$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa File: b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa (raw, json) Hash identifier: 7/NtS+3cDweJFL2XYh72eJ3RW8MHMjYUmO89phxLvXM= Subject key identifier: 1A:56:D8:35:9F:88:1D:86:92:13:EE:E9:3B:6C:67:27:19:75:10:FA Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F43285844FCC561A8D6CC57C1FE866B80 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa Signing time: Fri 23 Feb 2024 14:00:31 +0000 ROA not before: Fri 23 Feb 2024 14:00:31 +0000 ROA not after: Thu 23 May 2024 13:00:31 +0000 asID: 7057 IP address blocks: 104.254.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fc:c5:61:a8:d6:cc:57:c1:fe:86:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Feb 23 14:00:31 2024 GMT Not After : May 23 13:00:31 2024 GMT Subject: CN=6fbfacf8-8c36-47c7-8ac8-7e173a4d45a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:74:82:ad:67:df:6c:98:87:de:87:f1:48: 83:e3:b0:f1:b5:0b:b4:19:d5:64:e1:50:bc:29:e8: 26:4a:a8:36:35:37:11:2c:64:dc:da:94:13:69:02: 53:da:da:0d:ff:c9:d0:84:08:b1:19:d3:9f:4d:d7: 58:dd:ec:9c:94:45:35:d9:97:6f:f5:84:9b:2c:02: 57:04:b0:07:b4:6f:28:76:79:70:0b:5b:f6:e0:14: 94:52:3d:d9:15:7b:e2:78:3a:77:32:fc:91:7c:79: 07:1d:c2:5d:b2:de:29:1b:66:bd:12:8a:2a:43:22: 6d:7a:e4:46:e2:80:a0:e9:78:81:5e:d8:64:13:c0: 1d:8a:33:6c:53:78:cd:e0:d8:28:4d:dd:f2:68:b3: 77:17:0b:3b:c8:9a:39:08:ff:47:10:d7:3a:76:4a: 3e:aa:99:af:10:e1:4a:35:40:5a:14:99:05:3d:ab: 16:42:2d:8d:59:6c:7b:47:fc:b1:42:a0:3f:83:80: 0c:ba:5a:9f:15:5f:74:7f:4d:29:e7:98:79:3e:20: 13:53:71:fc:c8:23:d1:c8:12:df:ca:fc:bc:c5:2f: 3d:20:19:17:ea:c5:ad:41:5c:4e:ce:bd:1c:61:58: bc:53:4d:3b:e7:c2:bd:ac:f2:86:db:83:0c:f8:dc: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:56:D8:35:9F:88:1D:86:92:13:EE:E9:3B:6C:67:27:19:75:10:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 104.254.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:55:f0:87:84:76:c6:a6:07:7b:a5:ef:7a:e8:92:42:5c:60: 63:be:98:e8:8b:52:6c:89:4d:e0:c4:fd:1a:83:71:00:09:d9: b0:4f:cf:41:89:c7:7a:95:31:3e:d6:8e:38:36:b4:19:5a:c6: 9b:f7:9c:60:dc:a6:4b:93:a9:ed:78:90:d7:a9:21:f3:ad:a8: 7e:94:20:e1:14:6b:d7:31:ed:e2:2b:68:b4:a1:3f:3a:24:a8: fd:bd:47:81:56:af:b1:c7:ba:eb:64:2a:5a:f7:70:ec:bd:c6: 63:b6:6e:d8:8b:ea:28:80:48:26:ea:f9:9d:31:b4:12:c7:38: b9:6d:78:92:d7:c8:b4:7a:95:4f:58:ee:78:ff:09:f1:52:5c: 4b:f6:20:ed:2d:9a:4c:02:84:57:03:a5:c5:e6:ce:82:8e:bf: 0f:63:c8:a6:ec:93:80:34:7e:ff:1c:52:84:65:14:fc:fd:2d: 40:92:05:28:2d:61:ac:32:34:b5:05:7b:90:d0:d1:df:65:19: c3:57:cc:ec:2c:f6:79:44:bd:ff:ed:f8:3b:d3:c4:f0:5b:f7: eb:26:0a:94:20:5d:9b:11:05:ef:cb:0e:0a:02:41:af:72:3c: 22:29:a8:f0:8d:90:f4:e4:08:9d:5d:c1:b6:bc:86:3d:b6:f4: c4:43:86:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET8xWGo1sxXwf6Ga4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI0MDIyMzE0MDAzMVoXDTI0MDUyMzEzMDAzMVowLzEtMCsGA1UEAxMk NmZiZmFjZjgtOGMzNi00N2M3LThhYzgtN2UxNzNhNGQ0NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnB0gq1n32yYh96H8UiD47DxtQu0GdVk4VC8 KegmSqg2NTcRLGTc2pQTaQJT2toN/8nQhAixGdOfTddY3eyclEU12Zdv9YSbLAJX BLAHtG8odnlwC1v24BSUUj3ZFXvieDp3MvyRfHkHHcJdst4pG2a9EooqQyJteuRG 4oCg6XiBXthkE8AdijNsU3jN4NgoTd3yaLN3Fws7yJo5CP9HENc6dko+qpmvEOFK NUBaFJkFPasWQi2NWWx7R/yxQqA/g4AMulqfFV90f00p55h5PiATU3H8yCPRyBLf yvy8xS89IBkX6sWtQVxOzr0cYVi8U00758K9rPKG24MM+NzPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpW2DWfiB2GkhPu6TtsZycZdRD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvYjhhOWI1YzctMTk2Yi0z YzMyLWIxZWMtMTgyYzVjMGYwZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5V8IeEdsamB3ul73rokkJcYGO+mOiLUmyJTeDE/RqDcQAJ2bBPz0GJ x3qVMT7Wjjg2tBlaxpv3nGDcpkuTqe14kNepIfOtqH6UIOEUa9cx7eIraLShPzok qP29R4FWr7HHuutkKlr3cOy9xmO2btiL6iiASCbq+Z0xtBLHOLlteJLXyLR6lU9Y 7nj/CfFSXEv2IO0tmkwChFcDpcXmzoKOvw9jyKbsk4A0fv8cUoRlFPz9LUCSBSgt YawyNLUFe5DQ0d9lGcNXzOws9nlEvf/t+DvTxPBb9+smCpQgXZsRBe/LDgoCQa9y PCIpqPCNkPTkCJ1dwba8hj229MRDhjw= -----END CERTIFICATE-----Generated at Sat May 11 15:15:51 2024 by rpki-client on console-ams.rpki-client.org