$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa File: 35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa (raw, json) Hash identifier: J1wEO4jQTAkHpJCpODEz1lonRXZOXybjYMgjRXoBDgs= Subject key identifier: DF:27:E7:53:61:86:66:E3:C1:03:8C:B6:48:0D:CE:89:C2:75:42:CD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858453583C0DAA43BBBC95D7B8870 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa Signing time: Thu 14 Mar 2024 21:49:23 +0000 ROA not before: Thu 14 Mar 2024 21:49:23 +0000 ROA not after: Wed 12 Jun 2024 21:49:23 +0000 asID: 41264 IP address blocks: 104.133.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:35:83:c0:da:a4:3b:bb:c9:5d:7b:88:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 14 21:49:23 2024 GMT Not After : Jun 12 21:49:23 2024 GMT Subject: CN=2623e0be-63ab-43e2-9300-4e8a46e028f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:6a:c8:d2:99:d3:e7:f1:bb:64:70:aa:5a: d5:f3:ce:a0:01:4a:a1:db:85:f8:52:6b:d2:e0:65: 75:f4:26:19:0a:a8:4a:39:ca:fd:83:38:74:85:ea: 4f:a6:2e:10:f9:ad:ad:c4:63:e5:72:1a:f6:95:6c: c3:5d:e8:0a:8f:f1:2a:31:43:2b:a6:7d:73:32:5c: 6c:e1:f3:68:ca:f3:03:1f:57:f6:13:1a:e3:ae:38: c7:b4:04:04:53:a3:9c:18:82:b7:b1:1e:be:96:f4: 4a:26:0a:ac:13:98:0d:15:82:b7:5d:0c:ad:61:d7: bf:0e:8a:3e:7f:42:0f:db:2a:b3:ef:aa:34:be:0c: 4f:fc:06:76:dd:6a:0e:70:0e:bb:5e:ff:0b:76:16: df:d5:26:b0:91:27:a1:c9:aa:bb:a2:d7:17:53:9f: 90:a6:b1:f9:f9:93:ac:90:ca:18:89:26:1c:3f:44: 63:15:23:45:4c:dd:86:ae:35:ad:d8:16:fe:23:d9: 0a:d4:1f:6d:ba:62:1a:9d:89:a7:9d:4f:dc:ce:f4: ab:59:08:96:69:16:c4:73:49:bf:94:a7:36:1d:b5: cc:87:27:b6:f7:14:ba:6d:0c:28:e2:35:3c:67:28: 41:11:d6:14:81:8d:83:dc:d8:60:eb:1c:20:93:28: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:E7:53:61:86:66:E3:C1:03:8C:B6:48:0D:CE:89:C2:75:42:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:48:d0:84:e5:84:11:9d:05:f0:ae:e2:6f:b7:cd:da:39:cc: 53:31:5e:99:f5:0b:8e:69:f1:99:6d:d1:1a:56:de:16:64:d4: 75:54:ef:8c:62:2c:b7:b2:70:ed:13:4b:06:8e:a6:12:53:be: 95:f5:05:63:86:1f:5a:83:96:74:a4:49:ae:eb:37:3f:22:39: 73:9c:42:96:d4:6c:df:b1:be:8c:1d:79:db:f4:80:80:d0:df: d1:50:df:67:7b:7b:76:9a:cc:28:64:12:25:5b:08:d2:17:6c: e3:c7:8f:0a:c0:c4:08:fd:32:65:8a:2b:4a:df:20:27:6f:26: 2c:2d:2b:6b:8e:fe:e9:0e:77:29:0c:aa:6c:06:73:17:38:2f: fa:75:b0:fb:a3:7f:e8:27:24:b6:18:1f:d6:b8:f4:72:3a:fd: eb:6c:91:80:42:bd:84:3f:88:c0:56:41:ac:1d:9a:6a:23:40: 5c:af:41:ca:23:48:bf:75:52:ca:14:c4:2f:cf:a1:43:0f:d8: 5b:b5:6e:3e:b7:f1:d6:62:04:fd:20:e6:16:3d:f9:66:49:53: ad:23:84:8d:9d:28:94:31:4a:10:57:0a:96:07:4a:6d:cd:a4: 86:ca:1f:09:f7:94:ca:90:93:fd:43:a5:1c:a3:f1:56:8f:56: f7:0f:03:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1g8DapDu7yV17iHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MDMxNDIxNDkyM1oXDTI0MDYxMjIxNDkyM1owLzEtMCsGA1UEAxMk MjYyM2UwYmUtNjNhYi00M2UyLTkzMDAtNGU4YTQ2ZTAyOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJqyNKZ0+fxu2RwqlrV886gAUqh24X4UmvS 4GV19CYZCqhKOcr9gzh0hepPpi4Q+a2txGPlchr2lWzDXegKj/EqMUMrpn1zMlxs 4fNoyvMDH1f2ExrjrjjHtAQEU6OcGIK3sR6+lvRKJgqsE5gNFYK3XQytYde/Doo+ f0IP2yqz76o0vgxP/AZ23WoOcA67Xv8Ldhbf1SawkSehyaq7otcXU5+QprH5+ZOs kMoYiSYcP0RjFSNFTN2GrjWt2Bb+I9kK1B9tumIanYmnnU/czvSrWQiWaRbEc0m/ lKc2HbXMhye29xS6bQwo4jU8ZyhBEdYUgY2D3Nhg6xwgkyhuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8n51NhhmbjwQOMtkgNzonCdULNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU5ODljOWEtZDE0ZS0z ZTNiLWE0YzgtN2E1OTEwNTVlYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFI0ITlhBGdBfCu4m+3zdo5zFMxXpn1C45p8Zlt0RpW3hZk1HVU74xi LLeycO0TSwaOphJTvpX1BWOGH1qDlnSkSa7rNz8iOXOcQpbUbN+xvowdedv0gIDQ 39FQ32d7e3aazChkEiVbCNIXbOPHjwrAxAj9MmWKK0rfICdvJiwtK2uO/ukOdykM qmwGcxc4L/p1sPujf+gnJLYYH9a49HI6/etskYBCvYQ/iMBWQawdmmojQFyvQcoj SL91UsoUxC/PoUMP2Fu1bj638dZiBP0g5hY9+WZJU60jhI2dKJQxShBXCpYHSm3N pIbKHwn3lMqQk/1DpRyj8VaPVvcPAxc= -----END CERTIFICATE-----Generated at Sat May 11 09:50:04 2024 by rpki-client on console-fra.rpki-client.org