$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: y0Cfw3pIsblirUfKp6FeL9oeYKciB4/HWmpoHXyd+rs= Subject key identifier: 57:47:8E:99:CD:09:95:FF:A4:E8:95:8D:E5:91:99:26:3D:5D:D1:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584774FBA65971AA22A6C8333D80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Mon 07 Oct 2024 01:00:31 +0000 ROA not before: Mon 07 Oct 2024 01:00:31 +0000 ROA not after: Sun 05 Jan 2025 02:00:31 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:fb:a6:59:71:aa:22:a6:c8:33:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 7 01:00:31 2024 GMT Not After : Jan 5 02:00:31 2025 GMT Subject: CN=a6318270-2a60-4649-82df-9f73ebc9fe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:d8:4d:77:b2:9e:86:35:2b:c3:34:be:a3: b2:a3:c1:c9:ed:58:e1:9d:9d:64:d4:99:9b:36:bf: f9:6b:3c:c5:a9:e7:56:ff:2a:27:20:f8:27:16:2f: 40:89:d1:c1:21:6c:bf:64:33:4f:d5:65:3c:4f:cd: 19:56:91:13:5c:76:75:c5:b2:7c:b1:d4:7c:37:e1: 56:4f:79:f5:ac:3c:fd:e1:e5:2f:6f:30:b1:d8:07: 25:65:22:08:6f:a6:d2:30:45:c4:ec:63:e6:42:37: 93:9c:06:fc:cb:0c:ea:0b:57:ad:9d:86:fa:57:a0: cc:2e:d6:6a:dd:7f:65:99:8b:b1:f9:fd:83:47:be: fc:a3:dc:ac:9b:9a:20:16:63:70:60:de:15:49:54: d2:4a:2a:da:ef:22:d9:c5:fa:30:5e:4a:98:19:c3: c1:2c:8b:e8:1b:3f:ab:c1:42:13:53:51:1d:33:54: ab:2d:43:9b:e3:5d:c3:9b:ec:7b:8e:07:63:2a:3b: 37:f5:df:c0:78:2e:b2:18:d6:7c:d2:7b:7f:ec:4a: d4:85:f5:09:92:a8:23:5a:e4:b8:f0:8f:f1:e9:68: 55:00:aa:ea:92:46:8f:d5:7a:e0:b6:23:b8:97:2d: 69:fb:f9:4d:b7:bb:87:97:98:55:af:79:7c:b9:60: bf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:8E:99:CD:09:95:FF:A4:E8:95:8D:E5:91:99:26:3D:5D:D1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:11:85:e6:27:8f:f3:99:7d:69:bd:8e:62:f3:5f:13:45:13: db:ab:2b:27:95:61:ad:f5:8e:fe:50:36:06:95:99:ba:55:d2: 93:29:93:1c:2b:64:b1:17:d3:44:59:74:1d:1e:7a:26:66:e2: 27:73:da:45:29:a6:5e:b1:74:82:5c:1b:7c:9f:e9:5f:7d:19: 56:1a:e0:2d:f9:2c:e2:7d:b5:d3:2d:69:dc:3b:31:3c:a3:84: cc:d5:a4:98:44:40:32:0e:b9:ac:3b:5d:d4:6e:36:95:79:3d: 62:ac:24:d0:76:43:f8:77:32:7a:28:02:ad:da:d9:75:6e:63: 4e:ec:c2:5c:27:9c:7a:7b:94:28:a0:95:7a:f5:e3:ec:f2:76: 3f:75:fb:75:34:3a:d9:46:ab:87:ec:72:be:38:9e:9e:02:01: c3:fd:88:45:e9:56:66:8f:b6:fd:e2:f6:db:77:d7:76:94:f8: 7c:59:f0:4e:b2:f4:d1:0e:1c:37:7f:a7:ef:94:6b:ab:a2:b8: f9:82:86:88:84:47:e5:67:e2:ca:f8:44:5f:91:07:a2:e6:ed: c2:fa:0e:f7:f8:b3:8b:a3:32:e6:d7:de:cb:e4:74:d6:5f:bc: 05:e1:cb:ef:12:5f:f7:a0:8d:03:a0:d7:3f:d0:c0:dc:4c:b7: 14:25:cb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd0+6ZZcaoipsgzPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTAwNzAxMDAzMVoXDTI1MDEwNTAyMDAzMVowLzEtMCsGA1UEAxMk YTYzMTgyNzAtMmE2MC00NjQ5LTgyZGYtOWY3M2ViYzlmZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLfYTXeynoY1K8M0vqOyo8HJ7VjhnZ1k1Jmb Nr/5azzFqedW/yonIPgnFi9AidHBIWy/ZDNP1WU8T80ZVpETXHZ1xbJ8sdR8N+FW T3n1rDz94eUvbzCx2AclZSIIb6bSMEXE7GPmQjeTnAb8ywzqC1etnYb6V6DMLtZq 3X9lmYux+f2DR778o9ysm5ogFmNwYN4VSVTSSira7yLZxfowXkqYGcPBLIvoGz+r wUITU1EdM1SrLUOb413Dm+x7jgdjKjs39d/AeC6yGNZ80nt/7ErUhfUJkqgjWuS4 8I/x6WhVAKrqkkaP1XrgtiO4ly1p+/lNt7uHl5hVr3l8uWC/EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdHjpnNCZX/pOiVjeWRmSY9XdEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcRheYnj/OZfWm9jmLzXxNFE9urKyeVYa31jv5QNgaVmbpV0pMpkxwr ZLEX00RZdB0eeiZm4idz2kUppl6xdIJcG3yf6V99GVYa4C35LOJ9tdMtadw7MTyj hMzVpJhEQDIOuaw7XdRuNpV5PWKsJNB2Q/h3MnooAq3a2XVuY07swlwnnHp7lCig lXr14+zydj91+3U0OtlGq4fscr44np4CAcP9iEXpVmaPtv3i9tt313aU+HxZ8E6y 9NEOHDd/p++Ua6uiuPmChoiER+Vn4sr4RF+RB6Lm7cL6Dvf4s4ujMubX3svkdNZf vAXhy+8SX/egjQOg1z/QwNxMtxQly/Y= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:55 2024 by rpki-client on console-fra.rpki-client.org