$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2d8ba83f-8c13-37f1-9498-b59e25052633.roa File: 2d8ba83f-8c13-37f1-9498-b59e25052633.roa (raw, json) Hash identifier: jh+6gx+SiV3fok29pTXj/AYeisVMPX+EZy0RiN+l5XQ= Subject key identifier: 1E:3F:3D:42:C5:B0:3E:09:2F:67:AE:85:E9:95:48:7E:D6:98:94:42 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285846DC05273E078E08A7D0C83960 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2d8ba83f-8c13-37f1-9498-b59e25052633.roa Signing time: Tue 13 Aug 2024 06:01:14 +0000 ROA not before: Tue 13 Aug 2024 06:01:14 +0000 ROA not after: Mon 11 Nov 2024 07:01:14 +0000 asID: 26658 IP address blocks: 104.128.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:dc:05:27:3e:07:8e:08:a7:d0:c8:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 13 06:01:14 2024 GMT Not After : Nov 11 07:01:14 2024 GMT Subject: CN=3d36e3f5-452f-4055-a34c-1fd0ce71f18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:96:e6:ef:34:ec:13:cc:4b:ee:10:70:f7: 6b:8d:f0:bb:d3:b0:8c:1a:fd:fe:ed:5a:5a:9b:1c: 62:5e:bc:41:25:f0:61:c4:b4:1f:67:12:c2:4a:54: f8:24:a2:c4:b1:4e:ec:0b:29:30:36:9f:42:77:bc: 73:17:9d:3f:96:ae:71:8a:e1:79:2f:cd:cd:35:62: 7c:ee:3b:c6:a4:67:46:8d:73:d8:6d:cf:30:0b:bf: 03:2b:c3:bd:8d:da:c9:b4:af:7b:dc:d3:ba:e5:c8: ce:70:04:74:ff:44:6c:4a:f6:09:d0:e7:cd:a7:ca: 5f:46:65:45:27:77:01:28:b9:27:f0:78:aa:bf:76: 4e:d6:b1:21:c1:04:34:e0:22:88:4b:4d:f2:7e:5d: c6:21:c8:70:dc:59:46:92:1c:dc:f8:d3:a6:e8:d4: cd:78:9d:99:fb:bc:b0:e4:de:ba:ab:65:81:8c:43: 57:e8:75:64:16:b0:1d:8c:ed:2e:30:e2:e0:3f:58: cf:74:3a:17:6d:d7:38:5d:ef:f4:34:1c:6e:a1:b7: 5b:9f:1f:77:95:ee:ba:89:e1:a2:2a:17:cc:85:28: b0:a3:3c:a6:9e:55:8a:37:ad:7c:58:5a:28:77:df: c8:e4:fc:d6:20:fc:80:d9:c4:f9:5c:47:a1:3b:6f: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3F:3D:42:C5:B0:3E:09:2F:67:AE:85:E9:95:48:7E:D6:98:94:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/2d8ba83f-8c13-37f1-9498-b59e25052633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 104.128.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d7:a1:ae:e3:86:4e:70:e8:50:40:d8:03:96:4f:c9:a0:dd: de:4d:42:1d:59:ef:7a:90:11:84:65:39:51:1d:e8:f3:f3:83: d9:8d:5c:89:c9:a7:85:9d:a2:1d:d3:b1:f6:78:68:83:5f:94: a5:86:0c:c6:a6:76:c1:88:74:52:ef:bb:01:49:bb:a4:c1:73: 34:1f:93:ec:b9:8d:f4:8c:cb:e3:1f:19:26:5f:a4:32:cd:cb: 18:af:2a:aa:e4:dd:a9:5a:7b:26:c3:5a:bd:c8:09:df:b2:4a: 4c:54:96:91:07:5d:9b:c4:d7:47:9c:08:7a:8e:c0:af:3d:73: df:b4:08:2a:22:a2:e9:f6:ac:81:21:c4:f7:dd:c9:09:1e:49: a5:a8:55:dc:fc:2b:20:91:ed:06:00:ce:ca:54:7b:ff:73:c0: 58:37:b8:e2:59:34:8b:7c:fd:3f:db:88:d6:d4:e2:1c:a0:2c: 5e:b7:1f:3b:d0:73:1e:7c:95:1a:1b:68:65:48:18:42:dd:01: 61:12:4e:f5:e4:98:93:92:cf:57:5d:f7:a8:b5:ee:c0:a2:ff: 77:ab:87:50:d2:dc:4c:5b:bb:a2:7d:b2:02:9c:7c:e5:bd:da: 51:60:f2:b8:36:6a:b4:e5:f7:b1:f6:c7:cc:00:5d:15:ba:ef: 89:59:70:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbcBSc+B44Ip9DIOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI0MDgxMzA2MDExNFoXDTI0MTExMTA3MDExNFowLzEtMCsGA1UEAxMk M2QzNmUzZjUtNDUyZi00MDU1LWEzNGMtMWZkMGNlNzFmMThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SyW5u807BPMS+4QcPdrjfC707CMGv3+7Vpa mxxiXrxBJfBhxLQfZxLCSlT4JKLEsU7sCykwNp9Cd7xzF50/lq5xiuF5L83NNWJ8 7jvGpGdGjXPYbc8wC78DK8O9jdrJtK973NO65cjOcAR0/0RsSvYJ0OfNp8pfRmVF J3cBKLkn8Hiqv3ZO1rEhwQQ04CKIS03yfl3GIchw3FlGkhzc+NOm6NTNeJ2Z+7yw 5N66q2WBjENX6HVkFrAdjO0uMOLgP1jPdDoXbdc4Xe/0NBxuobdbnx93le66ieGi KhfMhSiwozymnlWKN618WFood9/I5PzWIPyA2cT5XEehO2/VpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4/PULFsD4JL2euhemVSH7WmJRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMmQ4YmE4M2YtOGMxMy0z N2YxLTk0OTgtYjU5ZTI1MDUyNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILXoa7jhk5w6FBA2AOWT8mg3d5NQh1Z73qQEYRlOVEd6PPzg9mNXInJ p4Wdoh3TsfZ4aINflKWGDMamdsGIdFLvuwFJu6TBczQfk+y5jfSMy+MfGSZfpDLN yxivKqrk3alaeybDWr3ICd+ySkxUlpEHXZvE10ecCHqOwK89c9+0CCoioun2rIEh xPfdyQkeSaWoVdz8KyCR7QYAzspUe/9zwFg3uOJZNIt8/T/biNbU4hygLF63HzvQ cx58lRobaGVIGELdAWESTvXkmJOSz1dd96i17sCi/3erh1DS3Exbu6J9sgKcfOW9 2lFg8rg2arTl97H2x8wAXRW674lZcFo= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:02 2024 by rpki-client on console-fra.rpki-client.org