$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa File: 8df1d45d-f0f6-331a-aa48-9c48058a3859.roa (raw, json) Hash identifier: a4EihMmxoMqI6nbcnqpfWTQfZtmf7iwM4vKhWTYvXo4= Subject key identifier: 85:4E:5A:33:46:5C:6D:94:50:AE:8B:5D:02:30:3C:32:90:CF:5E:02 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F43285847E1F6EF8E519EF6ED986DADC0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa Signing time: Fri 15 Nov 2024 01:54:22 +0000 ROA not before: Fri 15 Nov 2024 01:54:22 +0000 ROA not after: Thu 13 Feb 2025 01:54:22 +0000 asID: 213122 IP address blocks: 104.249.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:f6:ef:8e:51:9e:f6:ed:98:6d:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Nov 15 01:54:22 2024 GMT Not After : Feb 13 01:54:22 2025 GMT Subject: CN=780e92cf-0a12-4a08-ac6b-96968a8e8d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:e7:25:c3:cc:52:44:a7:88:dd:c1:74:15: 14:30:d6:52:0c:dc:66:ff:13:d5:39:6b:da:57:a0: e4:d9:51:a6:e6:da:ee:27:4f:a2:c9:1d:1e:b4:66: 89:4a:8a:bf:f2:b6:6c:a3:27:64:69:3d:da:76:28: d0:1e:bc:dd:51:ab:fe:d0:9f:a7:49:b4:b8:2a:a4: b2:34:29:49:c7:85:b9:2b:27:cf:86:4d:e9:d8:cc: c1:b3:e7:ba:c1:81:35:8e:7f:34:8b:64:51:d7:49: 5e:01:02:c3:24:c9:67:7f:f8:5c:09:2d:68:7e:db: 8c:b7:1a:1f:dc:08:8b:25:fd:33:22:fe:84:aa:11: 25:af:91:0d:09:b7:5f:49:20:a7:24:74:29:d7:24: c8:d0:c6:29:8c:44:a1:89:32:23:9e:20:ac:5f:32: f1:53:27:ae:eb:a4:96:83:95:0f:a2:73:d1:4c:bb: dd:11:ae:29:71:cd:34:f9:c5:bb:73:9d:41:ba:74: 34:3b:a0:93:7d:f3:28:12:b0:4c:34:89:fe:e8:08: 44:14:48:60:4d:fb:f0:8d:a0:fc:b6:03:b7:45:eb: f0:6a:06:ae:16:49:5e:4c:70:ba:bd:b1:e8:e9:63: d9:b1:db:95:10:0a:36:78:07:4a:11:70:45:76:aa: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4E:5A:33:46:5C:6D:94:50:AE:8B:5D:02:30:3C:32:90:CF:5E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8df1d45d-f0f6-331a-aa48-9c48058a3859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8f:20:e8:19:af:2a:c3:02:ff:38:0a:a6:de:3f:b4:9e:e1: 1c:13:5f:83:ab:89:d9:d6:80:32:49:2b:fc:ad:17:62:80:b6: b4:39:a2:a3:ba:78:fc:7d:3b:4d:05:69:13:73:c8:c3:6c:65: ca:74:14:c0:33:99:bf:b8:84:99:f4:72:43:26:39:5e:e9:53: 98:ce:40:fd:cf:5c:67:17:be:5f:b7:9f:90:7e:d6:95:15:48: af:8f:dd:76:e4:36:87:ce:e2:0f:02:75:38:7e:91:5c:8b:4e: 9c:85:1b:81:1e:1f:10:08:1e:2a:c3:c2:f0:47:f4:ae:68:96: 27:30:30:fb:65:1a:23:2f:80:6a:33:36:74:d3:55:1a:28:7a: 7a:65:98:f6:63:36:41:7f:d3:74:58:81:4c:2b:08:54:27:2e: a5:1f:14:5b:68:a5:f6:ef:aa:b2:80:4e:6f:86:c1:06:6f:b4: 03:a6:0a:50:43:35:3d:70:60:e4:b8:58:7a:d9:16:0d:79:62: f2:b7:27:38:0e:43:56:5d:a7:26:c9:60:0d:e6:18:5d:11:41: 3b:19:ad:93:10:8f:58:8e:a9:85:f6:2d:40:e8:89:48:ec:9c: 7a:63:2b:49:99:49:b8:ba:69:96:97:cb:03:af:53:6f:bb:00: 8a:97:49:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh9u+OUZ727ZhtrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI0MTExNTAxNTQyMloXDTI1MDIxMzAxNTQyMlowLzEtMCsGA1UEAxMk NzgwZTkyY2YtMGExMi00YTA4LWFjNmItOTY5NjhhOGU4ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMfnJcPMUkSniN3BdBUUMNZSDNxm/xPVOWva V6Dk2VGm5truJ0+iyR0etGaJSoq/8rZsoydkaT3adijQHrzdUav+0J+nSbS4KqSy NClJx4W5KyfPhk3p2MzBs+e6wYE1jn80i2RR10leAQLDJMlnf/hcCS1oftuMtxof 3AiLJf0zIv6EqhElr5ENCbdfSSCnJHQp1yTI0MYpjEShiTIjniCsXzLxUyeu66SW g5UPonPRTLvdEa4pcc00+cW7c51BunQ0O6CTffMoErBMNIn+6AhEFEhgTfvwjaD8 tgO3RevwagauFkleTHC6vbHo6WPZsduVEAo2eAdKEXBFdqqj4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVOWjNGXG2UUK6LXQIwPDKQz14CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOGRmMWQ0NWQtZjBmNi0z MzFhLWFhNDgtOWM0ODA1OGEzODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGPIOgZryrDAv84CqbeP7Se4RwTX4OridnWgDJJK/ytF2KAtrQ5oqO6 ePx9O00FaRNzyMNsZcp0FMAzmb+4hJn0ckMmOV7pU5jOQP3PXGcXvl+3n5B+1pUV SK+P3XbkNofO4g8CdTh+kVyLTpyFG4EeHxAIHirDwvBH9K5olicwMPtlGiMvgGoz NnTTVRooenplmPZjNkF/03RYgUwrCFQnLqUfFFtopfbvqrKATm+GwQZvtAOmClBD NT1wYOS4WHrZFg15YvK3JzgOQ1ZdpybJYA3mGF0RQTsZrZMQj1iOqYX2LUDoiUjs nHpjK0mZSbi6aZaXywOvU2+7AIqXSaU= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org