$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa File: 08dd8f01-f24b-30a6-8e14-4514805f2501.roa (raw, json) Hash identifier: bbGs3RElPwQAoJkzfr2HE2onV9uoNHDkeVXXSGmL3v8= Subject key identifier: 54:AD:83:CF:3F:2E:B5:18:2D:7D:4E:D1:D2:BC:D0:CE:85:99:E0:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858474850C0E47FF0EB47BEEAF500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 9009 IP address blocks: 104.250.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:c0:e4:7f:f0:eb:47:be:ea:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=7322ba07-e81c-40a1-9414-a52bb80853d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:2f:28:2f:15:8a:ab:8f:be:ca:1d:3e:bc: ad:87:28:6a:84:8b:00:a7:c5:ff:11:17:cf:16:5f: 64:67:62:ba:d2:6c:51:27:0e:7e:35:6a:91:63:8c: f5:db:a3:27:30:ff:52:5e:24:5e:81:55:ed:f5:09: 5e:01:9e:1e:2a:8e:51:86:a0:8d:9f:66:c5:9d:c7: 0d:5e:e3:e1:40:24:6a:32:f6:be:7b:2e:25:de:73: af:40:b1:77:ee:54:63:af:6b:f2:e7:28:92:e5:f5: d4:84:8f:82:be:72:d0:8b:a2:42:4f:a3:76:f2:d1: 98:4f:82:d7:7c:a9:7a:11:3c:cc:d4:76:87:7f:7c: 54:31:89:87:e1:33:43:a5:a3:e8:e1:ab:0b:5c:b5: 53:22:56:e5:26:de:62:28:f4:ea:70:00:db:e6:e0: fb:d2:0e:0d:aa:0d:c2:5c:d0:33:22:46:d4:08:9f: ba:5c:74:b8:08:2b:d3:c8:2c:f0:72:7c:ba:85:56: 27:b4:ae:d4:48:20:9a:01:b8:a6:b2:c5:a1:e3:d8: 05:41:59:6a:dc:a2:90:82:18:98:4b:92:5c:72:ec: a5:9d:27:d4:0f:96:d2:52:d8:07:51:e6:b5:db:01: 7e:4d:a0:ba:fb:f6:a5:a5:9d:60:9f:5f:ca:e6:07: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AD:83:CF:3F:2E:B5:18:2D:7D:4E:D1:D2:BC:D0:CE:85:99:E0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c9:2f:c1:42:fa:b8:bd:24:7d:98:c8:64:7e:6c:f2:9e:a7: 20:c7:f2:d7:9c:ec:86:50:11:d2:7d:a0:b9:31:c0:34:59:92: 63:ea:25:d2:c4:52:de:66:76:03:12:c3:b7:36:ae:92:07:db: 4e:a3:6d:91:a0:09:72:f2:43:86:78:d5:05:43:a2:18:9c:2c: 5a:88:63:b7:11:b8:cf:8a:b0:a0:74:f4:7e:22:29:f4:b6:f3: 91:86:fb:68:b5:ed:40:94:16:b2:55:2e:ce:e4:dc:16:42:44: 82:e7:eb:6a:b4:41:f1:7a:5c:cb:7b:37:83:8c:ed:79:4c:22: 60:25:02:0d:60:86:0e:5a:d3:59:c4:fc:27:4e:d0:d0:4c:74: 34:77:15:3a:fc:58:11:c0:5a:28:77:e6:b5:b4:11:9a:96:0b: 96:76:81:ad:e8:0e:1a:3e:e8:7a:ce:10:e9:de:69:26:d9:b6: 4b:83:f2:07:c6:1e:ce:77:89:f3:b2:d1:29:32:a6:70:d6:50: 1f:d7:70:f8:bb:47:f4:25:56:ba:25:b1:81:72:52:fc:0d:0c: 3f:7e:ab:4a:a0:47:28:2f:43:7d:98:04:73:98:eb:61:e4:55: f0:d4:fa:b8:83:4c:a8:4c:00:86:48:c1:ca:b4:61:c3:8b:52: ec:01:da:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdIUMDkf/DrR77q9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk NzMyMmJhMDctZTgxYy00MGExLTk0MTQtYTUyYmI4MDg1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XUvKC8ViquPvsodPrythyhqhIsAp8X/ERfP Fl9kZ2K60mxRJw5+NWqRY4z126MnMP9SXiRegVXt9QleAZ4eKo5RhqCNn2bFnccN XuPhQCRqMva+ey4l3nOvQLF37lRjr2vy5yiS5fXUhI+CvnLQi6JCT6N28tGYT4LX fKl6ETzM1HaHf3xUMYmH4TNDpaPo4asLXLVTIlblJt5iKPTqcADb5uD70g4Nqg3C XNAzIkbUCJ+6XHS4CCvTyCzwcny6hVYntK7USCCaAbimssWh49gFQVlq3KKQghiY S5JccuylnSfUD5bSUtgHUea12wF+TaC6+/alpZ1gn1/K5gfUkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFStg88/LrUYLX1O0dK80M6FmeBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhkZDhmMDEtZjI0Yi0z MGE2LThlMTQtNDUxNDgwNWYyNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzJL8FC+ri9JH2YyGR+bPKepyDH8tec7IZQEdJ9oLkxwDRZkmPqJdLE Ut5mdgMSw7c2rpIH206jbZGgCXLyQ4Z41QVDohicLFqIY7cRuM+KsKB09H4iKfS2 85GG+2i17UCUFrJVLs7k3BZCRILn62q0QfF6XMt7N4OM7XlMImAlAg1ghg5a01nE /CdO0NBMdDR3FTr8WBHAWih35rW0EZqWC5Z2ga3oDho+6HrOEOneaSbZtkuD8gfG Hs53ifOy0SkypnDWUB/XcPi7R/QlVrolsYFyUvwNDD9+q0qgRygvQ32YBHOY62Hk VfDU+riDTKhMAIZIwcq0YcOLUuwB2lg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org