$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json) Hash identifier: usK5sZWj6/v7kE8XkAM7Yr6hodD53xjxLjfg49ltx44= Subject key identifier: 5E:F5:99:D4:69:E0:1A:C0:B2:9D:24:E9:66:75:37:0B:DE:48:F1:23 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F432858459E9368D6038A2DDEF58FE580 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa Signing time: Sun 21 Apr 2024 13:00:35 +0000 ROA not before: Sun 21 Apr 2024 13:00:35 +0000 ROA not after: Sat 20 Jul 2024 13:00:35 +0000 asID: 62533 IP address blocks: 104.219.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9e:93:68:d6:03:8a:2d:de:f5:8f:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Apr 21 13:00:35 2024 GMT Not After : Jul 20 13:00:35 2024 GMT Subject: CN=904766db-86f2-496c-a757-f984ab7aeae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:db:7b:fb:3e:62:46:cc:1b:c0:f2:f6:5e: 63:83:ad:f9:ac:59:cc:ae:b0:f3:6c:40:ca:c1:3a: 0e:6e:f0:2c:a2:d5:67:46:f4:c6:90:ed:fb:e3:4c: a2:07:c0:88:71:9e:66:b5:65:08:3b:6f:56:08:30: 44:f5:1c:d2:24:8e:05:a7:d3:20:db:46:6c:00:38: 95:b6:80:04:39:bd:89:62:e6:6f:d0:a3:ed:b1:1e: c8:29:36:b3:3e:42:f8:40:7a:98:48:98:2d:04:c1: 0c:bf:2b:09:da:48:fc:76:f6:d5:b9:4b:f7:7d:81: 0c:9b:c4:28:88:99:6d:95:93:9b:0c:2d:53:3d:8c: 21:db:41:4b:20:f4:8d:c8:be:7c:b2:11:ce:c3:bb: 5f:ca:ec:72:1c:5e:cf:12:fa:66:8d:9a:e6:6e:f2: 87:56:ba:73:22:ea:55:55:43:81:ed:ac:bf:e8:f8: 9d:44:8f:8e:22:0a:58:52:69:d5:30:28:cf:b7:ce: 4a:ea:4e:f3:5a:70:bf:32:d6:71:4e:97:0a:bd:7d: 69:76:0d:0d:e5:dd:03:d5:e3:56:80:a3:8f:d5:05: 84:52:b2:fd:94:67:db:96:c9:05:14:76:b6:5d:a4: 9d:4a:4f:32:1a:1f:ed:e6:5b:d0:c7:5e:19:48:d1: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:99:D4:69:E0:1A:C0:B2:9D:24:E9:66:75:37:0B:DE:48:F1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:01:b3:21:b5:c3:80:aa:d6:bb:ed:b0:b4:67:af:44:07:bb: 58:13:14:9e:87:a6:59:48:98:ad:56:c3:48:09:eb:95:0f:b8: f0:11:1c:cc:c4:2a:d6:de:c1:6e:96:44:eb:be:eb:29:a3:36: a5:0d:07:b6:34:c2:08:f5:e9:4e:e2:28:19:b7:45:6c:4e:ba: 45:69:f0:ef:88:87:d3:56:f0:57:06:4b:50:17:be:61:3b:b4: 8f:50:55:8a:c0:aa:fb:ca:13:8e:67:34:ba:49:9c:62:b4:cc: 88:1a:cc:c1:30:c3:0d:01:f5:f9:56:21:8b:4b:75:9f:9e:8f: 4d:c6:c2:36:ad:b3:5c:b9:8e:06:85:17:51:71:df:0e:81:79: 2f:5c:f6:3f:9a:64:9f:3a:90:9a:98:8e:28:04:36:02:9d:49: 90:db:4d:5e:65:2c:b0:20:83:7e:a7:24:ee:98:34:ac:7c:a4: 5d:35:53:a6:ee:9e:02:3d:6c:2f:1f:3b:54:e8:0c:13:6a:38: 7a:94:96:83:7d:8c:cb:28:c6:64:7a:83:51:3c:90:ad:4c:a3: ab:99:ea:2c:77:11:1a:c5:10:19:61:ba:1a:3f:90:cb:eb:4a: 8e:42:8f:7b:c3:1c:61:99:1f:b7:5f:03:f3:d2:65:0d:19:c3: e8:f5:73:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2jWA4ot3vWP5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk OTA0NzY2ZGItODZmMi00OTZjLWE3NTctZjk4NGFiN2FlYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryrbe/s+YkbMG8Dy9l5jg635rFnMrrDzbEDK wToObvAsotVnRvTGkO3740yiB8CIcZ5mtWUIO29WCDBE9RzSJI4Fp9Mg20ZsADiV toAEOb2JYuZv0KPtsR7IKTazPkL4QHqYSJgtBMEMvysJ2kj8dvbVuUv3fYEMm8Qo iJltlZObDC1TPYwh20FLIPSNyL58shHOw7tfyuxyHF7PEvpmjZrmbvKHVrpzIupV VUOB7ay/6PidRI+OIgpYUmnVMCjPt85K6k7zWnC/MtZxTpcKvX1pdg0N5d0D1eNW gKOP1QWEUrL9lGfblskFFHa2XaSdSk8yGh/t5lvQx14ZSNGbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF71mdRp4BrAsp0k6WZ1NwveSPEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvYmYzNGE5MjItMDQ3MS0z NGFmLWJiMjktMWNlYmQ4NTZjZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMBsyG1w4Cq1rvtsLRnr0QHu1gTFJ6HpllImK1Ww0gJ65UPuPARHMzE KtbewW6WROu+6ymjNqUNB7Y0wgj16U7iKBm3RWxOukVp8O+Ih9NW8FcGS1AXvmE7 tI9QVYrAqvvKE45nNLpJnGK0zIgazMEwww0B9flWIYtLdZ+ej03Gwjats1y5jgaF F1Fx3w6BeS9c9j+aZJ86kJqYjigENgKdSZDbTV5lLLAgg36nJO6YNKx8pF01U6bu ngI9bC8fO1ToDBNqOHqUloN9jMsoxmR6g1E8kK1Mo6uZ6ix3ERrFEBlhuho/kMvr So5Cj3vDHGGZH7dfA/PSZQ0Zw+j1c2Y= -----END CERTIFICATE-----Generated at Sun May 19 01:58:24 2024 by rpki-client on console-ams.rpki-client.org