$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cda61f2-0b95-3dbf-b590-cc7f24cc932a.roa File: 5cda61f2-0b95-3dbf-b590-cc7f24cc932a.roa (raw, json) Hash identifier: /nWViuSX2Yn3F635uPDkSzVu4o0X9Q7IP8PAvW/3y4I= Subject key identifier: 40:8A:87:F0:7D:67:A4:87:4A:91:F5:DA:A4:2B:9A:F1:40:F5:4E:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AD996CC1843FB4185769880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cda61f2-0b95-3dbf-b590-cc7f24cc932a.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 104.29.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:d9:96:cc:18:43:fb:41:85:76:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=832581bf-e305-4861-ae2f-695b5024c366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:01:ab:ce:db:70:9b:84:83:6d:71:85:dd: a5:38:c4:63:2e:06:62:5c:fd:ea:ed:a2:aa:ed:ee: 2b:fa:38:36:dc:d9:69:31:cc:cd:dd:96:ef:55:77: ae:1c:47:da:ee:18:2d:e7:43:21:be:4a:07:60:b4: 05:bd:98:f1:43:69:7d:54:d5:9c:aa:ba:69:cc:77: f4:22:4f:9b:96:62:ce:ee:d5:eb:c8:2d:f3:c9:14: 47:7d:5d:c3:74:cd:a5:8a:35:63:af:6b:27:d1:90: 7a:56:ab:04:0b:2c:bd:c6:48:88:29:96:e4:47:c1: d7:8c:56:2a:6e:2a:9f:93:06:23:6f:26:06:93:ea: c2:62:69:ae:5b:19:36:62:db:cb:56:bf:4f:a6:36: 1d:be:54:7c:e7:07:4a:55:fa:ae:a8:12:88:5b:fe: 1a:0d:d0:1b:92:24:67:0d:25:ea:93:cb:8f:70:82: b6:ca:7d:c6:0e:dc:3a:f7:51:f4:10:60:f3:83:1d: a3:c8:95:8c:96:27:82:d8:5e:4a:03:0b:74:ec:a4: 5c:25:a8:9c:c2:d5:5a:b1:49:6b:18:49:e3:24:6d: bd:04:a9:70:41:e7:cc:15:84:bf:05:05:32:f1:d0: 5f:67:dc:81:0e:a3:f4:9a:d8:4d:c3:a9:0c:26:c6: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:87:F0:7D:67:A4:87:4A:91:F5:DA:A4:2B:9A:F1:40:F5:4E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5cda61f2-0b95-3dbf-b590-cc7f24cc932a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:eb:22:bc:b6:8b:2c:5f:42:c3:de:19:ac:a9:42:1c:5d:36: d4:6c:31:4f:70:c0:55:71:41:35:c4:7b:a8:81:ef:b5:d3:9e: 6d:86:94:79:09:76:f4:1b:0e:62:53:78:2a:5a:6d:32:26:3e: c6:48:6a:bf:8b:16:7c:ee:f9:bf:7d:b7:e5:71:e3:c3:ad:1e: c4:4c:5f:31:af:80:48:43:2f:ca:9b:42:9b:71:ae:f6:70:c3: be:23:b3:54:9c:62:4a:6f:81:f7:a9:84:3d:1e:41:6c:7a:55: 83:6a:27:24:c8:a5:73:a1:c9:81:c1:ed:73:1c:6b:ce:a2:ed: d6:94:ad:f3:06:81:17:cf:3d:44:a2:09:ad:3c:0b:3c:02:c4: a8:fe:4c:11:45:64:17:fc:3e:74:70:b7:72:c0:d9:8b:3c:68: de:79:db:30:5e:c2:35:6c:b6:f0:8d:ab:e7:77:af:7c:f4:9b: fa:83:86:8d:da:9c:21:c0:d6:f7:28:98:72:bf:ab:df:87:17: 55:0b:8b:3c:a3:b8:2c:5c:4b:07:08:84:eb:93:e0:4d:c7:79: 41:88:09:12:9f:7b:68:dd:57:59:6b:91:79:2b:72:e3:50:d5: 31:35:f0:a8:50:a9:63:17:2d:7d:d5:3f:ed:0c:70:ed:8c:17: 7b:3b:6e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc62ZbMGEP7QYV2mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk ODMyNTgxYmYtZTMwNS00ODYxLWFlMmYtNjk1YjUwMjRjMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/UBq87bcJuEg21xhd2lOMRjLgZiXP3q7aKq 7e4r+jg23NlpMczN3ZbvVXeuHEfa7hgt50MhvkoHYLQFvZjxQ2l9VNWcqrppzHf0 Ik+blmLO7tXryC3zyRRHfV3DdM2lijVjr2sn0ZB6VqsECyy9xkiIKZbkR8HXjFYq biqfkwYjbyYGk+rCYmmuWxk2YtvLVr9PpjYdvlR85wdKVfquqBKIW/4aDdAbkiRn DSXqk8uPcIK2yn3GDtw691H0EGDzgx2jyJWMlieC2F5KAwt07KRcJaicwtVasUlr GEnjJG29BKlwQefMFYS/BQUy8dBfZ9yBDqP0mthNw6kMJsbPXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECKh/B9Z6SHSpH12qQrmvFA9U6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWNkYTYxZjItMGI5NS0z ZGJmLWI1OTAtY2M3ZjI0Y2M5MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDrIry2iyxfQsPeGaypQhxdNtRsMU9wwFVxQTXEe6iB77XTnm2GlHkJ dvQbDmJTeCpabTImPsZIar+LFnzu+b99t+Vx48OtHsRMXzGvgEhDL8qbQptxrvZw w74js1ScYkpvgfephD0eQWx6VYNqJyTIpXOhyYHB7XMca86i7daUrfMGgRfPPUSi Ca08CzwCxKj+TBFFZBf8PnRwt3LA2Ys8aN552zBewjVstvCNq+d3r3z0m/qDho3a nCHA1vcomHK/q9+HF1ULizyjuCxcSwcIhOuT4E3HeUGICRKfe2jdV1lrkXkrcuNQ 1TE18KhQqWMXLX3VP+0McO2MF3s7bjM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:04 2024 by rpki-client on console-ams.rpki-client.org