$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a4598495-9436-3ec0-923d-347efe2e9436.roa File: a4598495-9436-3ec0-923d-347efe2e9436.roa (raw, json) Hash identifier: TQBjIqkb6t1J9smTplLylz48PAMxm1zZ1KJtfb0GwRk= Subject key identifier: C5:79:5B:D7:85:6D:6C:B5:69:50:E5:FC:6A:8E:0F:5E:55:E2:0A:C2 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F43285847BAC6A837959BB00303E8AF70 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a4598495-9436-3ec0-923d-347efe2e9436.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 60841 IP address blocks: 104.167.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:a8:37:95:9b:b0:03:03:e8:af:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=473b3e23-6204-4736-97b9-2dbc242c3217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:1a:ac:04:34:7f:aa:b1:25:8b:26:29:98: 68:35:9a:a2:87:00:2c:5c:6a:e5:fa:c1:da:25:50: 52:11:52:63:b8:42:b9:6d:b8:b4:ba:5d:f3:70:a7: f5:14:08:65:61:7d:a9:3e:de:83:40:8b:3a:00:ef: 82:5d:50:17:21:a7:fb:4d:2b:eb:3e:f1:2f:10:c2: 38:6c:ab:a9:7c:5d:13:c5:f8:a8:90:89:81:47:c0: a4:0c:39:40:79:47:fc:9f:76:f9:8c:b9:74:e9:8f: a3:3a:e9:1d:82:4f:9f:0c:7c:b0:d8:f1:b4:18:b0: d4:7b:5c:3c:55:2f:f9:77:64:bf:9c:a9:40:91:5e: 40:dd:2e:de:a9:4b:18:f0:45:0c:bf:76:d0:4b:81: 45:96:92:dd:4c:bc:0b:8e:69:5c:08:d8:53:a7:09: 42:8b:8e:eb:57:d7:2a:43:62:2c:89:79:ee:41:22: 4c:7e:98:b6:2f:d3:04:7d:bd:7b:64:d2:11:2b:46: 88:66:9d:75:a2:e3:9c:47:7e:f9:33:3a:f4:83:94: 4e:63:92:35:84:3a:da:54:f1:62:bd:55:52:52:6f: 68:0d:95:b6:a8:85:6b:8d:ea:88:b2:22:79:3b:aa: b4:85:93:f1:25:a5:53:e9:e2:d5:af:20:26:b0:ca: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:5B:D7:85:6D:6C:B5:69:50:E5:FC:6A:8E:0F:5E:55:E2:0A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/a4598495-9436-3ec0-923d-347efe2e9436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv4: 104.167.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0c:32:69:3c:bc:1b:8b:ea:23:cd:26:e6:32:e7:37:eb:44: 1f:b7:6a:3b:07:fb:9f:cc:d7:13:4b:3e:c8:1d:31:fb:d0:0f: 65:49:fd:78:75:1b:80:8c:f4:a6:ca:7b:3c:9f:a0:15:e4:0b: 3e:97:ac:d3:14:92:6c:68:6d:94:fc:a1:78:94:6f:15:fa:f5: bd:82:53:1d:4b:98:b4:91:e2:55:15:36:1b:63:f8:a8:46:66: 2b:06:cb:5b:12:2e:e3:3d:12:72:90:49:82:32:8c:ce:76:f3: c2:cd:ba:13:a1:00:a6:4f:62:c9:4b:0f:22:27:d8:01:f0:04: c4:3b:93:be:0b:65:79:84:aa:42:17:fa:5c:4a:10:c9:f7:99: f2:9b:76:15:05:b4:c7:6d:63:74:49:95:d1:3e:b3:85:b8:96: 5c:4a:6f:d1:db:e5:3d:7a:0c:f4:6a:6f:3e:cd:0a:81:90:fb: fb:2b:00:ec:6e:1a:14:67:57:98:b7:57:41:a1:84:03:81:06: 46:81:f0:9d:53:72:23:5b:df:45:10:e9:b4:1a:d8:3e:19:f9: 5e:00:e4:25:8c:89:d0:84:26:5b:6a:d3:fb:d4:c4:89:f0:fb: 46:8f:90:a2:ee:27:d4:94:53:76:9d:61:94:9d:65:a1:3c:4f: 19:8a:5d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xqg3lZuwAwPor3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NDczYjNlMjMtNjIwNC00NzM2LTk3YjktMmRiYzI0MmMzMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqcarAQ0f6qxJYsmKZhoNZqihwAsXGrl+sHa JVBSEVJjuEK5bbi0ul3zcKf1FAhlYX2pPt6DQIs6AO+CXVAXIaf7TSvrPvEvEMI4 bKupfF0TxfiokImBR8CkDDlAeUf8n3b5jLl06Y+jOukdgk+fDHyw2PG0GLDUe1w8 VS/5d2S/nKlAkV5A3S7eqUsY8EUMv3bQS4FFlpLdTLwLjmlcCNhTpwlCi47rV9cq Q2IsiXnuQSJMfpi2L9MEfb17ZNIRK0aIZp11ouOcR375Mzr0g5ROY5I1hDraVPFi vVVSUm9oDZW2qIVrjeqIsiJ5O6q0hZPxJaVT6eLVryAmsMpKZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV5W9eFbWy1aVDl/GqOD15V4grCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvYTQ1OTg0OTUtOTQzNi0z ZWMwLTkyM2QtMzQ3ZWZlMmU5NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsMMmk8vBuL6iPNJuYy5zfrRB+3ajsH+5/M1xNLPsgdMfvQD2VJ/Xh1 G4CM9KbKezyfoBXkCz6XrNMUkmxobZT8oXiUbxX69b2CUx1LmLSR4lUVNhtj+KhG ZisGy1sSLuM9EnKQSYIyjM5288LNuhOhAKZPYslLDyIn2AHwBMQ7k74LZXmEqkIX +lxKEMn3mfKbdhUFtMdtY3RJldE+s4W4llxKb9Hb5T16DPRqbz7NCoGQ+/srAOxu GhRnV5i3V0GhhAOBBkaB8J1TciNb30UQ6bQa2D4Z+V4A5CWMidCEJltq0/vUxInw +0aPkKLuJ9SUU3adYZSdZaE8TxmKXdI= -----END CERTIFICATE-----Generated at Sat Nov 23 07:46:06 2024 by rpki-client on console-ams.rpki-client.org