$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a97a15e2-a75b-3c07-a1b1-7ce78818c04d.roa File: a97a15e2-a75b-3c07-a1b1-7ce78818c04d.roa (raw, json) Hash identifier: i/6Jm3lNNJ3PfcyTFNowjtVSnkB3jkykPZlDNx5Y5Gs= Subject key identifier: 5F:79:CF:47:E5:D9:8D:FE:78:6B:73:51:A6:E8:0C:D3:75:0E:93:1F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847BEFDD70642D5A9718423B100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a97a15e2-a75b-3c07-a1b1-7ce78818c04d.roa Signing time: Sat 02 Nov 2024 13:15:00 +0000 ROA not before: Sat 02 Nov 2024 13:15:00 +0000 ROA not after: Fri 31 Jan 2025 14:15:00 +0000 asID: 151106 IP address blocks: 104.250.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fd:d7:06:42:d5:a9:71:84:23:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 2 13:15:00 2024 GMT Not After : Jan 31 14:15:00 2025 GMT Subject: CN=ee82bf18-49fc-4bf5-a29d-1c5f7a05f178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:11:e7:87:ca:d6:ad:f5:4a:a4:73:d5:aa: d2:d7:70:38:52:4a:38:ba:af:40:82:21:53:0c:b3: 84:3d:95:b0:4d:a9:f0:22:e8:af:d0:b9:89:83:3f: 64:2a:9c:d6:0a:54:70:fc:c8:72:fb:4b:de:20:4f: bf:8a:d6:33:63:47:7d:c2:53:29:4a:16:0d:c0:71: a6:83:50:e3:0a:0d:6f:ed:22:2f:dd:62:18:11:c8: 46:2f:86:eb:d4:ca:29:04:c4:72:8a:4f:3f:93:b7: ce:74:0b:6c:6c:b9:bf:e5:13:e5:34:5c:fa:01:84: bf:c2:b9:1a:ef:a3:f7:52:21:40:a3:e4:1f:9b:7a: 7e:2d:01:00:e4:18:c1:f8:42:9d:a9:81:a7:cd:80: 05:d5:9e:6e:de:b0:61:70:db:11:6c:12:c4:4f:0b: 1b:08:58:c3:a8:f9:f9:06:60:33:2c:44:4e:d0:89: 38:7f:ee:64:8b:4c:8c:40:4c:c9:ee:62:4f:09:be: b2:42:35:58:8c:03:d8:34:35:3e:cf:6a:53:70:fd: fa:bb:94:b1:a5:71:f4:aa:6e:0a:a2:cd:47:88:77: ef:f9:43:1b:f5:6a:85:1b:b2:e2:4a:31:04:42:ae: d4:6c:4e:7c:63:fc:fe:5e:ec:74:b6:6d:9e:87:60: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:79:CF:47:E5:D9:8D:FE:78:6B:73:51:A6:E8:0C:D3:75:0E:93:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a97a15e2-a75b-3c07-a1b1-7ce78818c04d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:60:e9:a9:d3:2e:b9:db:54:87:28:37:c3:9f:79:cd:fc:54: 2e:92:21:02:c0:2a:8f:58:86:bd:d7:24:a0:47:59:c1:70:59: 7c:1b:c1:4c:86:51:83:d2:da:05:9d:a1:a3:b1:f2:2b:c3:bf: ea:f5:17:7b:52:de:83:fc:53:d2:01:7d:07:29:1e:4d:e2:e7: 7b:92:c0:24:41:0c:e3:c1:6f:28:10:62:da:81:b6:39:d7:36: 8f:65:e8:c1:4a:e4:f4:e3:23:91:50:00:1c:8f:47:01:b1:a0: bb:65:aa:86:66:77:bb:cd:48:80:07:1d:4b:9f:e8:eb:a1:dc: 2a:5b:67:19:ad:8c:14:63:f2:49:4a:93:eb:4d:20:83:60:be: 6b:42:89:2d:94:7e:06:52:8e:3a:0d:32:47:29:3b:a1:41:e7: ef:fc:c2:f9:49:98:da:1c:e1:18:ed:f8:a9:0c:18:7d:4f:1f: ad:c9:48:75:7c:51:63:7d:ab:13:38:4d:18:62:a7:4c:15:44: d7:9c:ce:f6:a1:41:7f:5b:fd:62:16:48:52:48:fa:08:05:a9: 13:90:e8:f6:cd:5d:c3:6c:d1:fa:c6:4a:fa:56:1b:49:8c:41: 33:bd:16:79:9a:09:f2:d8:c0:cf:ff:75:70:d8:25:f3:6e:26: 9d:b7:f6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+/dcGQtWpcYQjsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEwMjEzMTUwMFoXDTI1MDEzMTE0MTUwMFowLzEtMCsGA1UEAxMk ZWU4MmJmMTgtNDlmYy00YmY1LWEyOWQtMWM1ZjdhMDVmMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDoR54fK1q31SqRz1arS13A4Uko4uq9AgiFT DLOEPZWwTanwIuiv0LmJgz9kKpzWClRw/Mhy+0veIE+/itYzY0d9wlMpShYNwHGm g1DjCg1v7SIv3WIYEchGL4br1MopBMRyik8/k7fOdAtsbLm/5RPlNFz6AYS/wrka 76P3UiFAo+Qfm3p+LQEA5BjB+EKdqYGnzYAF1Z5u3rBhcNsRbBLETwsbCFjDqPn5 BmAzLERO0Ik4f+5ki0yMQEzJ7mJPCb6yQjVYjAPYNDU+z2pTcP36u5SxpXH0qm4K os1HiHfv+UMb9WqFG7LiSjEEQq7UbE58Y/z+Xux0tm2eh2BpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF95z0fl2Y3+eGtzUaboDNN1DpMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTk3YTE1ZTItYTc1Yi0z YzA3LWExYjEtN2NlNzg4MThjMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9g6anTLrnbVIcoN8Ofec38VC6SIQLAKo9Yhr3XJKBHWcFwWXwbwUyG UYPS2gWdoaOx8ivDv+r1F3tS3oP8U9IBfQcpHk3i53uSwCRBDOPBbygQYtqBtjnX No9l6MFK5PTjI5FQAByPRwGxoLtlqoZmd7vNSIAHHUuf6Ouh3CpbZxmtjBRj8klK k+tNIINgvmtCiS2UfgZSjjoNMkcpO6FB5+/8wvlJmNoc4Rjt+KkMGH1PH63JSHV8 UWN9qxM4TRhip0wVRNeczvahQX9b/WIWSFJI+ggFqROQ6PbNXcNs0frGSvpWG0mM QTO9FnmaCfLYwM//dXDYJfNuJp239nQ= -----END CERTIFICATE-----Generated at Fri Nov 22 06:37:56 2024 by rpki-client on console-ams.rpki-client.org