$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa File: 3579afbb-c9be-3aac-96b3-6f9060525a56.roa (raw, json) Hash identifier: Wl9TMC/MdVWkR8/3hBUjQ/V56k+sPuDI0V6+0NvFjpU= Subject key identifier: 22:BB:42:12:BE:C5:62:4E:EA:48:AE:22:12:C6:47:E0:5C:A4:5F:93 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285847D29F723FAC35B4571D956240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 41264 IP address blocks: 104.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:72:3f:ac:35:b4:57:1d:95:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=2cdfe76e-74ce-4c90-8993-cc806d23aa37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:b8:1a:52:ee:9f:2e:bc:c8:fe:16:fe:da: 57:00:48:d1:f0:d6:14:96:51:0d:f4:2f:cc:da:29: d7:23:4d:a5:f8:ae:e6:b3:76:10:3c:35:0c:cb:10: 28:dd:2e:43:f7:59:3f:80:44:f5:bd:91:c5:13:0c: 56:01:9d:7a:79:30:a7:5a:46:8f:d8:95:4a:a4:9d: 02:b7:26:0d:b8:75:a4:82:b9:06:9f:06:e0:b8:db: 17:cc:e7:83:2b:5e:52:75:3a:b8:1d:0b:30:32:d9: d6:a6:44:bc:02:32:63:4c:95:41:81:b2:48:31:25: 03:24:01:67:20:11:6b:6e:08:ef:4f:8c:1c:7a:44: fb:c5:32:a6:be:53:a7:6d:d5:b6:7e:b4:a5:a4:0a: 7f:65:32:ca:41:9c:86:cf:86:64:a0:3e:1d:0b:9a: e1:c3:27:9f:ef:b4:94:95:65:76:a5:6b:ee:31:91: 11:cd:f6:b9:a9:2a:35:f9:f4:cf:5e:3c:59:1d:f7: 3f:0e:5c:04:37:81:4f:c6:81:c4:18:10:04:f8:16: e9:78:a8:68:d6:6f:81:83:00:34:0d:68:67:c1:ce: ab:68:0c:57:ac:f9:95:cd:3b:03:5a:80:c4:b3:f4: 50:48:03:5f:fe:34:cf:f7:0c:70:be:41:5b:93:32: 96:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BB:42:12:BE:C5:62:4E:EA:48:AE:22:12:C6:47:E0:5C:A4:5F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fc:f9:9b:75:b7:c1:c5:8b:6a:32:56:29:20:e9:c6:98:83: 44:a5:47:c0:94:0a:18:94:5b:d6:23:13:cf:44:6a:1c:5b:78: ff:99:08:58:06:f5:13:4e:53:35:68:0b:8a:7f:74:bc:b6:0a: ba:34:9e:e0:80:b5:2b:31:a3:5b:43:e8:ed:c7:b9:39:ea:d4: 5f:3d:80:d6:70:69:50:48:78:2f:1b:64:9b:c5:4d:7b:ed:87: 90:fd:ac:55:37:d6:ac:15:1d:cc:a9:a9:b4:5b:2f:1d:12:35: 1d:4f:b7:bc:87:0c:6d:b3:a4:1a:de:34:9b:af:fc:7d:8d:2e: 28:1c:e5:4f:af:7e:40:e7:3b:16:c4:40:cf:33:a8:ae:b5:e0: 80:9f:50:26:c1:a9:c6:ee:d2:d4:36:a9:ad:6e:3a:29:cc:b0: f2:8a:02:32:c4:7b:5d:b9:9d:f4:5b:41:3f:49:34:e4:6b:0a: 73:a0:8c:5f:f2:be:9e:ed:37:10:84:bd:21:56:e0:cb:a3:3a: fb:37:d8:2a:e7:78:5d:70:d7:b4:5f:17:0c:2d:b3:34:41:8f: 82:4e:65:d9:98:b4:1b:23:03:56:f2:4d:cc:2e:6b:ee:8b:92: d9:e5:c8:89:67:b9:b9:f9:ce:b9:36:04:38:24:df:5c:19:8c: 67:31:eb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn3I/rDW0Vx2VYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk MmNkZmU3NmUtNzRjZS00YzkwLTg5OTMtY2M4MDZkMjNhYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR24GlLuny68yP4W/tpXAEjR8NYUllEN9C/M 2inXI02l+K7ms3YQPDUMyxAo3S5D91k/gET1vZHFEwxWAZ16eTCnWkaP2JVKpJ0C tyYNuHWkgrkGnwbguNsXzOeDK15SdTq4HQswMtnWpkS8AjJjTJVBgbJIMSUDJAFn IBFrbgjvT4wcekT7xTKmvlOnbdW2frSlpAp/ZTLKQZyGz4ZkoD4dC5rhwyef77SU lWV2pWvuMZERzfa5qSo1+fTPXjxZHfc/DlwEN4FPxoHEGBAE+BbpeKho1m+BgwA0 DWhnwc6raAxXrPmVzTsDWoDEs/RQSANf/jTP9wxwvkFbkzKWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK7QhK+xWJO6kiuIhLGR+BcpF+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU3OWFmYmItYzliZS0z YWFjLTk2YjMtNmY5MDYwNTI1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD8+Zt1t8HFi2oyVikg6caYg0SlR8CUChiUW9YjE89EahxbeP+ZCFgG 9RNOUzVoC4p/dLy2Cro0nuCAtSsxo1tD6O3HuTnq1F89gNZwaVBIeC8bZJvFTXvt h5D9rFU31qwVHcypqbRbLx0SNR1Pt7yHDG2zpBreNJuv/H2NLigc5U+vfkDnOxbE QM8zqK614ICfUCbBqcbu0tQ2qa1uOinMsPKKAjLEe125nfRbQT9JNORrCnOgjF/y vp7tNxCEvSFW4MujOvs32CrneF1w17RfFwwtszRBj4JOZdmYtBsjA1byTcwua+6L ktnlyIlnubn5zrk2BDgk31wZjGcx6w4= -----END CERTIFICATE-----Generated at Sun Nov 24 15:57:43 2024 by rpki-client on console-ams.rpki-client.org