmARndXNwE4bYxffnZrAElBj02O10 GW+Lkdwb8X/xKhQUhOoKa7WSeVttR5p6XZd/upjeOyi4xx8T5KWWr1KPVjzOqxMC zq596/plmx7XXdEnvyGLI8m7PuLGbT1nChL/76EngYJ0/pZkENoTL+Iwu6BzMKuw FEmHF8pnqAu1erSUxdkoZOClKQ5/SnlmsIFFS7qR5JWPndyIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNMAHxAxm1xyRb9zg4/zTPM2L4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhkZDhmMDEtZjI0Yi0z MGE2LThlMTQtNDUxNDgwNWYyNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWLVQvs3ItLECpeeAkMUmf4R5JDCzP69qymYvaRIP2x4Zxc0obhXDhq m4dBkaQVkAnMhELV+6vOVYlmopHPWP6Fu1Bn8o2hQC15mgYtvUimoY1yO79ts/dy oHZq3XEHfBblcPFxmo3dG2rd7Q4U/eVFqeXnSV+iEXadyf2bv7fMdzOBHi5AqOWX 7iOQJIBexrtvd3a9zIcJVg7DeOmvsAuq3zE+5POPZtxF+BrXRK0v2W0XqNTyMBjO Fwh/3wh1i0ayDBcNogGERrxU3+ge1ZseHDTLp6Xf0RCsetzW6TDeNtXGpFjtgQPK Z/Hxsc5Ovroxmrpj49tJKVlOVHmS46Y= -----END CERTIFICATE-----Generated at Sun Apr 28 03:24:01 2024 by rpki-client on console-ams.rpki-client.org