$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa File: 7454f8ef-50a0-3be6-ad8a-80f181155e30.roa (raw, json) Hash identifier: cpyWk126ILLXxGTobiO3Bq5Q1lijFitvRuTw1+xDYIs= Subject key identifier: 5A:B2:3B:AD:AB:FB:40:9A:5D:0B:0E:B2:B7:22:D8:68:D4:76:2A:4B Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F432858475EA62C7369E878F6A8BC0C00 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 62533 IP address blocks: 104.219.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:2c:73:69:e8:78:f6:a8:bc:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=8a8fa245-bb8f-437e-b72b-cde8504a129b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:c8:b3:c2:7b:15:80:d6:fc:84:8b:17:38: 68:80:e4:a5:50:f8:74:bd:ca:e8:20:2d:fc:94:8a: 91:be:cb:62:a7:79:a4:07:68:96:56:47:61:45:e7: 89:a2:1f:a8:e2:0f:31:07:bc:b0:8a:81:78:09:e7: 58:90:13:6d:9e:77:bb:aa:7f:cf:2f:07:56:8e:7c: 73:b3:a0:cd:1c:a0:5f:88:5e:e4:de:85:48:ef:e3: a9:d9:d5:ff:54:b6:50:2d:ed:75:cf:2c:0e:e1:42: 7c:a5:84:a8:50:d4:3b:4c:e2:42:84:d3:a2:ff:13: 09:fc:07:9f:c4:b3:3e:2d:ef:a6:36:4f:23:b4:88: fa:71:8b:6a:50:d8:97:71:df:ed:37:7c:21:91:fb: e8:8e:92:3e:53:b5:43:c7:00:a2:cf:cf:dd:de:b6: ab:a2:f6:16:a0:2b:61:d2:b0:cd:ef:62:91:2a:33: 28:f1:bc:2a:08:b2:0e:da:a3:d9:f0:cc:d6:10:92: 3c:84:c0:64:a2:4b:f7:f3:6b:57:02:76:27:c3:7b: fb:2d:f8:62:ae:16:c1:cc:57:49:47:22:88:10:3d: bc:48:d8:dc:6e:31:c1:b2:26:6e:d3:47:96:b2:2d: 86:98:ea:78:d3:be:b8:b3:bf:a6:33:b5:50:99:73: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B2:3B:AD:AB:FB:40:9A:5D:0B:0E:B2:B7:22:D8:68:D4:76:2A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/7454f8ef-50a0-3be6-ad8a-80f181155e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:83:8d:13:d5:1c:03:d9:0e:f1:c0:df:a3:e4:6e:d4:63:81: 42:ca:2c:b4:7f:82:31:e7:2a:e1:f3:b1:e8:33:f3:e9:a4:a2: d6:e8:9b:92:f2:23:ad:f1:e0:c6:07:6e:76:07:33:a9:6c:19: 37:9d:ac:f6:50:de:d0:63:9c:5e:b5:ce:ed:1e:dd:58:1f:36: 02:19:8e:df:1d:3b:a4:fd:5b:04:0e:60:dd:6e:87:a4:46:b7: b1:e2:ee:2f:f2:c3:69:24:a8:c4:90:44:37:25:70:ea:0a:ce: fd:be:b3:41:30:08:32:c3:92:86:d5:6b:f8:18:96:fe:20:3d: 16:14:1e:3f:2a:05:99:fb:af:01:b0:5f:e0:3e:b7:a6:6f:5b: dc:17:f3:13:ab:94:5c:dd:6a:e1:1a:94:7c:e4:94:9d:f9:1b: d8:84:ea:1e:07:3e:73:4f:ac:25:66:61:bf:4c:63:aa:5c:1d: ba:c9:55:39:73:cc:e3:0a:f9:62:9a:c0:6c:80:04:37:96:e6: a2:d6:05:32:13:39:93:07:17:36:d6:57:1c:19:af:03:c9:44: e5:95:18:03:93:f0:c8:7d:d5:89:0c:d0:83:af:56:f9:12:aa: 8d:61:c7:ef:9a:52:72:38:fb:aa:09:a8:e2:f8:4d:bc:69:c6: 64:7d:14:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepixzaeh49qi8DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk OGE4ZmEyNDUtYmI4Zi00MzdlLWI3MmItY2RlODUwNGExMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGnIs8J7FYDW/ISLFzhogOSlUPh0vcroIC38 lIqRvstip3mkB2iWVkdhReeJoh+o4g8xB7ywioF4CedYkBNtnne7qn/PLwdWjnxz s6DNHKBfiF7k3oVI7+Op2dX/VLZQLe11zywO4UJ8pYSoUNQ7TOJChNOi/xMJ/Aef xLM+Le+mNk8jtIj6cYtqUNiXcd/tN3whkfvojpI+U7VDxwCiz8/d3rarovYWoCth 0rDN72KRKjMo8bwqCLIO2qPZ8MzWEJI8hMBkokv382tXAnYnw3v7LfhirhbBzFdJ RyKIED28SNjcbjHBsiZu00eWsi2GmOp40764s7+mM7VQmXOFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqyO62r+0CaXQsOsrci2GjUdipLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvNzQ1NGY4ZWYtNTBhMC0z YmU2LWFkOGEtODBmMTgxMTU1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2DjRPVHAPZDvHA36PkbtRjgULKLLR/gjHnKuHzsegz8+mkotbom5Ly I63x4MYHbnYHM6lsGTedrPZQ3tBjnF61zu0e3VgfNgIZjt8dO6T9WwQOYN1uh6RG t7Hi7i/yw2kkqMSQRDclcOoKzv2+s0EwCDLDkobVa/gYlv4gPRYUHj8qBZn7rwGw X+A+t6ZvW9wX8xOrlFzdauEalHzklJ35G9iE6h4HPnNPrCVmYb9MY6pcHbrJVTlz zOMK+WKawGyABDeW5qLWBTITOZMHFzbWVxwZrwPJROWVGAOT8Mh91YkM0IOvVvkS qo1hx++aUnI4+6oJqOL4TbxpxmR9FE4= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org