$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e8847c81-a54a-3853-a536-5c8dcd899781.roa File: e8847c81-a54a-3853-a536-5c8dcd899781.roa (raw, json) Hash identifier: bCYdrwdKq8s2qvbxKFGDNZl2Wyr/cJmv3yy+ibFIF3k= Subject key identifier: C5:D3:23:52:FD:78:4A:C6:F2:13:8A:D1:86:CB:8B:CF:75:E4:E2:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285847BEFE24D5BFA2088ADD51B280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e8847c81-a54a-3853-a536-5c8dcd899781.roa Signing time: Sat 02 Nov 2024 13:15:36 +0000 ROA not before: Sat 02 Nov 2024 13:15:36 +0000 ROA not after: Fri 31 Jan 2025 14:15:36 +0000 asID: 151106 IP address blocks: 104.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:fe:24:d5:bf:a2:08:8a:dd:51:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 2 13:15:36 2024 GMT Not After : Jan 31 14:15:36 2025 GMT Subject: CN=32b7dca6-ea5a-437e-9a5a-d65d784fd1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:5b:57:7c:59:25:0f:b8:18:c8:46:63:ca: 51:96:37:21:76:57:38:02:38:af:6f:58:b6:42:66: 9a:64:72:08:68:74:81:a9:b9:6c:79:ee:f7:9c:21: c7:85:47:b3:e2:bd:01:07:21:9d:69:75:d2:2b:7d: f0:c6:60:fb:72:2e:5f:d3:e3:40:c3:f6:a6:41:71: b0:b2:e0:9e:98:2b:a0:3b:10:28:69:ac:4b:1d:a8: 90:49:0f:0a:4c:a5:f1:cc:2d:4d:99:72:0c:e6:28: 79:75:82:3c:f4:5d:0a:17:ba:5f:58:99:d0:27:78: ca:8c:e0:39:18:25:6f:21:49:49:1d:58:77:d3:d4: 74:76:cc:f6:a4:c1:2f:03:b7:0f:e8:9a:aa:14:d0: a8:22:ed:4b:44:e3:0b:8f:0e:29:2a:bf:0b:27:bd: 78:62:ed:e6:41:cd:5e:b9:b6:7a:2a:fc:14:1f:42: 1d:0c:ba:ba:bb:ec:43:0f:fa:0c:2e:fb:0f:f8:9b: 01:59:a4:bb:1e:31:10:39:b1:8e:89:7a:38:3b:00: 43:a8:2e:b1:e5:20:cd:5c:d9:8f:9d:5a:56:82:a9: b3:6f:18:17:3d:a8:d9:97:c7:1d:4f:af:1c:60:42: 6b:df:01:05:ab:0f:5c:ae:fb:f6:9c:8b:0b:52:8a: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:23:52:FD:78:4A:C6:F2:13:8A:D1:86:CB:8B:CF:75:E4:E2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e8847c81-a54a-3853-a536-5c8dcd899781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ae:ca:8b:eb:aa:0b:74:c8:1e:b5:6e:a2:6f:7e:33:9a:ac: 2d:2b:0a:46:a9:b6:32:af:36:fb:fd:e1:5c:8c:a2:e0:a3:c7: 3d:75:e3:b4:c8:8f:14:c4:d3:7a:fb:1c:af:a8:ad:99:b8:01: c6:04:a3:d4:7c:21:ce:53:08:1b:38:dc:86:54:70:5b:3f:c2: 41:6a:b7:95:72:8b:fa:db:39:25:fc:46:bb:bf:ac:d2:51:25: d2:c3:52:e7:45:6e:d8:60:03:a8:44:a1:21:79:22:87:09:05: 34:b9:2a:83:d3:93:6a:ad:dc:0d:62:44:6e:a7:02:66:b4:46: 46:fc:e2:f6:8b:e3:15:e2:e6:90:8e:7c:6a:7c:8e:a6:44:7f: 57:f2:61:6f:9f:41:1a:6d:61:36:5e:05:fa:f1:2b:50:78:ac: 9e:93:6a:5a:4b:41:f1:e9:5b:41:cf:fa:ab:93:f8:49:b4:d6: 29:b4:d8:c8:00:b3:c5:d6:b6:dc:ed:d4:86:64:48:80:d1:c2: f5:75:79:7a:c6:d2:7e:3d:18:1d:0f:40:3a:6e:6a:b4:13:a5: 43:2f:6a:79:22:9e:60:51:cb:db:36:5d:01:cc:7a:05:91:5d: c5:4d:13:13:b1:e4:cc:96:76:c2:6d:6f:bf:1f:c8:ef:10:2e: ee:e6:d7:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+/iTVv6IIit1RsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTEwMjEzMTUzNloXDTI1MDEzMTE0MTUzNlowLzEtMCsGA1UEAxMk MzJiN2RjYTYtZWE1YS00MzdlLTlhNWEtZDY1ZDc4NGZkMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYxbV3xZJQ+4GMhGY8pRljchdlc4Ajivb1i2 QmaaZHIIaHSBqblsee73nCHHhUez4r0BByGdaXXSK33wxmD7ci5f0+NAw/amQXGw suCemCugOxAoaaxLHaiQSQ8KTKXxzC1NmXIM5ih5dYI89F0KF7pfWJnQJ3jKjOA5 GCVvIUlJHVh309R0dsz2pMEvA7cP6JqqFNCoIu1LROMLjw4pKr8LJ714Yu3mQc1e ubZ6KvwUH0IdDLq6u+xDD/oMLvsP+JsBWaS7HjEQObGOiXo4OwBDqC6x5SDNXNmP nVpWgqmzbxgXPajZl8cdT68cYEJr3wEFqw9crvv2nIsLUoqLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXTI1L9eErG8hOK0YbLi8915OISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTg4NDdjODEtYTU0YS0z ODUzLWE1MzYtNWM4ZGNkODk5NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWuyovrqgt0yB61bqJvfjOarC0rCkaptjKvNvv94VyMouCjxz1147TI jxTE03r7HK+orZm4AcYEo9R8Ic5TCBs43IZUcFs/wkFqt5Vyi/rbOSX8Rru/rNJR JdLDUudFbthgA6hEoSF5IocJBTS5KoPTk2qt3A1iRG6nAma0Rkb84vaL4xXi5pCO fGp8jqZEf1fyYW+fQRptYTZeBfrxK1B4rJ6TalpLQfHpW0HP+quT+Em01im02MgA s8XWttzt1IZkSIDRwvV1eXrG0n49GB0PQDpuarQTpUMvankinmBRy9s2XQHMegWR XcVNExOx5MyWdsJtb78fyO8QLu7m1y4= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:33 2024 by rpki-client on console-fra.rpki-client.org