$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa File: 21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa (raw, json) Hash identifier: JD1I5cMChWS7ZXdr0ZdSc+T8J7Ic/0SPJ9U7Ao8fXfM= Subject key identifier: 78:87:4D:AE:F9:5C:49:C9:72:5A:83:7C:32:56:7A:2B:44:04:49:AC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584535847B341C079557BBE0FA00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa Signing time: Thu 14 Mar 2024 21:50:51 +0000 ROA not before: Thu 14 Mar 2024 21:50:51 +0000 ROA not after: Wed 12 Jun 2024 21:50:51 +0000 asID: 395973 IP address blocks: 104.134.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:35:84:7b:34:1c:07:95:57:bb:e0:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 14 21:50:51 2024 GMT Not After : Jun 12 21:50:51 2024 GMT Subject: CN=389c3a53-4061-4f01-b6e0-5108542acc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:1c:90:8c:a9:cb:13:95:06:1d:fe:c9:22: 75:be:0a:5c:5b:a5:cd:fe:bd:51:48:a8:5d:9c:27: bc:4a:2c:ae:e5:91:61:68:4b:06:41:6d:76:f2:21: a0:dc:cb:16:2f:d6:8e:3c:90:9a:59:23:a6:1b:5c: 9c:23:e9:f9:23:a3:b0:85:39:59:2c:bb:78:f5:7b: 66:6f:2b:1b:12:92:ea:af:5c:68:19:5b:2c:ce:17: 7f:43:9d:d7:86:74:92:1d:17:4c:3c:86:ed:07:f0: 7b:52:fa:a8:57:e8:6e:99:d3:27:f3:b5:11:59:56: 23:c9:7f:0d:19:5b:88:e5:4e:65:6e:1f:82:ba:d3: 34:4a:95:36:31:3b:53:b5:80:8c:b2:48:3a:dd:c3: 08:e0:6f:70:db:dd:ef:da:e5:e2:4b:9a:d6:1a:dc: c7:71:d6:63:7d:e6:f1:f9:57:a9:66:f4:1d:85:81: 45:90:3f:7a:98:f0:eb:e3:3d:34:37:04:d0:64:17: 15:40:00:6d:41:03:63:4a:9f:de:86:fe:11:db:27: 98:f4:d9:c7:3d:8b:41:6b:e8:28:3f:56:6e:1a:53: 14:77:e3:d3:eb:66:7c:18:bc:1a:7e:6a:63:54:de: 79:45:ee:f2:80:c3:ee:27:aa:01:d8:46:f3:3a:93: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:87:4D:AE:F9:5C:49:C9:72:5A:83:7C:32:56:7A:2B:44:04:49:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:fe:78:c0:8f:b0:78:f3:07:9c:ea:a5:5d:f2:e6:2d:bf:dd: 04:c4:96:7f:af:20:71:6f:1f:9b:e7:fd:42:1a:f8:51:bc:d8: 0f:93:b6:39:59:7f:4c:d4:0f:f2:58:7e:08:08:04:6f:ba:f7: a1:63:b5:82:aa:e7:93:b9:de:04:c4:dd:a5:cd:9f:19:28:db: 87:c1:08:1c:75:d9:f3:87:8d:22:3c:74:72:a3:1e:a1:30:00: 19:da:04:1a:a1:0c:0b:8b:b0:10:87:85:65:a5:38:84:78:c0: 9b:40:f4:41:8f:b8:8e:f7:5f:79:e4:50:8c:d4:6d:8f:40:2f: 76:ed:8e:f2:27:67:d0:71:94:b2:42:0e:d5:0e:ac:78:d4:a7: 59:77:78:7f:29:44:70:32:7f:54:b2:22:4b:5c:0c:42:f6:6c: 1d:f9:77:ec:a3:1e:f4:9f:c0:c6:42:e3:e4:32:94:f7:72:96: fb:f4:75:70:0a:7f:ae:3b:0b:d9:10:a9:65:36:c5:6b:28:93: b4:5f:9c:ec:e5:c8:9d:75:d9:58:ff:59:a1:6e:ca:bf:21:ba: e9:e2:a8:1a:9a:b4:33:78:a9:da:2d:4e:b4:1b:41:71:ad:bd: e7:55:27:22:2f:a7:e7:15:0a:39:1d:e7:5f:ad:ad:2d:5d:eb: 92:b5:4b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hHs0HAeVV7vg+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MDMxNDIxNTA1MVoXDTI0MDYxMjIxNTA1MVowLzEtMCsGA1UEAxMk Mzg5YzNhNTMtNDA2MS00ZjAxLWI2ZTAtNTEwODU0MmFjYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X8ckIypyxOVBh3+ySJ1vgpcW6XN/r1RSKhd nCe8Siyu5ZFhaEsGQW128iGg3MsWL9aOPJCaWSOmG1ycI+n5I6OwhTlZLLt49Xtm bysbEpLqr1xoGVsszhd/Q53XhnSSHRdMPIbtB/B7UvqoV+humdMn87URWVYjyX8N GVuI5U5lbh+CutM0SpU2MTtTtYCMskg63cMI4G9w293v2uXiS5rWGtzHcdZjfebx +VepZvQdhYFFkD96mPDr4z00NwTQZBcVQABtQQNjSp/ehv4R2yeY9NnHPYtBa+go P1ZuGlMUd+PT62Z8GLwafmpjVN55Re7ygMPuJ6oB2EbzOpN1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiHTa75XEnJclqDfDJWeitEBEmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjFmYTBiMjYtMmE1Zi0z ZWExLWI4MTctMTg5ZTFjZGZkMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3+eMCPsHjzB5zqpV3y5i2/3QTEln+vIHFvH5vn/UIa+FG82A+TtjlZ f0zUD/JYfggIBG+696FjtYKq55O53gTE3aXNnxko24fBCBx12fOHjSI8dHKjHqEw ABnaBBqhDAuLsBCHhWWlOIR4wJtA9EGPuI73X3nkUIzUbY9AL3btjvInZ9BxlLJC DtUOrHjUp1l3eH8pRHAyf1SyIktcDEL2bB35d+yjHvSfwMZC4+QylPdylvv0dXAK f647C9kQqWU2xWsok7RfnOzlyJ112Vj/WaFuyr8huuniqBqatDN4qdotTrQbQXGt vedVJyIvp+cVCjkd51+trS1d65K1S9E= -----END CERTIFICATE-----Generated at Wed May 8 10:09:40 2024 by rpki-client on console-ams.rpki-client.org