$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa File: b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa (raw, json) Hash identifier: Lg/N5xVOTll+WUZkEr6eJAe6w0OfQMMsM0+82Ck6wfw= Subject key identifier: E6:16:BD:7B:22:17:64:B2:93:26:5B:88:3A:A2:00:BF:A5:90:09:85 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F43285847B101566B06BF1548150856E0 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa Signing time: Mon 28 Oct 2024 13:00:40 +0000 ROA not before: Mon 28 Oct 2024 13:00:40 +0000 ROA not after: Sun 26 Jan 2025 14:00:40 +0000 asID: 46892 IP address blocks: 104.145.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b1:01:56:6b:06:bf:15:48:15:08:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Oct 28 13:00:40 2024 GMT Not After : Jan 26 14:00:40 2025 GMT Subject: CN=daf81145-8ee7-440a-80f7-540b3fb75715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:99:10:97:9a:e1:fd:6d:d8:aa:83:3f:33:94: 49:76:bc:88:cd:96:8f:fa:c4:0f:b8:05:67:40:0f: 62:cc:28:fc:ce:b3:4d:a6:47:52:98:8e:0e:e1:78: bd:ae:f9:f6:b9:71:ae:32:47:b0:28:46:23:9c:c3: 60:f5:d6:7a:c0:c9:3e:ad:21:43:78:b0:80:d6:a2: c8:eb:c3:56:66:29:c6:50:71:63:1f:2d:08:f5:da: f8:af:92:d8:7a:78:26:47:a6:09:13:04:3d:77:9c: 45:37:b4:5b:ac:35:f1:ba:e4:99:ce:e3:47:00:24: 92:cb:ad:4d:77:f1:26:6a:27:11:6b:4a:75:da:ad: 5f:7c:32:1b:ae:5f:d3:2a:4a:e8:36:8d:54:66:b9: 7a:92:c6:53:85:18:68:8a:70:1e:8e:74:8b:25:82: e7:48:68:e1:c0:5a:b1:27:fc:12:04:9c:13:0c:55: d7:bf:46:b2:ca:8d:28:f0:85:83:81:58:60:ed:c6: 00:1d:1b:13:51:7f:09:36:69:fb:33:5f:da:e7:75: 18:db:10:62:0c:d7:e5:6a:fe:55:0e:cc:46:70:e9: 6c:7e:08:da:24:eb:53:ea:c3:83:fa:fe:c9:22:38: 7c:33:c0:68:27:b9:e6:89:63:f8:93:bd:2e:2e:0d: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:16:BD:7B:22:17:64:B2:93:26:5B:88:3A:A2:00:BF:A5:90:09:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 104.145.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:42:dc:cb:33:ad:7f:2f:5a:1b:b2:19:51:cf:97:79:30:3c: 97:84:fe:04:a4:40:b7:43:6a:45:b2:52:d0:61:af:76:4e:b5: 79:4b:6a:7d:70:e1:01:00:c7:8c:53:2a:2e:25:19:a6:cc:59: 68:02:2b:1d:dc:96:0e:d1:7b:66:6b:1d:ff:06:20:9d:55:c8: af:3d:8d:97:55:f6:67:7e:01:0b:b7:df:94:41:1c:72:5c:0a: 7d:18:c9:f0:4a:e6:86:3f:0e:72:c4:8c:6b:36:2d:f5:e5:54: da:10:db:3d:5a:8d:f5:b4:94:1e:b4:f0:d0:d7:25:27:0f:f3: 74:a7:3b:41:a9:dd:34:c8:f4:cd:b1:07:0f:86:1f:1b:a3:e2: 6a:af:ed:89:d8:d0:c9:ee:a6:46:5c:15:88:ae:6c:ff:e1:e3: 8c:f6:23:a2:4a:b3:24:e7:56:b6:45:37:c1:25:43:54:b2:90: ec:71:23:0c:d1:12:3d:96:8e:c8:c6:4a:8f:ba:ab:da:27:81: 83:10:d6:35:9e:01:20:66:c4:75:dc:19:c1:e8:a0:f7:f3:3b: 64:ab:03:6a:a7:1a:93:1d:ac:e8:13:15:cc:75:61:40:f2:e3: 9d:a1:5e:92:44:5e:a4:3d:3a:95:ed:9f:ca:96:d7:6a:0a:cc: ef:f2:df:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEexAVZrBr8VSBUIVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI0MTAyODEzMDA0MFoXDTI1MDEyNjE0MDA0MFowLzEtMCsGA1UEAxMk ZGFmODExNDUtOGVlNy00NDBhLTgwZjctNTQwYjNmYjc1NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5kQl5rh/W3YqoM/M5RJdryIzZaP+sQPuAVn QA9izCj8zrNNpkdSmI4O4Xi9rvn2uXGuMkewKEYjnMNg9dZ6wMk+rSFDeLCA1qLI 68NWZinGUHFjHy0I9dr4r5LYengmR6YJEwQ9d5xFN7RbrDXxuuSZzuNHACSSy61N d/EmaicRa0p12q1ffDIbrl/TKkroNo1UZrl6ksZThRhoinAejnSLJYLnSGjhwFqx J/wSBJwTDFXXv0ayyo0o8IWDgVhg7cYAHRsTUX8JNmn7M1/a53UY2xBiDNflav5V DsxGcOlsfgjaJOtT6sOD+v7JIjh8M8BoJ7nmiWP4k70uLg3sUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYWvXsiF2SykyZbiDqiAL+lkAmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvYjNhYWVkOWMtZmQxMS0z YjdmLWE3MDMtNmMwZDlhYzNmMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1C3MszrX8vWhuyGVHPl3kwPJeE/gSkQLdDakWyUtBhr3ZOtXlLan1w 4QEAx4xTKi4lGabMWWgCKx3clg7Re2ZrHf8GIJ1VyK89jZdV9md+AQu335RBHHJc Cn0YyfBK5oY/DnLEjGs2LfXlVNoQ2z1ajfW0lB608NDXJScP83SnO0Gp3TTI9M2x Bw+GHxuj4mqv7YnY0MnupkZcFYiubP/h44z2I6JKsyTnVrZFN8ElQ1SykOxxIwzR Ej2WjsjGSo+6q9ongYMQ1jWeASBmxHXcGcHooPfzO2SrA2qnGpMdrOgTFcx1YUDy 452hXpJEXqQ9OpXtn8qW12oKzO/y32M= -----END CERTIFICATE-----Generated at Thu Nov 21 21:46:21 2024 by rpki-client on console-ams.rpki-client.org