$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa File: af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa (raw, json) Hash identifier: JCHhJzcvrjauh+zCGVGwPh+/+PQ2i5u7AQ7UAa9XBrE= Subject key identifier: 18:12:5A:CA:EC:58:5F:83:83:DA:EA:B5:31:35:FF:47:29:24:25:FA Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F432858485A40B85EA8857917ECEC5E00 Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa Signing time: Sat 28 Dec 2024 04:00:02 +0000 ROA not before: Sat 28 Dec 2024 04:00:02 +0000 ROA not after: Fri 28 Mar 2025 03:00:02 +0000 asID: 1074 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Dec 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5a:40:b8:5e:a8:85:79:17:ec:ec:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Dec 28 04:00:02 2024 GMT Not After : Mar 28 03:00:02 2025 GMT Subject: CN=afd0dd4f-6005-4a02-a675-68a692759c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:5a:e8:6e:a9:51:0b:24:99:e5:6b:3c:47: f1:18:b7:91:69:aa:03:75:2c:15:d2:b0:b7:db:63: 15:8d:9c:9e:e7:33:95:a1:81:94:4f:14:d1:01:93: 92:b1:7e:12:5d:f0:f8:5d:0b:8e:80:29:e7:8c:33: de:ac:0d:a1:95:a6:0c:e9:74:28:a8:35:82:61:97: 9f:57:2f:d4:07:72:86:5f:bc:91:cd:90:06:f1:bf: ab:08:82:58:9b:9b:2c:17:d4:56:00:bb:5b:b5:08: 15:e3:a9:e6:fa:16:5d:7f:48:e4:23:42:c8:8c:3d: 31:e0:4c:fa:08:52:92:bc:30:f7:e2:94:cb:b0:3a: 6f:53:b9:82:b4:bd:71:ad:e3:89:12:95:b9:36:bb: 72:94:4e:56:8f:0a:2e:fc:3a:97:fb:f4:3a:61:7c: 3e:be:28:a8:b6:af:e9:02:8c:e9:52:66:24:10:70: 8b:f2:6f:73:cf:52:44:f2:c8:27:bb:b3:e2:37:86: c1:3e:15:19:c1:39:56:da:09:ea:3e:45:cb:64:fc: 7a:34:8e:d6:d3:f2:1c:6e:86:e8:0e:25:bf:72:13: d5:a5:7c:8d:57:93:9f:1f:0e:ad:89:b6:68:dd:06: 51:f2:3a:a6:2f:90:d7:b7:cd:2f:5d:cb:57:65:35: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:12:5A:CA:EC:58:5F:83:83:DA:EA:B5:31:35:FF:47:29:24:25:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/af0aa1c9-1e2a-334f-8206-972f95c4ab38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2c:b4:59:ba:1f:9d:03:e2:bb:89:c8:06:af:45:da:27:5e: 2c:5d:47:47:64:66:91:c3:f1:92:a2:a1:a9:e7:6a:b0:57:eb: a4:ba:ed:b3:a4:b6:bc:92:84:6c:a3:3f:50:6b:40:06:5b:89: 70:f8:91:d1:f5:45:e6:32:d9:b4:59:ca:20:51:a8:55:3d:6d: 49:ea:30:53:67:ba:8e:6e:6e:4c:8d:a9:46:82:a9:bf:53:c6: 4b:78:ce:33:2c:70:4a:01:15:6f:1a:79:b4:d2:85:c5:e1:33: 24:a5:54:27:01:2d:33:4b:dc:8b:b5:1d:61:54:ac:81:63:e3: db:64:86:dd:52:9d:e1:3d:16:93:6b:dd:26:e3:bd:7e:6d:cd: de:40:e7:d0:2b:20:2b:38:a9:ee:8d:67:fa:5e:2a:2f:52:c8: 4e:3e:d7:54:20:09:7b:a0:a0:6e:34:a1:3c:a3:f9:dd:28:1e: 8e:1a:a7:7a:69:dd:64:fd:95:9f:fa:57:bb:8c:2a:6a:51:3d: 9a:ff:d9:91:6c:d5:2d:5e:6f:6f:91:0d:d7:ea:04:fc:50:1e: db:ba:54:76:59:8d:d5:ea:77:35:0d:bd:ac:4f:8e:1c:c6:9c: 8a:99:16:c2:7b:cb:9d:3e:a1:87:3a:b1:d5:53:67:d9:70:60: eb:85:13:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhaQLheqIV5F+zsXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI0MTIyODA0MDAwMloXDTI1MDMyODAzMDAwMlowLzEtMCsGA1UEAxMk YWZkMGRkNGYtNjAwNS00YTAyLWE2NzUtNjhhNjkyNzU5YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVJa6G6pUQskmeVrPEfxGLeRaaoDdSwV0rC3 22MVjZye5zOVoYGUTxTRAZOSsX4SXfD4XQuOgCnnjDPerA2hlaYM6XQoqDWCYZef Vy/UB3KGX7yRzZAG8b+rCIJYm5ssF9RWALtbtQgV46nm+hZdf0jkI0LIjD0x4Ez6 CFKSvDD34pTLsDpvU7mCtL1xreOJEpW5NrtylE5Wjwou/DqX+/Q6YXw+viiotq/p AozpUmYkEHCL8m9zz1JE8sgnu7PiN4bBPhUZwTlW2gnqPkXLZPx6NI7W0/Icbobo DiW/chPVpXyNV5OfHw6tibZo3QZR8jqmL5DXt80vXctXZTXggQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgSWsrsWF+Dg9rqtTE1/0cpJCX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvYWYwYWExYzktMWUyYS0z MzRmLTgyMDYtOTcyZjk1YzRhYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEstFm6H50D4ruJyAavRdonXixdR0dkZpHD8ZKioannarBX66S67bOk tryShGyjP1BrQAZbiXD4kdH1ReYy2bRZyiBRqFU9bUnqMFNnuo5ubkyNqUaCqb9T xkt4zjMscEoBFW8aebTShcXhMySlVCcBLTNL3Iu1HWFUrIFj49tkht1SneE9FpNr 3SbjvX5tzd5A59ArICs4qe6NZ/peKi9SyE4+11QgCXugoG40oTyj+d0oHo4ap3pp 3WT9lZ/6V7uMKmpRPZr/2ZFs1S1eb2+RDdfqBPxQHtu6VHZZjdXqdzUNvaxPjhzG nIqZFsJ7y50+oYc6sdVTZ9lwYOuFE/8= -----END CERTIFICATE-----Generated at Sun Dec 29 04:23:46 2024 by rpki-client on console-ams.rpki-client.org