$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa File: 61aaa91e-0584-333d-91c2-07c52729d2cf.roa (raw, json) Hash identifier: DWBGpeadlCbSyPxT3WddsVSKeubhVZGmHEoylI2IFUE= Subject key identifier: 11:A4:8B:34:A3:B2:75:8C:7A:D8:02:F0:0C:B9:18:53:9D:F0:7C:25 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584795169222FFD691564CA9B600 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa Signing time: Fri 18 Oct 2024 13:00:41 +0000 ROA not before: Fri 18 Oct 2024 13:00:41 +0000 ROA not after: Thu 16 Jan 2025 14:00:41 +0000 asID: 11290 IP address blocks: 104.37.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:95:16:92:22:ff:d6:91:56:4c:a9:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Oct 18 13:00:41 2024 GMT Not After : Jan 16 14:00:41 2025 GMT Subject: CN=66b40550-d8de-463d-abfe-bf4f522b1a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2e:62:af:2c:93:97:17:96:9f:7b:b7:f9:70: 0a:c4:dc:2e:b3:8a:2c:8c:97:80:39:f6:c0:6a:71: ab:5f:0e:e2:c1:e4:a4:50:21:6a:c6:0b:67:49:b6: 80:ba:48:fd:75:2b:7d:20:c7:2b:f1:71:2e:19:a6: 37:91:d2:1d:24:21:a0:a9:c6:c1:65:dd:53:cc:11: 23:a2:80:0a:df:83:6f:9e:cd:da:fc:a2:5b:8c:8e: 84:a5:76:48:b8:f3:a0:df:35:d2:cc:e8:e3:dd:94: c9:b2:c4:de:b2:61:4b:d8:72:36:a1:f8:23:6d:36: e9:ec:a5:22:c7:1f:8e:e2:07:b7:a7:a1:b6:ba:05: 5a:0b:1b:c8:31:d1:9e:3b:d6:f7:99:5c:fb:6e:49: 0d:d3:4d:68:53:d9:9d:9b:b8:5c:17:a5:f4:cb:3f: 3d:0a:c9:57:2b:d0:ef:db:57:57:04:b4:e5:fb:4d: b7:73:5d:51:cf:2a:9a:97:dc:af:6d:65:f9:56:07: 36:c6:fd:25:45:1c:88:4f:e9:1a:70:28:c6:33:a7: c2:79:1e:86:78:92:81:92:81:99:58:0e:82:1e:61: 9a:5e:70:aa:57:8d:d0:99:5c:96:96:f7:47:15:36: d9:1d:c7:47:34:e3:a2:e7:d6:f6:a4:1c:9e:c1:ea: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A4:8B:34:A3:B2:75:8C:7A:D8:02:F0:0C:B9:18:53:9D:F0:7C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/61aaa91e-0584-333d-91c2-07c52729d2cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 104.37.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:89:48:77:90:df:f7:28:c4:a0:a0:3d:70:92:fd:01:5b:77: b5:b4:7d:c5:97:6d:86:30:7d:ab:35:bc:6d:eb:48:93:c0:18: 71:af:bf:17:5d:78:5b:8d:5c:3d:67:d8:cb:11:70:12:b8:df: 0f:95:9d:34:ad:4b:70:d5:6b:67:9d:7a:27:58:9b:0d:67:b1: 51:3e:ed:eb:99:8f:e9:0d:40:85:7e:df:63:75:d4:1c:5c:f9: 2b:c9:ed:a2:55:9d:22:14:8e:0e:bc:54:a3:73:18:47:1b:14: b4:3c:3e:f4:a3:5b:92:a7:a2:ac:72:c4:3f:2e:b1:4c:f3:fb: 2a:bf:f0:70:ac:df:56:89:18:4e:0c:df:c1:d0:35:39:96:26: 90:ec:8f:93:fc:01:2d:2e:e7:a2:61:e7:94:f2:ec:10:a9:da: 0b:28:a4:88:dd:69:e4:0d:68:df:40:72:c1:55:82:a3:b0:8c: f8:29:57:1f:da:68:c7:e3:ea:1f:a2:eb:47:fc:23:f6:02:83: ea:7b:1f:88:ef:50:a2:08:92:a1:ef:e4:0d:e3:56:58:89:ab: 4c:75:14:2d:64:07:e4:b3:89:51:ac:fa:21:f4:30:28:91:87: 15:5e:b0:39:75:5d:0d:b5:7b:87:ba:08:65:6a:06:79:49:bc: 5b:e7:c8:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVFpIi/9aRVkyptgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk NjZiNDA1NTAtZDhkZS00NjNkLWFiZmUtYmY0ZjUyMmIxYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS5iryyTlxeWn3u3+XAKxNwus4osjJeAOfbA anGrXw7iweSkUCFqxgtnSbaAukj9dSt9IMcr8XEuGaY3kdIdJCGgqcbBZd1TzBEj ooAK34Nvns3a/KJbjI6EpXZIuPOg3zXSzOjj3ZTJssTesmFL2HI2ofgjbTbp7KUi xx+O4ge3p6G2ugVaCxvIMdGeO9b3mVz7bkkN001oU9mdm7hcF6X0yz89CslXK9Dv 21dXBLTl+023c11Rzyqal9yvbWX5Vgc2xv0lRRyIT+kacCjGM6fCeR6GeJKBkoGZ WA6CHmGaXnCqV43QmVyWlvdHFTbZHcdHNOOi59b2pByewerSJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGkizSjsnWMetgC8Ay5GFOd8HwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjFhYWE5MWUtMDU4NC0z MzNkLTkxYzItMDdjNTI3MjlkMmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6JSHeQ3/coxKCgPXCS/QFbd7W0fcWXbYYwfas1vG3rSJPAGHGvvxdd eFuNXD1n2MsRcBK43w+VnTStS3DVa2edeidYmw1nsVE+7euZj+kNQIV+32N11Bxc +SvJ7aJVnSIUjg68VKNzGEcbFLQ8PvSjW5KnoqxyxD8usUzz+yq/8HCs31aJGE4M 38HQNTmWJpDsj5P8AS0u56Jh55Ty7BCp2gsopIjdaeQNaN9AcsFVgqOwjPgpVx/a aMfj6h+i60f8I/YCg+p7H4jvUKIIkqHv5A3jVliJq0x1FC1kB+SziVGs+iH0MCiR hxVesDl1XQ21e4e6CGVqBnlJvFvnyNk= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:13 2024 by rpki-client on console-ams.rpki-client.org