$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa File: aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa (raw, json) Hash identifier: ZWm1QlGxmhALEwh5OmwH8r3OEzYTyR3xilbHi9noVCQ= Subject key identifier: 18:EE:36:24:3C:6A:F8:F5:96:77:0E:29:84:32:1C:5C:9F:DF:40:9A Certificate issuer: /CN=2775f7c3-c238-47d5-98c9-835a28d9095e Certificate serial: 010D0C9F432858472F30823211432991DE2EE940 Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa Signing time: Thu 12 Sep 2024 01:00:31 +0000 ROA not before: Thu 12 Sep 2024 01:00:31 +0000 ROA not after: Wed 11 Dec 2024 02:00:31 +0000 asID: 398355 IP address blocks: 104.167.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2f:30:82:32:11:43:29:91:de:2e:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Validity Not Before: Sep 12 01:00:31 2024 GMT Not After : Dec 11 02:00:31 2024 GMT Subject: CN=7e711057-00f8-4d43-8649-30ae93a8633b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:60:5c:d1:ce:2b:fa:00:fd:40:d6:8d:ed: 41:4c:e8:64:f1:9c:f2:08:97:bd:a4:9d:49:77:3b: c5:f2:da:0d:52:c9:f7:22:cd:11:93:42:e7:0e:23: 7f:10:d6:c6:16:cb:ab:30:f8:df:b0:fd:24:71:d9: f1:77:3a:de:be:5f:e3:0b:95:af:82:00:93:fe:63: e8:34:8e:3e:ca:5d:30:ad:da:9f:06:14:29:c0:bc: 86:92:fd:ac:74:cf:51:57:28:fa:6d:ee:ab:e0:b2: a5:e6:a3:b4:be:3d:6c:79:f4:fd:e7:da:32:01:36: 1f:a5:e6:75:44:5e:45:2c:06:df:38:e5:1b:34:c9: ce:82:46:f4:3e:09:ad:76:96:37:bf:d0:21:42:cd: ab:7c:db:cd:c5:28:d9:97:64:bf:24:79:12:bd:7e: 1b:e3:27:77:bf:ff:d8:44:d0:b8:5e:fe:85:2e:a9: 9e:db:6d:be:af:6f:75:3f:2a:1d:ac:a1:ef:34:7f: 64:f1:1f:34:30:e5:9c:d3:43:a1:09:d2:48:87:25: 5c:50:c8:10:b7:be:60:70:7c:bb:18:24:bb:82:90: e9:51:3e:4d:79:d1:76:ff:75:7b:2c:a2:81:6b:cc: b5:39:0d:bc:d0:cd:0f:b7:c3:1b:98:31:94:ad:fa: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:36:24:3C:6A:F8:F5:96:77:0E:29:84:32:1C:5C:9F:DF:40:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/aa3f6ada-b81e-38c2-8f47-d8ef55f67410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl X509v3 Authority Key Identifier: keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer sbgp-ipAddrBlock: critical IPv4: 104.167.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c9:65:d4:38:1c:10:3c:49:e7:6d:45:be:98:24:1e:2f:e7: 10:59:f1:2f:f8:0d:33:cc:de:de:e4:fc:3d:5e:d2:ee:2c:e5: 0d:58:ce:6a:94:17:50:f4:42:03:f2:84:77:86:5d:9f:aa:18: 44:9e:3c:84:b8:3b:96:c5:48:6b:4e:83:2d:45:82:d4:a1:a0: ff:66:7a:1f:5c:d7:4c:8c:50:2e:de:ed:2f:8d:96:f4:6f:08: bc:31:b1:6f:59:df:90:64:bf:77:3e:35:8f:2c:84:ed:96:a7: 5a:40:0f:24:3d:15:5a:a3:da:8a:eb:ae:30:40:f8:62:80:86: 94:e0:53:1f:89:2b:ca:75:fc:5a:51:bc:76:02:64:be:2f:43: f4:6b:ec:c9:61:02:5a:44:3f:e7:04:cc:a2:ff:69:d6:eb:aa: 48:4a:2d:1e:28:45:73:2b:82:09:6d:f3:e2:16:6c:ac:1a:0f: 2f:66:b6:b5:fe:6f:85:b0:a7:d5:6b:26:3f:d7:2e:df:77:df: 32:47:2c:65:31:d3:7e:57:1c:b9:ac:90:92:a2:06:52:8b:0d: 10:17:a6:98:c8:b3:ad:66:45:cf:24:fd:42:e0:09:82:31:61: 1d:79:30:fc:74:43:d6:75:cd:db:76:a9:78:91:c7:6e:27:c6: 13:0f:95:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcvMIIyEUMpkd4u6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkw OTVlMB4XDTI0MDkxMjAxMDAzMVoXDTI0MTIxMTAyMDAzMVowLzEtMCsGA1UEAxMk N2U3MTEwNTctMDBmOC00ZDQzLTg2NDktMzBhZTkzYTg2MzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuJgXNHOK/oA/UDWje1BTOhk8ZzyCJe9pJ1J dzvF8toNUsn3Is0Rk0LnDiN/ENbGFsurMPjfsP0kcdnxdzrevl/jC5WvggCT/mPo NI4+yl0wrdqfBhQpwLyGkv2sdM9RVyj6be6r4LKl5qO0vj1sefT959oyATYfpeZ1 RF5FLAbfOOUbNMnOgkb0PgmtdpY3v9AhQs2rfNvNxSjZl2S/JHkSvX4b4yd3v//Y RNC4Xv6FLqme222+r291PyodrKHvNH9k8R80MOWc00OhCdJIhyVcUMgQt75gcHy7 GCS7gpDpUT5NedF2/3V7LKKBa8y1OQ280M0Pt8MbmDGUrfpeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjuNiQ8avj1lncOKYQyHFyf30CaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1 ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvYWEzZjZhZGEtYjgxZS0z OGMyLThmNDctZDhlZjU1ZjY3NDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjc3NWY3YzMtYzIzOC00N2Q1LTk4 YzktODM1YTI4ZDkwOTVlLzI3NzVmN2MzLWMyMzgtNDdkNS05OGM5LTgzNWEyOGQ5 MDk1ZS5jcmwwHwYDVR0jBBgwFoAU0STfzH9bgNKN7P7ujM9SM461IUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVh MjhkOTA5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDJZdQ4HBA8SedtRb6YJB4v5xBZ8S/4DTPM3t7k/D1e0u4s5Q1YzmqU F1D0QgPyhHeGXZ+qGESePIS4O5bFSGtOgy1FgtShoP9meh9c10yMUC7e7S+NlvRv CLwxsW9Z35Bkv3c+NY8shO2Wp1pADyQ9FVqj2orrrjBA+GKAhpTgUx+JK8p1/FpR vHYCZL4vQ/Rr7MlhAlpEP+cEzKL/adbrqkhKLR4oRXMrgglt8+IWbKwaDy9mtrX+ b4Wwp9VrJj/XLt933zJHLGUx035XHLmskJKiBlKLDRAXppjIs61mRc8k/ULgCYIx YR15MPx0Q9Z1zdt2qXiRx24nxhMPlbA= -----END CERTIFICATE-----Generated at Fri Nov 22 09:42:04 2024 by rpki-client on console-ams.rpki-client.org