$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa File: 3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa (raw, json) Hash identifier: q+C9rkix4vLC2QTAZSnYIAFcoIWuXvE5InhDSOU75r4= Subject key identifier: BD:AC:5D:3B:C6:66:62:04:93:42:16:49:83:DB:9D:2F:41:94:44:FE Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Certificate serial: 010D0C9F43285845B51312E32745E1E19701D400 Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa Signing time: Mon 29 Apr 2024 14:25:49 +0000 ROA not before: Mon 29 Apr 2024 14:25:49 +0000 ROA not after: Sun 28 Jul 2024 14:25:49 +0000 asID: 215016 IP address blocks: 104.193.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b5:13:12:e3:27:45:e1:e1:97:01:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca Validity Not Before: Apr 29 14:25:49 2024 GMT Not After : Jul 28 14:25:49 2024 GMT Subject: CN=518165f9-2cfc-4044-9856-ea6666b2c951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f0:49:c0:1e:7c:0a:0d:75:15:58:43:60:0f: 4c:49:10:d6:61:5c:17:37:ac:1d:14:56:55:86:6c: de:92:2e:03:10:af:64:14:a3:c5:b2:92:d5:5d:04: 27:da:f5:40:e2:8e:cd:99:e0:de:dd:16:e6:1d:a2: b8:23:e0:77:cd:15:f6:1b:70:7a:cb:a1:a0:c5:d4: 5c:ce:ad:5d:ab:80:a1:05:25:5a:43:d0:fd:05:bd: 0c:33:4e:7d:b3:5e:15:d5:de:4a:45:1f:3a:8e:03: 03:66:f4:ed:d4:60:3e:88:0b:ca:de:b2:b0:5e:d3: be:b3:b2:11:c7:5d:1e:9a:d7:2e:f9:20:a0:3a:ec: 7c:b2:3f:04:04:f2:c2:6f:a1:48:b3:77:53:80:c5: 3c:a2:b9:58:d4:28:b6:34:20:28:bc:d9:6b:a1:99: fa:9a:a5:36:8a:82:11:37:b4:4d:d2:5f:38:3a:d5: ba:55:69:47:dd:fe:77:e0:54:d9:fe:36:fe:33:73: 08:02:97:87:e7:71:5e:cc:66:ac:29:9e:22:69:bb: 03:86:94:ec:1d:8d:4e:40:51:d4:79:d4:cf:a5:b7: 03:29:27:1f:f8:36:9f:6d:bd:e7:f8:ae:a1:a0:76: 29:89:2b:41:51:f1:ff:91:36:86:cb:0d:1a:44:df: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:5D:3B:C6:66:62:04:93:42:16:49:83:DB:9D:2F:41:94:44:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/3f2b9678-6820-3b5b-b536-bc6677e9c5aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl X509v3 Authority Key Identifier: keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer sbgp-ipAddrBlock: critical IPv4: 104.193.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6a:6a:c2:51:44:07:1f:7c:fc:17:d4:69:d3:12:61:2c:04: 9e:b1:bf:81:af:a2:f3:a2:1d:f9:d9:1d:77:8c:eb:71:80:14: 17:22:6d:c2:88:73:eb:f8:e4:32:70:ff:9b:1c:56:01:77:ca: 30:bd:af:5a:fc:93:d7:6f:58:65:24:c3:62:ec:b5:dc:d6:31: 72:33:ce:fd:2b:0d:4a:b9:0e:79:52:e2:53:97:51:ba:8c:b1: f0:ae:9c:5c:0a:e7:03:92:63:c2:9b:ca:b5:b7:26:bc:69:4b: 5f:21:70:49:cb:a2:58:a2:7a:8a:e6:63:08:6e:21:34:5b:c9: e3:08:4b:fb:42:b3:11:26:f6:73:01:8f:31:19:f8:35:95:24: 27:3e:0f:41:1f:66:47:1b:e5:b3:7b:3d:97:8e:31:1b:87:57: b7:ee:17:ac:27:23:d1:45:36:c2:bd:31:dd:a6:d9:f1:1d:cf: 60:ad:38:89:a5:b9:5f:31:2d:4f:55:f8:94:f1:c2:48:d5:36: d2:cb:30:dc:59:67:9e:53:c9:a1:f8:0e:7c:5f:7e:67:0e:27: 4b:f4:24:3b:17:42:3e:db:2c:3a:24:b6:a7:45:b6:ae:a6:cc: 88:3e:3e:bf:23:cb:47:ed:59:c7:88:d6:dc:bd:12:fd:f6:ab: ef:15:0f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW1ExLjJ0Xh4ZcB1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlYTEyZmYtZjk1NC00MjI5LTg4YTItZDJjNjY1NmEw ZWNhMB4XDTI0MDQyOTE0MjU0OVoXDTI0MDcyODE0MjU0OVowLzEtMCsGA1UEAxMk NTE4MTY1ZjktMmNmYy00MDQ0LTk4NTYtZWE2NjY2YjJjOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vBJwB58Cg11FVhDYA9MSRDWYVwXN6wdFFZV hmzeki4DEK9kFKPFspLVXQQn2vVA4o7NmeDe3RbmHaK4I+B3zRX2G3B6y6GgxdRc zq1dq4ChBSVaQ9D9Bb0MM059s14V1d5KRR86jgMDZvTt1GA+iAvK3rKwXtO+s7IR x10emtcu+SCgOux8sj8EBPLCb6FIs3dTgMU8orlY1Ci2NCAovNlroZn6mqU2ioIR N7RN0l84OtW6VWlH3f534FTZ/jb+M3MIApeH53FezGasKZ4iabsDhpTsHY1OQFHU edTPpbcDKScf+Dafbb3n+K6hoHYpiStBUfH/kTaGyw0aRN8otQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2sXTvGZmIEk0IWSYPbnS9BlET+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVh MTJmZi1mOTU0LTQyMjktODhhMi1kMmM2NjU2YTBlY2EvM2YyYjk2NzgtNjgyMC0z YjViLWI1MzYtYmM2Njc3ZTljNWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDBlYTEyZmYtZjk1NC00MjI5LTg4 YTItZDJjNjY1NmEwZWNhL2QwZWExMmZmLWY5NTQtNDIyOS04OGEyLWQyYzY2NTZh MGVjYS5jcmwwHwYDVR0jBBgwFoAUU0R/CWOSUHfPZabuD30f5r3OpLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMGVhMTJmZi1mOTU0LTQyMjktODhhMi1kMmM2 NjU2YTBlY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpqasJRRAcffPwX1GnTEmEsBJ6xv4GvovOiHfnZHXeM63GAFBcibcKI c+v45DJw/5scVgF3yjC9r1r8k9dvWGUkw2LstdzWMXIzzv0rDUq5DnlS4lOXUbqM sfCunFwK5wOSY8KbyrW3JrxpS18hcEnLoliieormYwhuITRbyeMIS/tCsxEm9nMB jzEZ+DWVJCc+D0EfZkcb5bN7PZeOMRuHV7fuF6wnI9FFNsK9Md2m2fEdz2CtOIml uV8xLU9V+JTxwkjVNtLLMNxZZ55TyaH4DnxffmcOJ0v0JDsXQj7bLDoktqdFtq6m zIg+Pr8jy0ftWceI1ty9Ev32q+8VDzc= -----END CERTIFICATE-----Generated at Sun Jun 2 19:33:01 2024 by rpki-client on console-ams.rpki-client.org