$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa File: ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa (raw, json) Hash identifier: 8j8SOoB7uUkEeV7yuTU4P08vx5sw6wUoABqbSrxXPm4= Subject key identifier: 16:0A:41:07:77:C1:3B:70:13:6A:B8:FE:39:BC:D7:A8:39:B6:3E:1A Certificate issuer: /CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Certificate serial: 010D0C9F432858479D76BED0F1117F4581AC2F00 Authority key identifier: 42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 23465 IP address blocks: 104.255.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:be:d0:f1:11:7f:45:81:ac:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847f57c-ba5f-4d96-baa3-c4a4de39d5a8 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=ba23a0ab-4179-49e1-a0b1-33eeb76ca48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:26:69:8d:bd:2d:f8:ea:27:b2:67:af:a9: 60:28:0e:a5:16:cf:85:09:be:e3:f0:31:5c:99:00: a5:a5:6f:3a:ab:19:96:8b:47:a9:a3:64:4c:fc:62: 92:8b:58:6f:08:7b:36:e7:1f:75:89:c1:98:a0:bd: a3:41:45:ae:9d:38:45:a8:41:90:8e:b1:b6:5e:99: 23:3a:70:50:f8:6c:b7:90:f7:8a:f8:62:6a:5d:2b: ac:b2:c9:a5:c5:5e:2f:d3:ed:3d:e0:01:27:1f:ec: b5:57:30:04:23:f7:c7:fa:a1:b6:3f:54:84:64:53: 83:a4:76:8f:65:4b:61:df:4e:64:49:a7:92:9a:76: 19:35:71:c1:ad:ad:28:db:00:da:73:9e:2a:35:1b: e7:1f:60:21:ca:21:ba:38:96:1e:1f:f2:5a:e3:69: 52:b8:5f:87:0d:08:d3:dc:bf:49:28:f9:47:3e:74: d8:69:28:0d:e7:fb:88:d9:09:89:2b:80:47:88:d1: 08:d1:a9:9f:c8:74:35:8c:0d:28:aa:eb:27:66:80: d0:79:29:eb:31:a2:da:5d:ec:37:5a:ec:22:04:79: 57:0d:b1:8c:e5:b3:f8:47:d5:f4:5f:24:3e:4b:4a: 6d:e3:72:61:4c:88:93:a4:f8:15:e8:c6:c0:de:4b: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0A:41:07:77:C1:3B:70:13:6A:B8:FE:39:BC:D7:A8:39:B6:3E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/ebfc0fb2-00ab-3668-ab6b-daafd14150c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.crl X509v3 Authority Key Identifier: keyid:42:67:38:47:82:B9:45:C0:A3:38:2D:C4:3E:C7:38:D3:35:D9:AC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8847f57c-ba5f-4d96-baa3-c4a4de39d5a8.cer sbgp-ipAddrBlock: critical IPv4: 104.255.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:04:6e:19:63:2b:35:92:42:d1:b1:73:b1:52:aa:22:77:38: d6:01:00:0e:0d:3a:76:96:5e:dc:8c:9a:e9:de:b2:4c:9a:b3: 10:91:68:f8:6f:63:a6:7c:99:ba:f0:d5:d0:98:22:50:af:3f: de:a5:bf:99:40:43:ab:e1:cd:48:d5:25:f9:e9:9f:42:6d:02: ae:ca:2b:91:89:a0:c9:34:1a:69:60:d1:c8:1b:30:74:a1:4f: fd:50:20:ba:0d:cd:db:37:d2:60:56:8e:da:47:23:38:72:b0: 46:81:0b:27:43:c0:00:e0:7d:13:71:47:23:82:24:24:a9:18: b0:2c:b5:17:29:78:01:35:a8:60:22:dd:ed:c6:b0:2f:50:63: 08:9b:8e:4d:e7:79:8d:e3:41:7d:8d:16:59:ca:9a:da:6b:8c: fa:8b:65:eb:63:d8:1b:ba:b4:bf:aa:fe:a8:1a:30:d2:48:09: d9:24:f1:11:83:84:9d:e8:1c:c3:2d:8b:86:84:5e:ef:d5:76: e6:47:38:a1:c5:c9:96:81:2a:20:ae:57:0f:09:e6:a6:8b:9c: 06:6f:1e:e9:f0:66:ba:a8:6b:04:e0:8c:c5:19:b7:b3:e9:11: 29:53:81:e7:79:96:df:42:7f:39:5c:c4:48:28:81:78:1c:a0: 1b:c5:0b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddr7Q8RF/RYGsLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0N2Y1N2MtYmE1Zi00ZDk2LWJhYTMtYzRhNGRlMzlk NWE4MB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk YmEyM2EwYWItNDE3OS00OWUxLWEwYjEtMzNlZWI3NmNhNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LYmaY29LfjqJ7Jnr6lgKA6lFs+FCb7j8DFc mQClpW86qxmWi0epo2RM/GKSi1hvCHs25x91icGYoL2jQUWunThFqEGQjrG2Xpkj OnBQ+Gy3kPeK+GJqXSusssmlxV4v0+094AEnH+y1VzAEI/fH+qG2P1SEZFODpHaP ZUth305kSaeSmnYZNXHBra0o2wDac54qNRvnH2AhyiG6OJYeH/Ja42lSuF+HDQjT 3L9JKPlHPnTYaSgN5/uI2QmJK4BHiNEI0amfyHQ1jA0oqusnZoDQeSnrMaLaXew3 WuwiBHlXDbGM5bP4R9X0XyQ+S0pt43JhTIiTpPgV6MbA3kttRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYKQQd3wTtwE2q4/jm816g5tj4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3 ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0ZGUzOWQ1YTgvZWJmYzBmYjItMDBhYi0z NjY4LWFiNmItZGFhZmQxNDE1MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODg0N2Y1N2MtYmE1Zi00ZDk2LWJh YTMtYzRhNGRlMzlkNWE4Lzg4NDdmNTdjLWJhNWYtNGQ5Ni1iYWEzLWM0YTRkZTM5 ZDVhOC5jcmwwHwYDVR0jBBgwFoAUQmc4R4K5RcCjOC3EPsc40zXZrNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ODQ3ZjU3Yy1iYTVmLTRkOTYtYmFhMy1jNGE0 ZGUzOWQ1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIEbhljKzWSQtGxc7FSqiJ3ONYBAA4NOnaWXtyMmuneskyasxCRaPhv Y6Z8mbrw1dCYIlCvP96lv5lAQ6vhzUjVJfnpn0JtAq7KK5GJoMk0Gmlg0cgbMHSh T/1QILoNzds30mBWjtpHIzhysEaBCydDwADgfRNxRyOCJCSpGLAstRcpeAE1qGAi 3e3GsC9QYwibjk3neY3jQX2NFlnKmtprjPqLZetj2Bu6tL+q/qgaMNJICdkk8RGD hJ3oHMMti4aEXu/VduZHOKHFyZaBKiCuVw8J5qaLnAZvHunwZrqoawTgjMUZt7Pp ESlTged5lt9CfzlcxEgogXgcoBvFCxg= -----END CERTIFICATE-----Generated at Thu Nov 21 18:55:54 2024 by rpki-client on console-ams.rpki-client.org