$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa File: 13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa (raw, json) Hash identifier: YL/2PkuzFJ/dtj1U1sqk3B6cdFI2jhcH0w//uke2c6g= Subject key identifier: 7A:22:2D:B0:9B:8A:E8:AA:DE:FF:B7:80:4C:4F:4C:C3:A1:F1:BA:C2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285847D56A1D2D3CDD8971B7D8DD50 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa Signing time: Sun 10 Nov 2024 14:00:37 +0000 ROA not before: Sun 10 Nov 2024 14:00:37 +0000 ROA not after: Sat 08 Feb 2025 14:00:37 +0000 asID: 41264 IP address blocks: 104.133.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d5:6a:1d:2d:3c:dd:89:71:b7:d8:dd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Nov 10 14:00:37 2024 GMT Not After : Feb 8 14:00:37 2025 GMT Subject: CN=2ef98f55-c525-4466-86a9-537bb599a2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:65:5f:a9:78:d1:8d:23:16:f4:18:88:a7:d3: 30:07:77:db:af:ff:ae:84:38:d6:c3:6a:0d:da:42: a6:85:db:fe:00:ad:f9:94:48:6c:be:c9:13:e8:ed: 24:53:40:a6:8e:9c:b8:a6:47:ca:5e:bc:60:f0:ff: 79:2d:21:ba:14:cb:a0:1c:da:4b:75:85:bd:29:c4: d7:f8:23:99:63:08:a3:46:75:ab:9c:16:8a:a3:1c: a0:8d:ec:43:0c:4b:6b:0f:17:1f:9e:1a:a7:dd:9b: c7:00:6d:bd:49:39:dc:a2:51:96:90:e4:9d:b0:50: b0:e3:ba:a9:bf:35:16:86:4b:21:d6:3d:84:33:df: ff:4f:2d:c4:4b:a7:5c:a6:91:63:39:47:92:b4:88: 11:c3:c8:fb:e0:66:10:56:1e:06:da:b9:34:cc:de: d1:1b:44:2b:5a:7a:1a:02:78:85:f8:b3:ce:90:30: 80:12:52:03:a2:f3:86:42:78:57:6f:99:de:4c:84: b9:0a:67:55:16:4e:ce:0c:7a:0b:96:65:11:9e:4f: 6e:61:7a:8a:ce:66:a0:16:4c:48:9b:ea:4d:bd:a0: 3e:1a:9e:11:fa:44:e8:0c:c2:ae:7a:7a:bd:34:70: a8:34:cf:93:bf:47:f1:78:0f:18:d8:18:2b:71:e0: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:2D:B0:9B:8A:E8:AA:DE:FF:B7:80:4C:4F:4C:C3:A1:F1:BA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:9a:18:f7:13:0f:7e:04:4b:88:85:3e:0b:ec:5d:b3:15:1a: 73:8c:59:1a:bd:42:77:b5:1f:95:e5:db:70:5f:83:ec:2a:07: 1d:cb:bf:5e:37:07:9f:4f:46:63:a7:e8:bc:ce:80:1a:ec:e3: f2:a4:e6:cd:3f:de:c1:75:ff:a4:48:0b:2b:42:98:21:0f:e7: 2e:9f:57:35:3f:8d:79:dd:eb:71:b7:a3:66:24:6f:e5:d6:c6: 18:43:41:1a:a2:83:e6:1e:3b:0a:8f:52:0f:58:3b:83:27:ea: 78:0a:70:cc:0c:21:a5:59:28:d5:7e:16:53:a9:63:fb:5f:6f: a5:a5:a4:0d:28:ad:6d:80:a3:0c:75:d1:02:a3:21:69:c5:a6: d2:20:b3:16:ef:02:bd:b0:f5:b6:65:f1:d1:bd:f7:cf:d1:02: db:98:ba:86:48:2e:6c:ac:28:f6:55:e4:8d:05:b3:0d:ca:10: 2f:16:02:a5:c6:32:25:f1:92:57:1f:a3:ec:7e:5d:24:b0:ef: 70:47:aa:8f:08:16:04:b8:f5:0c:c7:88:d5:44:5a:b8:c0:99: 32:f6:4f:66:56:c1:51:44:96:5f:eb:2d:22:3e:3a:f6:c1:7e: c9:e7:86:c4:e9:0f:e1:6d:1d:e4:db:ea:20:9f:2c:9c:f0:bb: d3:42:45:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVah0tPN2JcbfY3VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk MmVmOThmNTUtYzUyNS00NDY2LTg2YTktNTM3YmI1OTlhMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2VfqXjRjSMW9BiIp9MwB3fbr/+uhDjWw2oN 2kKmhdv+AK35lEhsvskT6O0kU0Cmjpy4pkfKXrxg8P95LSG6FMugHNpLdYW9KcTX +COZYwijRnWrnBaKoxygjexDDEtrDxcfnhqn3ZvHAG29STncolGWkOSdsFCw47qp vzUWhksh1j2EM9//Ty3ES6dcppFjOUeStIgRw8j74GYQVh4G2rk0zN7RG0QrWnoa AniF+LPOkDCAElIDovOGQnhXb5neTIS5CmdVFk7ODHoLlmURnk9uYXqKzmagFkxI m+pNvaA+Gp4R+kToDMKuenq9NHCoNM+Tv0fxeA8Y2BgrceA5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoiLbCbiuiq3v+3gExPTMOh8brCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTM0Mjk3MzktNWRlMS0z NjM4LWE3ZTQtY2U0ZGNiMTdmMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuaGPcTD34ES4iFPgvsXbMVGnOMWRq9Qne1H5Xl23Bfg+wqBx3Lv143 B59PRmOn6LzOgBrs4/Kk5s0/3sF1/6RICytCmCEP5y6fVzU/jXnd63G3o2Ykb+XW xhhDQRqig+YeOwqPUg9YO4Mn6ngKcMwMIaVZKNV+FlOpY/tfb6WlpA0orW2Aowx1 0QKjIWnFptIgsxbvAr2w9bZl8dG998/RAtuYuoZILmysKPZV5I0Fsw3KEC8WAqXG MiXxklcfo+x+XSSw73BHqo8IFgS49QzHiNVEWrjAmTL2T2ZWwVFEll/rLSI+OvbB fsnnhsTpD+FtHeTb6iCfLJzwu9NCRRc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:36:46 2024 by rpki-client on console-fra.rpki-client.org