$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc2dd6bb-524c-3072-9663-bdfbacf89c76.roa File: dc2dd6bb-524c-3072-9663-bdfbacf89c76.roa (raw, json) Hash identifier: uND8IY2JIxdsVbGuOtyHPaZU7MU5NMruNlbZB6HprZQ= Subject key identifier: DE:A3:2A:C6:4D:7F:96:38:D9:83:F0:98:42:35:2A:DE:3F:09:16:78 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847C1DF49D4D2E955C174136D40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc2dd6bb-524c-3072-9663-bdfbacf89c76.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 212238 IP address blocks: 104.250.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:49:d4:d2:e9:55:c1:74:13:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=566d87f7-01f0-4ce2-8bad-33baa3639e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:83:bc:fa:58:01:73:b5:8d:83:44:f2:a0: c2:81:6b:24:45:04:9a:f3:2e:2b:63:73:73:8a:88: fd:2a:81:37:cb:65:4c:49:8e:66:f3:ef:2f:bc:1e: ba:53:1a:79:ea:87:bc:ba:04:2d:01:6f:ba:e2:fe: 6f:c1:b8:06:4a:15:7c:0a:57:f3:cd:1b:e4:24:a3: 06:c2:c1:2c:78:b2:32:a8:eb:22:b9:87:48:c4:e5: e9:d0:dd:68:a0:d0:59:a2:f2:51:95:94:8a:b4:b5: 08:ba:34:0c:eb:67:3a:a6:9e:5a:4d:db:39:76:31: a4:f4:9a:e6:e5:7f:4a:3a:02:13:af:76:7a:66:e1: 89:c8:86:9a:b2:dc:73:ee:7f:e5:a9:cc:a2:b6:1f: ca:04:cc:63:4a:7b:1b:c5:76:39:68:c4:a2:d2:69: f7:f9:cd:57:90:36:db:a8:2f:1b:22:08:f9:70:b6: 40:79:d9:be:31:ca:d1:ee:a7:da:c1:21:22:bb:38: ac:a4:28:a9:a4:16:09:2f:bb:b6:b7:14:41:e1:f6: fc:49:27:3f:ba:05:a4:e3:b7:09:58:71:b3:da:fc: 2a:c2:38:33:3e:1a:18:cc:2e:8e:9e:8c:21:6c:0f: 29:9b:38:40:8d:f2:f4:d6:07:2d:14:09:b6:de:f3: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:2A:C6:4D:7F:96:38:D9:83:F0:98:42:35:2A:DE:3F:09:16:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc2dd6bb-524c-3072-9663-bdfbacf89c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ea:6d:6e:0a:65:a1:30:8c:09:33:7e:d0:c7:29:97:59:b4: 2e:06:4f:78:39:cc:96:e5:d1:cb:40:42:a9:f1:95:0b:af:78: 52:aa:e0:36:55:41:41:d0:f7:f5:97:7a:ec:cf:75:6d:7c:80: 1f:cc:be:a5:47:32:59:23:e2:16:90:e9:36:98:c1:d4:dc:67: 6c:26:8f:80:52:a2:a9:c7:51:1d:7b:1a:d3:e7:fd:fc:7c:22: 70:1c:9e:20:0b:71:9f:2e:5b:57:a9:38:25:2e:f2:5f:84:05: 42:52:66:0e:63:24:67:cc:3a:86:91:2d:1b:ab:df:c8:49:1f: 7f:68:75:aa:04:4b:e4:19:76:4c:3c:b9:f7:79:e3:58:ed:c6: 10:42:b1:ae:d3:7d:ed:0d:85:03:9d:79:3c:36:75:b6:01:8b: 6b:69:df:4c:3e:47:a8:77:23:78:5f:4b:9a:88:87:43:3e:a0: 69:f1:dc:49:02:0a:4e:33:f4:17:45:00:87:c8:06:9b:5e:d5: 57:db:04:4c:ae:ea:2e:92:06:03:38:48:cd:18:1e:77:96:e6: bb:fa:f7:8e:dd:7c:a0:c1:4a:b8:36:1a:fc:78:10:33:fb:97: 29:d1:34:fc:46:d4:29:5d:23:fc:a4:6b:73:59:b0:36:25:ed: 0b:41:90:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfB30nU0ulVwXQTbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk NTY2ZDg3ZjctMDFmMC00Y2UyLThiYWQtMzNiYWEzNjM5ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGSDvPpYAXO1jYNE8qDCgWskRQSa8y4rY3Nz ioj9KoE3y2VMSY5m8+8vvB66Uxp56oe8ugQtAW+64v5vwbgGShV8ClfzzRvkJKMG wsEseLIyqOsiuYdIxOXp0N1ooNBZovJRlZSKtLUIujQM62c6pp5aTds5djGk9Jrm 5X9KOgITr3Z6ZuGJyIaastxz7n/lqcyith/KBMxjSnsbxXY5aMSi0mn3+c1XkDbb qC8bIgj5cLZAedm+McrR7qfawSEiuzispCippBYJL7u2txRB4fb8SSc/ugWk47cJ WHGz2vwqwjgzPhoYzC6OnowhbA8pmzhAjfL01gctFAm23vM54QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6jKsZNf5Y42YPwmEI1Kt4/CRZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGMyZGQ2YmItNTI0Yy0z MDcyLTk2NjMtYmRmYmFjZjg5Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrqbW4KZaEwjAkzftDHKZdZtC4GT3g5zJbl0ctAQqnxlQuveFKq4DZV QUHQ9/WXeuzPdW18gB/MvqVHMlkj4haQ6TaYwdTcZ2wmj4BSoqnHUR17GtPn/fx8 InAcniALcZ8uW1epOCUu8l+EBUJSZg5jJGfMOoaRLRur38hJH39odaoES+QZdkw8 ufd541jtxhBCsa7Tfe0NhQOdeTw2dbYBi2tp30w+R6h3I3hfS5qIh0M+oGnx3EkC Ck4z9BdFAIfIBpte1VfbBEyu6i6SBgM4SM0YHneW5rv6947dfKDBSrg2Gvx4EDP7 lynRNPxG1CldI/yka3NZsDYl7QtBkNA= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org