$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa File: f0e650e8-42ca-3b0b-82e7-54b60647533e.roa (raw, json) Hash identifier: khAcSrLAeFnQ4T5FAr0U7kDoV7oO4fisEb0dNWFpc04= Subject key identifier: 60:72:08:5F:AF:34:4E:1F:E4:5B:47:2A:08:E8:55:71:EC:8D:E9:95 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584540BC428D99A399ACC09F6840 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa Signing time: Mon 18 Mar 2024 22:17:08 +0000 ROA not before: Mon 18 Mar 2024 22:17:08 +0000 ROA not after: Sun 16 Jun 2024 22:17:08 +0000 asID: 36411 IP address blocks: 104.134.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:bc:42:8d:99:a3:99:ac:c0:9f:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 18 22:17:08 2024 GMT Not After : Jun 16 22:17:08 2024 GMT Subject: CN=49a17c4d-bfba-482e-b56e-beed85a23fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:f8:c9:f5:a3:d9:61:20:59:c5:d5:c5:04: 67:25:87:78:c5:bc:e9:3e:18:7e:f2:fd:1f:59:fb: d4:3f:26:bf:91:12:94:9a:f8:aa:eb:e7:6b:98:d3: 14:4e:64:cc:33:40:01:eb:e9:3c:57:21:7f:4c:30: d0:50:17:3a:51:11:29:1e:92:95:0a:2a:ec:57:0d: 77:e9:db:be:9b:6a:89:e5:f6:a5:64:7b:cc:42:85: ef:bc:79:ec:7c:71:15:cf:74:27:7a:47:b5:77:53: 88:a5:fe:43:18:f3:2d:7f:2e:e9:f4:20:d9:d0:11: a5:40:5d:5a:28:8d:82:99:a5:b3:8a:c1:a6:c5:77: 72:9c:54:39:f9:c8:26:48:65:bd:e3:9d:fc:34:d8: 64:5f:57:f6:46:ba:0e:c5:03:4b:28:5f:71:2e:1e: a6:19:f5:a6:25:51:68:32:49:a2:d6:71:59:49:78: c1:ee:3f:f1:af:3e:53:9f:ed:f3:10:f3:02:83:66: fc:dc:24:81:24:60:b6:ce:3f:88:92:bf:ca:64:bd: ba:7c:8f:7c:e0:be:b4:35:d0:a9:78:fc:27:26:ff: 2a:a2:7d:ff:20:41:e3:f7:90:eb:28:16:c8:ce:10: da:e3:6b:ab:8e:5f:4a:3d:d7:6f:14:61:ac:04:29: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:72:08:5F:AF:34:4E:1F:E4:5B:47:2A:08:E8:55:71:EC:8D:E9:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5e:1a:19:42:c0:75:4f:44:d1:c3:2b:58:1f:28:86:c4:25: ff:8d:52:b1:53:0d:c1:b7:45:80:e1:15:fc:47:5b:b7:5b:5e: c3:4e:53:a0:ad:ab:1d:56:51:01:36:a7:0a:87:fc:68:75:1d: dd:03:1f:0b:37:26:5e:c1:03:25:67:55:dd:3a:a3:54:87:bc: 50:99:6e:6d:99:56:35:b2:9e:11:e8:52:03:82:6d:a5:7e:4b: 69:6f:a9:bc:2e:dc:97:d1:2e:ff:b6:a2:ab:90:83:3b:29:09: 99:a4:d2:3a:22:76:bc:bb:07:28:bd:d0:2a:e1:c5:db:fc:ff: c6:d9:9e:e4:d0:c3:0a:40:c0:17:46:4c:8a:16:79:0d:4c:ea: b9:9c:5d:fc:59:11:35:0a:50:ac:cb:9f:a3:fa:07:97:71:42: 52:fe:06:7b:b6:71:45:4b:49:98:42:e6:d5:88:7b:c6:ef:92: 76:4e:5f:70:dd:19:aa:6b:70:85:c8:25:ee:9a:ca:96:91:e4: 66:e1:9f:fe:44:7d:e3:df:b7:c0:6c:cb:fc:32:f6:63:a2:61: 00:d2:e4:c5:78:01:f7:41:fd:06:43:01:60:6d:85:a9:11:6f: 02:66:37:13:bc:8e:7e:a7:8e:5f:dc:26:23:65:fb:08:a1:c0: 83:f5:cc:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVAvEKNmaOZrMCfaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI0MDMxODIyMTcwOFoXDTI0MDYxNjIyMTcwOFowLzEtMCsGA1UEAxMk NDlhMTdjNGQtYmZiYS00ODJlLWI1NmUtYmVlZDg1YTIzZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYj4yfWj2WEgWcXVxQRnJYd4xbzpPhh+8v0f WfvUPya/kRKUmviq6+drmNMUTmTMM0AB6+k8VyF/TDDQUBc6UREpHpKVCirsVw13 6du+m2qJ5falZHvMQoXvvHnsfHEVz3Qneke1d1OIpf5DGPMtfy7p9CDZ0BGlQF1a KI2CmaWzisGmxXdynFQ5+cgmSGW94538NNhkX1f2RroOxQNLKF9xLh6mGfWmJVFo Mkmi1nFZSXjB7j/xrz5Tn+3zEPMCg2b83CSBJGC2zj+Ikr/KZL26fI984L60NdCp ePwnJv8qon3/IEHj95DrKBbIzhDa42urjl9KPddvFGGsBCmNBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGByCF+vNE4f5FtHKgjoVXHsjemVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjBlNjUwZTgtNDJjYS0z YjBiLTgyZTctNTRiNjA2NDc1MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIReGhlCwHVPRNHDK1gfKIbEJf+NUrFTDcG3RYDhFfxHW7dbXsNOU6Ct qx1WUQE2pwqH/Gh1Hd0DHws3Jl7BAyVnVd06o1SHvFCZbm2ZVjWynhHoUgOCbaV+ S2lvqbwu3JfRLv+2oquQgzspCZmk0joidry7Byi90Crhxdv8/8bZnuTQwwpAwBdG TIoWeQ1M6rmcXfxZETUKUKzLn6P6B5dxQlL+Bnu2cUVLSZhC5tWIe8bvknZOX3Dd GaprcIXIJe6aypaR5Gbhn/5EfePft8Bsy/wy9mOiYQDS5MV4AfdB/QZDAWBthakR bwJmNxO8jn6njl/cJiNl+wihwIP1zI0= -----END CERTIFICATE-----Generated at Sat May 11 10:09:43 2024 by rpki-client on console-ams.rpki-client.org