$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa File: aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa (raw, json) Hash identifier: YTYAzbjy4Ah7WfloO4L2Aon7mWta31YZPhi0fs3wQZk= Subject key identifier: 49:23:D2:85:C0:83:9E:F2:49:1F:90:55:23:F7:D9:84:A3:48:DE:3C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285847D56A176E8894771047878300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa Signing time: Sun 10 Nov 2024 14:00:37 +0000 ROA not before: Sun 10 Nov 2024 14:00:37 +0000 ROA not after: Sat 08 Feb 2025 14:00:37 +0000 asID: 41264 IP address blocks: 104.133.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d5:6a:17:6e:88:94:77:10:47:87:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Nov 10 14:00:37 2024 GMT Not After : Feb 8 14:00:37 2025 GMT Subject: CN=541bd21d-9d12-4d12-8228-9a1d0a20e37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5b:d9:9b:5b:38:a9:fe:7e:00:5b:e8:e6:6f: 63:00:13:fc:41:da:0e:8d:03:23:18:c9:56:86:3e: a9:4f:92:f1:a4:71:5e:99:cd:36:3d:bd:7a:2c:ba: 6d:ea:ae:62:a6:67:33:77:5c:36:b1:73:57:35:41: de:d6:a2:46:a0:2f:1a:a2:c7:c8:52:f0:e6:3d:97: 19:34:79:e3:08:07:04:83:ad:a6:42:f1:b1:42:55: 79:df:16:28:55:8a:e3:9e:b1:66:4e:06:f7:10:7e: c2:81:94:18:6c:ba:1d:07:ec:2d:40:12:0b:1d:44: 51:b6:f2:fb:4f:9b:b7:8c:a6:36:41:fa:41:6b:3a: d4:6c:f4:2a:b9:3a:11:e5:a8:cb:7b:8f:fa:68:0b: a3:c3:f3:73:a3:6d:70:73:78:44:71:a8:1c:e8:a8: e6:d4:a2:06:77:b4:a5:48:e1:60:5d:28:d3:cc:1c: 13:89:4f:5c:a7:c3:f8:bb:30:db:9e:41:67:00:45: 89:f9:ed:9b:2d:a1:ee:eb:3b:fc:3d:6a:96:d5:0e: fd:a8:15:9c:88:92:55:07:0b:2d:8f:4a:20:79:45: a8:07:b4:80:6c:27:77:0a:2f:f0:f2:a1:26:29:87: 3e:37:91:c5:52:20:fc:68:7b:0f:e6:94:bc:76:33: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:D2:85:C0:83:9E:F2:49:1F:90:55:23:F7:D9:84:A3:48:DE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa8d5a12-48de-30f1-90d0-d6622807b1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d3:86:0e:2b:9b:73:db:06:f5:2e:f2:18:8b:79:31:0f:48: 40:58:c5:95:57:09:20:86:cc:f8:47:8a:35:cc:94:fd:a4:80: 2f:c2:61:b5:6b:93:85:e0:4a:0b:0b:bf:6a:35:41:80:12:5c: 1d:5d:a0:df:bb:e1:22:59:17:06:27:ee:39:55:76:52:ed:68: 18:d5:4a:4d:56:b1:93:9b:cd:a4:01:93:46:42:cf:c4:0b:f5: 22:a4:92:4e:57:5e:54:0e:7f:1a:79:17:9f:06:30:47:a2:a5: f3:ae:c7:d2:e7:fb:de:8a:87:8c:7d:13:f4:5f:11:7d:24:7c: db:2e:4a:98:50:35:ad:0b:e7:a0:73:bf:95:7f:e8:48:4e:9f: 10:34:99:5e:46:a0:5f:de:40:81:32:a9:f1:a3:cd:dc:8b:13: 06:be:15:9e:eb:a4:41:b6:09:1b:33:60:64:af:97:62:90:04: 47:56:79:c1:1a:3d:83:db:15:1d:b6:db:41:da:a2:d1:09:95: 51:f3:9c:ef:94:91:d1:80:88:79:91:3d:8a:e4:a2:a2:7a:e8: fb:7b:86:cc:92:b3:68:0e:11:3c:a3:83:0d:67:1e:18:38:73: 56:cb:35:95:88:02:2a:e1:e1:af:8f:72:be:83:c7:00:b5:dc: b1:2b:d9:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfVahduiJR3EEeHgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MTExMDE0MDAzN1oXDTI1MDIwODE0MDAzN1owLzEtMCsGA1UEAxMk NTQxYmQyMWQtOWQxMi00ZDEyLTgyMjgtOWExZDBhMjBlMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1vZm1s4qf5+AFvo5m9jABP8QdoOjQMjGMlW hj6pT5LxpHFemc02Pb16LLpt6q5ipmczd1w2sXNXNUHe1qJGoC8aosfIUvDmPZcZ NHnjCAcEg62mQvGxQlV53xYoVYrjnrFmTgb3EH7CgZQYbLodB+wtQBILHURRtvL7 T5u3jKY2QfpBazrUbPQquToR5ajLe4/6aAujw/Nzo21wc3hEcagc6Kjm1KIGd7Sl SOFgXSjTzBwTiU9cp8P4uzDbnkFnAEWJ+e2bLaHu6zv8PWqW1Q79qBWciJJVBwst j0ogeUWoB7SAbCd3Ci/w8qEmKYc+N5HFUiD8aHsP5pS8djNSsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkj0oXAg57ySR+QVSP32YSjSN48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWE4ZDVhMTItNDhkZS0z MGYxLTkwZDAtZDY2MjI4MDdiMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/Thg4rm3PbBvUu8hiLeTEPSEBYxZVXCSCGzPhHijXMlP2kgC/CYbVr k4XgSgsLv2o1QYASXB1doN+74SJZFwYn7jlVdlLtaBjVSk1WsZObzaQBk0ZCz8QL 9SKkkk5XXlQOfxp5F58GMEeipfOux9Ln+96Kh4x9E/RfEX0kfNsuSphQNa0L56Bz v5V/6EhOnxA0mV5GoF/eQIEyqfGjzdyLEwa+FZ7rpEG2CRszYGSvl2KQBEdWecEa PYPbFR2220HaotEJlVHznO+UkdGAiHmRPYrkoqJ66Pt7hsySs2gOETyjgw1nHhg4 c1bLNZWIAirh4a+Pcr6DxwC13LEr2Qc= -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:56 2024 by rpki-client on console-ams.rpki-client.org