$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa File: 9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa (raw, json) Hash identifier: Tj4G8NaOTGCQsGnsbLTWuqjueyfDsWS7BwGCQO1ndCY= Subject key identifier: D4:92:02:9E:8F:32:5B:42:93:C2:B4:8A:81:27:1A:57:BB:D5:E3:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845B7A1A38C70B9AF2BDD9761C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa Signing time: Tue 30 Apr 2024 12:24:41 +0000 ROA not before: Tue 30 Apr 2024 12:24:41 +0000 ROA not after: Mon 29 Jul 2024 12:24:41 +0000 asID: 20940 IP address blocks: 104.101.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:a1:a3:8c:70:b9:af:2b:dd:97:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 12:24:41 2024 GMT Not After : Jul 29 12:24:41 2024 GMT Subject: CN=d2e9d734-b355-44ef-8e6b-ef5ae4ef1f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:5d:c9:ec:87:36:ff:1d:ba:5c:29:de:1d: b8:7a:d7:1e:e4:b9:5b:4e:27:2b:29:3b:a8:61:ac: 9d:19:84:4c:30:d0:3d:c5:a2:ab:8f:80:96:b3:d2: b8:60:a1:83:be:41:df:94:8d:7c:83:de:b0:90:3a: 91:0f:68:a7:8a:b0:b9:6b:99:63:27:b8:2d:8e:e9: 6f:9d:ac:c4:70:5a:8d:83:2d:f2:c3:ed:c4:45:7c: cc:58:09:49:f1:cf:d8:68:c4:35:aa:ec:8e:85:6b: 5c:ce:3b:cb:81:51:d3:98:e6:6f:b8:a8:d4:06:67: 73:d3:4d:8d:d0:3c:50:f8:a1:f6:fd:4b:82:4a:09: c5:a3:57:74:83:28:9c:25:66:d2:b2:9e:6c:1b:d9: 6e:80:d6:37:31:89:61:03:6c:79:8f:91:fc:07:24: b5:1f:e5:4c:24:0e:7e:8e:88:b1:27:7d:ca:d9:c8: 2d:fe:2d:22:96:fa:2e:f3:ad:53:ea:01:3d:cc:a5: e7:8f:76:e7:d9:66:6b:e4:1c:97:59:ba:6a:a6:cc: 9d:16:f0:0a:f1:30:26:67:a4:45:51:f0:60:1f:0a: 1c:38:73:e1:78:f0:87:67:48:18:0a:92:59:9e:d0: 07:e9:b3:20:17:15:e7:96:64:71:84:3a:d0:78:63: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:02:9E:8F:32:5B:42:93:C2:B4:8A:81:27:1A:57:BB:D5:E3:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9acd7a04-43ef-32f0-8e8c-d9d32e52f11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:71:ee:65:ee:a7:01:ae:d8:23:ef:6e:f4:5d:fd:79:e9:c8: 14:c3:a3:81:fc:26:07:b9:cc:54:9d:9b:ec:2a:2d:b3:26:58: 93:42:40:e6:c8:48:1f:df:fb:57:41:ba:a3:c7:67:d9:5a:44: 12:66:32:21:65:4b:76:47:b7:68:38:ee:be:7b:a6:a3:2e:30: c4:54:55:63:f2:9d:87:be:c8:92:2f:92:57:b2:e6:45:d2:40: 9f:bc:81:33:2d:a5:b4:2a:69:fa:79:15:e0:10:0b:35:fb:bd: a5:94:43:73:be:ab:65:d1:c5:63:41:b1:6b:4d:27:71:21:ab: cc:6a:d6:a2:76:83:b1:be:37:43:fb:3d:74:0a:a7:3c:bf:c7: 5e:56:d5:9c:c1:50:78:17:2f:74:0a:08:da:15:f1:e3:aa:04: c7:d1:24:13:79:4d:c1:9d:3f:00:45:f4:da:c3:13:95:d6:d4: 67:ad:da:92:8b:86:19:06:8f:04:1b:f3:74:4e:15:78:fe:4e: e5:17:a8:52:3c:e9:e3:0d:a7:ef:16:a9:9b:33:c3:09:8c:64: dd:92:a5:01:fa:c3:2a:77:ae:14:3c:c0:39:e8:5c:67:c9:2e: 0a:f4:71:fa:7e:45:d9:ab:40:be:2e:82:38:f4:e5:17:67:78: 83:07:70:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3oaOMcLmvK92XYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQzMDEyMjQ0MVoXDTI0MDcyOTEyMjQ0MVowLzEtMCsGA1UEAxMk ZDJlOWQ3MzQtYjM1NS00NGVmLThlNmItZWY1YWU0ZWYxZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgildyeyHNv8dulwp3h24etce5LlbTicrKTuo YaydGYRMMNA9xaKrj4CWs9K4YKGDvkHflI18g96wkDqRD2inirC5a5ljJ7gtjulv nazEcFqNgy3yw+3ERXzMWAlJ8c/YaMQ1quyOhWtczjvLgVHTmOZvuKjUBmdz002N 0DxQ+KH2/UuCSgnFo1d0gyicJWbSsp5sG9lugNY3MYlhA2x5j5H8ByS1H+VMJA5+ joixJ33K2cgt/i0ilvou861T6gE9zKXnj3bn2WZr5ByXWbpqpsydFvAK8TAmZ6RF UfBgHwocOHPhePCHZ0gYCpJZntAH6bMgFxXnlmRxhDrQeGObRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSSAp6PMltCk8K0ioEnGle71eNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFjZDdhMDQtNDNlZi0z MmYwLThlOGMtZDlkMzJlNTJmMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1x7mXupwGu2CPvbvRd/XnpyBTDo4H8Jge5zFSdm+wqLbMmWJNCQObI SB/f+1dBuqPHZ9laRBJmMiFlS3ZHt2g47r57pqMuMMRUVWPynYe+yJIvkley5kXS QJ+8gTMtpbQqafp5FeAQCzX7vaWUQ3O+q2XRxWNBsWtNJ3Ehq8xq1qJ2g7G+N0P7 PXQKpzy/x15W1ZzBUHgXL3QKCNoV8eOqBMfRJBN5TcGdPwBF9NrDE5XW1Get2pKL hhkGjwQb83ROFXj+TuUXqFI86eMNp+8WqZszwwmMZN2SpQH6wyp3rhQ8wDnoXGfJ Lgr0cfp+RdmrQL4ugjj05RdneIMHcAQ= -----END CERTIFICATE-----Generated at Fri May 17 20:05:33 2024 by rpki-client on console-ams.rpki-client.org