$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b221524e-d465-375c-b90b-1d663534b2c3.roa File: b221524e-d465-375c-b90b-1d663534b2c3.roa (raw, json) Hash identifier: I12B+npkEEdKmkmPFaY/YWfQ/bBZfsBSspbEck/L5ok= Subject key identifier: C5:85:71:FB:27:2C:17:5B:D2:DF:FD:4C:17:34:B5:3A:EB:D6:4F:54 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F432858453585FCA0FE649B342035DC80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b221524e-d465-375c-b90b-1d663534b2c3.roa Signing time: Thu 14 Mar 2024 21:53:53 +0000 ROA not before: Thu 14 Mar 2024 21:53:53 +0000 ROA not after: Wed 12 Jun 2024 21:53:53 +0000 asID: 41264 IP address blocks: 104.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:35:85:fc:a0:fe:64:9b:34:20:35:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 14 21:53:53 2024 GMT Not After : Jun 12 21:53:53 2024 GMT Subject: CN=3d69c107-addd-43c4-93db-046f0cd7dfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:1e:a7:63:93:18:95:b9:29:63:9f:a0:fd: e3:e3:c6:09:9a:3a:9e:b5:6e:34:f0:46:3c:a7:29: b9:35:94:36:f6:3b:7a:32:6f:9d:b8:24:71:72:00: ad:c5:ba:66:94:c3:98:63:9a:b3:65:dc:e7:9c:ec: da:ad:30:e1:ab:db:00:21:d7:c8:5f:b5:02:5f:a8: f0:9d:a6:d7:ce:1e:37:5a:63:fe:b7:7c:25:86:6b: 23:63:95:f5:a6:88:38:84:dd:0b:4a:a4:ec:04:eb: e8:68:8a:f4:02:14:34:03:07:5a:55:35:9c:df:a7: 76:e5:e6:3b:ed:90:22:26:54:d9:8e:12:2b:ea:32: 71:db:d4:79:b3:8f:a0:26:3c:ba:8e:df:af:0c:16: b6:49:c2:3c:6b:41:7c:41:8f:f1:ef:7c:ee:5c:5b: 3d:e4:0e:57:6e:72:a9:76:77:fb:db:3f:37:93:35: 76:e0:54:2a:12:40:a6:8c:45:23:8d:35:5f:51:be: 6f:11:df:4e:40:ba:0d:a3:19:5c:fe:b0:cf:9a:c5: 54:07:9b:b2:17:a3:32:38:4c:71:8d:04:75:ac:dc: 69:89:21:bb:29:ae:1c:4d:91:5b:27:a1:e8:16:fe: 44:33:10:45:48:ba:af:2f:33:73:93:d9:41:1b:ae: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:71:FB:27:2C:17:5B:D2:DF:FD:4C:17:34:B5:3A:EB:D6:4F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b221524e-d465-375c-b90b-1d663534b2c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:84:46:d3:e9:42:3c:37:27:ca:b8:3f:6a:1e:6a:97:fd:ae: ae:fc:5b:a2:d0:3b:1c:a0:85:d7:04:9c:53:dc:49:b7:0d:8d: af:d3:3f:06:b0:b2:da:a6:79:8d:25:70:fb:40:99:72:0a:f0: 9d:5b:5e:03:b2:ed:d8:f6:d0:c0:8e:82:a9:8a:4b:44:0c:00: c0:08:49:25:86:88:c3:65:f6:5f:2d:08:d9:d3:5b:a9:99:89: 88:fb:f3:ad:a1:7a:44:ff:b5:3e:f5:12:ea:cb:f5:d9:18:9b: 1a:b8:aa:33:bc:aa:a6:b2:29:10:4e:b8:a8:11:6c:02:a6:d9: 56:55:69:9a:b1:26:8b:63:23:9b:94:b1:73:7f:59:fc:9c:d6: 35:92:90:90:39:9b:1c:ef:f1:52:fb:2c:53:09:39:cd:31:fd: f0:ca:4b:c3:78:6b:84:b2:c9:b5:59:89:6c:23:fb:89:f8:ce: 20:c9:48:2c:80:3b:36:e1:16:7f:40:77:32:7a:e4:d0:75:3f: f0:33:3c:16:a4:0e:99:df:ac:05:c8:8e:55:4c:b5:14:97:c5: cc:f4:49:6d:73:62:fa:ba:e0:e0:83:df:35:86:03:57:cb:04: ab:07:ce:64:43:2b:1e:4b:95:6d:c6:fe:8b:d6:18:55:f7:5b: 8e:25:83:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU1hfyg/mSbNCA13IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MDMxNDIxNTM1M1oXDTI0MDYxMjIxNTM1M1owLzEtMCsGA1UEAxMk M2Q2OWMxMDctYWRkZC00M2M0LTkzZGItMDQ2ZjBjZDdkZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Eep2OTGJW5KWOfoP3j48YJmjqetW408EY8 pym5NZQ29jt6Mm+duCRxcgCtxbpmlMOYY5qzZdznnOzarTDhq9sAIdfIX7UCX6jw nabXzh43WmP+t3wlhmsjY5X1pog4hN0LSqTsBOvoaIr0AhQ0AwdaVTWc36d25eY7 7ZAiJlTZjhIr6jJx29R5s4+gJjy6jt+vDBa2ScI8a0F8QY/x73zuXFs95A5XbnKp dnf72z83kzV24FQqEkCmjEUjjTVfUb5vEd9OQLoNoxlc/rDPmsVUB5uyF6MyOExx jQR1rNxpiSG7Ka4cTZFbJ6HoFv5EMxBFSLqvLzNzk9lBG64smwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWFcfsnLBdb0t/9TBc0tTrr1k9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjIyMTUyNGUtZDQ2NS0z NzVjLWI5MGItMWQ2NjM1MzRiMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKERtPpQjw3J8q4P2oeapf9rq78W6LQOxyghdcEnFPcSbcNja/TPwaw stqmeY0lcPtAmXIK8J1bXgOy7dj20MCOgqmKS0QMAMAISSWGiMNl9l8tCNnTW6mZ iYj7862hekT/tT71EurL9dkYmxq4qjO8qqayKRBOuKgRbAKm2VZVaZqxJotjI5uU sXN/Wfyc1jWSkJA5mxzv8VL7LFMJOc0x/fDKS8N4a4SyybVZiWwj+4n4ziDJSCyA OzbhFn9AdzJ65NB1P/AzPBakDpnfrAXIjlVMtRSXxcz0SW1zYvq64OCD3zWGA1fL BKsHzmRDKx5LlW3G/ovWGFX3W44lg/E= -----END CERTIFICATE-----Generated at Sat May 11 15:31:04 2024 by rpki-client on console-fra.rpki-client.org