$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa File: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (raw, json) Hash identifier: ObU0lhQBlG0bquVlV10gxT7biGEgtQUoIo6xz45AfT4= Subject key identifier: 98:99:C8:02:C3:22:99:EA:D1:87:00:21:84:1E:4E:1C:CD:68:68:CA Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584765A0F067154E4E2E85391B80 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa Signing time: Tue 01 Oct 2024 13:00:42 +0000 ROA not before: Tue 01 Oct 2024 13:00:42 +0000 ROA not after: Mon 30 Dec 2024 14:00:42 +0000 asID: 400287 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:a0:f0:67:15:4e:4e:2e:85:39:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Oct 1 13:00:42 2024 GMT Not After : Dec 30 14:00:42 2024 GMT Subject: CN=8722d747-df41-4f65-a07f-a2d1cf9901d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:17:de:aa:8f:e7:ed:7f:17:ce:61:a9:6b:94: 1c:81:ed:00:4b:3f:ee:bb:a5:bc:06:30:54:32:45: e2:00:e0:da:08:86:ac:eb:3d:5a:d3:89:ff:20:3d: ab:90:d1:dc:e7:40:83:04:bc:01:90:39:9b:00:45: ee:f3:d4:03:5b:84:9e:39:9c:6a:96:2f:b6:c2:1a: 73:6d:f2:77:5c:2f:9b:d2:95:e9:0b:50:03:41:d4: f0:cc:ec:c1:bd:a0:3c:4d:9c:99:5d:b0:7b:d6:aa: 27:f0:63:95:08:18:23:87:92:eb:27:a9:cb:89:8e: f2:46:ef:85:ff:a6:2b:12:e1:62:28:8a:2a:c6:27: 5b:64:6d:d2:00:4c:2d:c2:f3:b7:d8:78:d4:cb:24: 38:7e:12:9c:6c:53:6e:57:98:16:bb:29:fa:e1:d6: 83:d7:2e:ca:70:25:85:fa:05:7e:06:10:7b:76:55: fc:28:dc:87:fc:e9:91:82:45:bb:bd:88:dc:e1:ee: ab:64:ed:f7:36:f9:26:b2:d4:4c:72:3e:94:e1:cb: d4:00:35:67:8b:08:57:6e:7e:97:c3:fd:fa:1f:bc: ee:45:70:34:fa:cf:63:5b:ec:6a:44:eb:36:b5:60: ab:99:60:8c:52:75:64:94:ed:25:59:32:29:86:53: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:99:C8:02:C3:22:99:EA:D1:87:00:21:84:1E:4E:1C:CD:68:68:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:19:9a:5f:a9:41:1a:57:6a:fb:dd:77:17:20:37:c0:e6:3e: 4c:69:e8:e5:19:d2:68:bd:19:34:56:43:f8:b0:d3:84:08:ee: d8:c8:5a:b0:13:b3:0f:32:e5:ca:03:73:a6:12:ff:7e:18:04: db:e3:5b:72:68:c1:7f:6b:e3:38:78:bd:d5:7b:84:0c:8c:d0: ca:fc:cb:46:da:b0:99:99:95:2d:8c:b7:23:3d:c7:f7:62:e0: 60:35:24:39:16:09:35:07:ef:64:09:2c:a2:4a:e5:03:aa:fe: a0:29:ed:2c:42:2b:2e:0a:86:7f:b2:89:a7:05:a6:72:63:ad: c5:d8:ec:c7:dc:3c:e8:ad:4e:41:8f:ea:0a:3e:12:4e:7a:0f: cb:1d:e8:89:c5:fd:3e:74:c8:61:b5:f3:e9:4c:e6:66:ea:7b: 7f:e1:45:ac:e1:f8:ca:f6:6b:3f:30:f6:fb:68:d2:1f:c6:d7: 3c:63:d4:b0:70:e4:eb:e3:df:a1:f5:a1:07:80:cb:c2:bf:1d: 57:12:53:ba:ad:5f:06:fd:df:6e:71:18:1e:e3:41:c6:9c:9d: 23:00:4a:c6:9e:c7:03:98:cf:a1:c3:be:7b:ff:87:dd:88:1e: 6e:9e:ae:90:5b:1b:aa:de:94:8b:dc:86:fe:23:b7:cf:82:2c: 3d:49:48:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdloPBnFU5OLoU5G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI0MTAwMTEzMDA0MloXDTI0MTIzMDE0MDA0MlowLzEtMCsGA1UEAxMk ODcyMmQ3NDctZGY0MS00ZjY1LWEwN2YtYTJkMWNmOTkwMWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxfeqo/n7X8XzmGpa5Qcge0ASz/uu6W8BjBU MkXiAODaCIas6z1a04n/ID2rkNHc50CDBLwBkDmbAEXu89QDW4SeOZxqli+2whpz bfJ3XC+b0pXpC1ADQdTwzOzBvaA8TZyZXbB71qon8GOVCBgjh5LrJ6nLiY7yRu+F /6YrEuFiKIoqxidbZG3SAEwtwvO32HjUyyQ4fhKcbFNuV5gWuyn64daD1y7KcCWF +gV+BhB7dlX8KNyH/OmRgkW7vYjc4e6rZO33NvkmstRMcj6U4cvUADVniwhXbn6X w/36H7zuRXA0+s9jW+xqROs2tWCrmWCMUnVklO0lWTIphlMjzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiZyALDIpnq0YcAIYQeThzNaGjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvNGEzNGNkOWYtMWU2Ni0z NmI5LWFlNDMtZTdhOTM5ZWY0Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgZml+pQRpXavvddxcgN8DmPkxp6OUZ0mi9GTRWQ/iw04QI7tjIWrAT sw8y5coDc6YS/34YBNvjW3JowX9r4zh4vdV7hAyM0Mr8y0basJmZlS2MtyM9x/di 4GA1JDkWCTUH72QJLKJK5QOq/qAp7SxCKy4Khn+yiacFpnJjrcXY7MfcPOitTkGP 6go+Ek56D8sd6InF/T50yGG18+lM5mbqe3/hRazh+Mr2az8w9vto0h/G1zxj1LBw 5Ovj36H1oQeAy8K/HVcSU7qtXwb9325xGB7jQcacnSMASsaexwOYz6HDvnv/h92I Hm6erpBbG6relIvchv4jt8+CLD1JSKs= -----END CERTIFICATE-----Generated at Mon Nov 25 16:24:52 2024 by rpki-client on console-ams.rpki-client.org