$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa File: 86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa (raw, json) Hash identifier: 0fMCdlDpWjKL5RklyXeyM+8MUc1Xp7j8Xpkq1WKd6ic= Subject key identifier: 00:6B:29:4A:B1:16:26:E6:5C:A4:04:F5:C9:E2:14:01:87:D2:25:7A Certificate issuer: /CN=86b37376-2d1b-4536-b941-7858431c5839 Certificate serial: 010D0C9F43285847F84F79EF1FA2B8ABC48EB200 Authority key identifier: FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa Signing time: Sat 23 Nov 2024 02:00:28 +0000 ROA not before: Sat 23 Nov 2024 02:00:28 +0000 ROA not after: Fri 21 Feb 2025 02:00:28 +0000 asID: 30115 IP address blocks: 104.166.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f8:4f:79:ef:1f:a2:b8:ab:c4:8e:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b37376-2d1b-4536-b941-7858431c5839 Validity Not Before: Nov 23 02:00:28 2024 GMT Not After : Feb 21 02:00:28 2025 GMT Subject: CN=19e66d7c-da1d-43f7-bdd7-25812d1f9d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:3d:a2:3e:55:b2:b9:5e:9f:a1:c4:ff:00: 3d:d7:3e:08:2a:be:f2:f6:db:e2:95:c1:46:74:02: 9a:3c:d0:97:88:96:5e:82:d7:33:76:7a:74:bb:f4: ba:a2:9f:77:85:b1:c8:54:e9:2d:91:ca:5b:e3:8c: c5:45:c8:f5:3a:3b:34:75:83:89:e8:35:5b:b7:7f: 53:e2:33:96:94:20:c3:3e:e4:39:6e:54:94:65:5e: 9e:4f:8c:84:91:bb:8d:99:d4:40:5d:80:27:5d:80: 01:4a:3f:0c:01:18:f6:01:03:7a:d6:20:ef:9a:c9: 8c:ee:a9:70:d7:03:7c:31:56:3e:df:65:f1:a3:9b: 5d:20:1b:1f:97:29:c6:8f:f3:15:2e:6a:31:0a:64: b2:3e:3b:71:90:41:2d:1a:21:b9:d0:5f:67:1e:23: 27:a8:b3:f3:73:cb:e0:2b:d1:c3:ef:02:8f:c6:c1: 3e:f0:95:ae:f9:f9:de:67:f3:c7:5b:99:d3:50:c4: 5b:77:b9:ba:10:40:f0:92:da:9a:7c:32:39:b9:be: 22:44:4a:ed:ce:6b:d2:84:5f:33:50:f9:26:91:c6: 4b:51:20:5e:8f:0a:a5:6d:ef:11:1c:ea:40:fa:a8: 7d:42:d6:62:10:f9:38:ba:2a:12:7d:92:a7:ec:a4: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6B:29:4A:B1:16:26:E6:5C:A4:04:F5:C9:E2:14:01:87:D2:25:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86c777f8-0afd-3cb4-9afe-72e8fe66ba37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.crl X509v3 Authority Key Identifier: keyid:FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer sbgp-ipAddrBlock: critical IPv4: 104.166.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:85:5d:f1:03:3c:25:e1:39:12:61:69:b3:3a:dc:15:e6:49: 74:bc:94:d8:cc:8a:29:2b:31:06:3a:bd:e9:d6:5b:7e:a6:63: cb:94:c3:e7:10:e2:20:cb:65:24:ca:7f:fd:21:3a:af:d4:3c: 61:fe:b4:f4:75:14:91:c6:e3:2f:17:bb:70:5d:5a:96:0e:7e: df:d1:96:0e:45:ac:c3:5b:0d:9f:83:de:2d:b3:38:7e:23:a7: f0:6d:42:18:43:f5:14:88:1f:fe:66:67:21:be:bf:12:0e:27: 57:36:11:79:c3:d6:3f:bc:ec:9d:09:58:8e:68:c9:b8:a5:13: d3:2f:78:6a:ba:11:8c:72:17:55:ee:6d:50:0a:e3:1c:ef:44: c4:e9:df:47:72:71:13:0d:45:e5:1d:c7:b3:c4:3b:d7:11:c5: 69:2d:32:a2:38:ab:b0:e2:d4:c1:2d:39:7d:0c:d3:c9:20:3c: 81:36:3e:4f:d6:fa:c6:f8:f7:f9:67:8c:61:86:4c:58:50:90: 71:1b:f2:3b:cf:e8:00:20:91:b1:1e:8c:ab:18:05:82:79:36: 0f:55:73:4c:c4:67:83:46:98:c7:92:7c:60:8f:83:7a:26:a2: b4:90:64:1f:55:0d:f7:fe:f3:d5:51:e4:f9:1a:c9:39:58:1b: 00:92:60:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf4T3nvH6K4q8SOsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzczNzYtMmQxYi00NTM2LWI5NDEtNzg1ODQzMWM1 ODM5MB4XDTI0MTEyMzAyMDAyOFoXDTI1MDIyMTAyMDAyOFowLzEtMCsGA1UEAxMk MTllNjZkN2MtZGExZC00M2Y3LWJkZDctMjU4MTJkMWY5ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3To9oj5Vsrlen6HE/wA91z4IKr7y9tvilcFG dAKaPNCXiJZegtczdnp0u/S6op93hbHIVOktkcpb44zFRcj1Ojs0dYOJ6DVbt39T 4jOWlCDDPuQ5blSUZV6eT4yEkbuNmdRAXYAnXYABSj8MARj2AQN61iDvmsmM7qlw 1wN8MVY+32Xxo5tdIBsflynGj/MVLmoxCmSyPjtxkEEtGiG50F9nHiMnqLPzc8vg K9HD7wKPxsE+8JWu+fneZ/PHW5nTUMRbd7m6EEDwktqafDI5ub4iRErtzmvShF8z UPkmkcZLUSBejwqlbe8RHOpA+qh9QtZiEPk4uioSfZKn7KTp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABrKUqxFibmXKQE9cniFAGH0iV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NmIz NzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMxYzU4MzkvODZjNzc3ZjgtMGFmZC0z Y2I0LTlhZmUtNzJlOGZlNjZiYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODZiMzczNzYtMmQxYi00NTM2LWI5 NDEtNzg1ODQzMWM1ODM5Lzg2YjM3Mzc2LTJkMWItNDUzNi1iOTQxLTc4NTg0MzFj NTgzOS5jcmwwHwYDVR0jBBgwFoAU/Zeqz6JXzqQ9oYPgyfe+yRagiYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4 NDMxYzU4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOFXfEDPCXhORJhabM63BXmSXS8lNjMiikrMQY6venWW36mY8uUw+cQ 4iDLZSTKf/0hOq/UPGH+tPR1FJHG4y8Xu3BdWpYOft/Rlg5FrMNbDZ+D3i2zOH4j p/BtQhhD9RSIH/5mZyG+vxIOJ1c2EXnD1j+87J0JWI5oybilE9MveGq6EYxyF1Xu bVAK4xzvRMTp30dycRMNReUdx7PEO9cRxWktMqI4q7Di1MEtOX0M08kgPIE2Pk/W +sb49/lnjGGGTFhQkHEb8jvP6AAgkbEejKsYBYJ5Ng9Vc0zEZ4NGmMeSfGCPg3om orSQZB9VDff+89VR5PkayTlYGwCSYPk= -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:40 2024 by rpki-client on console-fra.rpki-client.org