$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa File: e38a345b-3007-3bfd-a88b-6b24141726d3.roa (raw, json) Hash identifier: 0+IHhPlRvhPusVTvhqOlv42vjeJ0i+5yzeb2lBTcl88= Subject key identifier: 0B:F1:E1:59:3C:6A:55:94:61:6D:23:E9:E7:B7:35:CC:E0:A6:4B:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845B7325162BA959A2F25DE8000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa Signing time: Tue 30 Apr 2024 08:40:23 +0000 ROA not before: Tue 30 Apr 2024 08:40:23 +0000 ROA not after: Mon 29 Jul 2024 08:40:23 +0000 asID: 20940 IP address blocks: 104.86.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:32:51:62:ba:95:9a:2f:25:de:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 08:40:23 2024 GMT Not After : Jul 29 08:40:23 2024 GMT Subject: CN=77a0ca01-4bcc-4acc-b487-cb8363753a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:37:bb:8a:f1:6f:8e:16:8d:89:6f:26:c7: df:9a:11:92:a8:36:07:35:0f:1a:fb:9d:b2:63:53: a2:3d:ce:92:02:17:4a:ab:74:7c:54:dd:70:ae:4a: 15:32:b7:d2:98:d8:ce:24:06:59:b0:de:df:4d:e8: 26:03:7c:8b:25:c9:38:06:bc:54:f0:71:0c:84:95: 78:da:44:48:2c:8d:5c:ab:ca:81:e5:bb:74:25:45: 81:fe:67:8b:3b:87:42:a9:cc:4c:b9:ad:5e:ec:9c: 55:38:ce:c5:cc:0e:ee:72:ed:6a:14:35:b4:71:01: 28:b0:5b:8c:39:e8:b1:2e:1e:c1:41:29:cd:4e:46: a2:bc:c3:35:ad:fb:c1:49:cd:33:29:04:fe:d3:35: a5:0e:fe:97:58:a7:0c:9d:62:b4:28:d8:6b:2b:0c: 7e:cd:8c:e7:55:5d:29:36:fb:70:aa:ea:a9:1d:e3: 60:ca:60:94:62:34:aa:b8:47:1d:b1:1b:e9:8f:b4: f5:7f:e2:bd:4e:4d:1f:e6:9f:76:cb:bf:b2:9d:4b: 24:61:58:33:77:04:c0:5d:65:64:45:ee:92:54:67: 08:09:12:5d:d4:29:4b:29:df:f1:ae:a6:f9:07:b7: 4d:ac:35:3a:18:6f:34:94:f0:ee:3d:ed:a3:86:de: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:E1:59:3C:6A:55:94:61:6D:23:E9:E7:B7:35:CC:E0:A6:4B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:08:78:1e:ac:69:26:06:ef:fd:9a:97:24:06:91:3a:bf:03: 82:81:f3:74:e3:50:14:b8:44:08:70:e7:c0:d5:2a:06:0f:a5: 54:60:0e:29:4e:ab:b7:de:45:ae:00:df:02:55:7c:12:4b:65: 16:03:d0:2b:6f:78:77:90:72:c8:33:b0:39:81:0a:fc:1c:b0: e6:bd:eb:43:c1:75:b0:dd:48:2f:dc:49:87:51:a2:1f:85:82: 77:8a:ae:1d:fc:77:33:fd:ba:64:dd:be:d3:b3:45:84:3c:5d: 0c:ad:ad:71:ec:54:f2:3a:04:80:89:67:8e:35:4f:86:9f:8a: 58:dd:24:19:47:ad:d1:ff:16:6c:fb:de:21:ff:95:89:a5:ca: be:ae:9f:58:2b:a8:9b:e0:c7:24:15:fb:f8:19:0c:98:45:6c: c0:6f:c7:ae:87:46:b6:dd:b5:da:9a:94:62:c4:5e:f9:09:00: 8e:45:41:e4:46:b0:f0:f4:c9:a6:26:ae:9f:a1:82:90:1a:8c: ec:76:05:24:23:a7:15:38:de:de:f9:ec:bc:c6:de:8b:1f:da: fc:df:47:b0:69:38:11:65:60:fa:40:3c:83:58:6a:d7:cd:b1: 51:66:f2:d4:b9:fa:d4:06:f7:47:82:3b:3f:68:2b:47:47:ec: 05:12:22:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3MlFiupWaLyXegAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQzMDA4NDAyM1oXDTI0MDcyOTA4NDAyM1owLzEtMCsGA1UEAxMk NzdhMGNhMDEtNGJjYy00YWNjLWI0ODctY2I4MzYzNzUzYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA03u4rxb44WjYlvJsffmhGSqDYHNQ8a+52y Y1OiPc6SAhdKq3R8VN1wrkoVMrfSmNjOJAZZsN7fTegmA3yLJck4BrxU8HEMhJV4 2kRILI1cq8qB5bt0JUWB/meLO4dCqcxMua1e7JxVOM7FzA7ucu1qFDW0cQEosFuM OeixLh7BQSnNTkaivMM1rfvBSc0zKQT+0zWlDv6XWKcMnWK0KNhrKwx+zYznVV0p NvtwquqpHeNgymCUYjSquEcdsRvpj7T1f+K9Tk0f5p92y7+ynUskYVgzdwTAXWVk Re6SVGcICRJd1ClLKd/xrqb5B7dNrDU6GG80lPDuPe2jht5qtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvx4Vk8alWUYW0j6ee3NczgpkuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM4YTM0NWItMzAwNy0z YmZkLWE4OGItNmIyNDE0MTcyNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4IeB6saSYG7/2alyQGkTq/A4KB83TjUBS4RAhw58DVKgYPpVRgDilO q7feRa4A3wJVfBJLZRYD0CtveHeQcsgzsDmBCvwcsOa960PBdbDdSC/cSYdRoh+F gneKrh38dzP9umTdvtOzRYQ8XQytrXHsVPI6BICJZ441T4afiljdJBlHrdH/Fmz7 3iH/lYmlyr6un1grqJvgxyQV+/gZDJhFbMBvx66HRrbdtdqalGLEXvkJAI5FQeRG sPD0yaYmrp+hgpAajOx2BSQjpxU43t757LzG3osf2vzfR7BpOBFlYPpAPINYatfN sVFm8tS5+tQG90eCOz9oK0dH7AUSIuQ= -----END CERTIFICATE-----Generated at Fri May 17 21:41:24 2024 by rpki-client on console-fra.rpki-client.org