$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b4642f35-203c-3d60-866e-f81bb2b35e78.roa File: b4642f35-203c-3d60-866e-f81bb2b35e78.roa (raw, json) Hash identifier: qPKVUiK1hw8tq2T87M2umgZt+zefSvEHL2a7IP/fmdM= Subject key identifier: 73:F3:8C:16:CC:65:2E:C3:3E:A8:E9:76:60:8D:AF:25:86:79:E9:3B Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F43285847C34496A411B7E903538496C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b4642f35-203c-3d60-866e-f81bb2b35e78.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 398478 IP address blocks: 104.233.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:96:a4:11:b7:e9:03:53:84:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=6ba09e16-0d5b-4e7f-b8a6-c0c4e567de3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:eb:6c:ff:19:ab:51:bb:d4:c5:d7:84:cf: 93:1c:38:0b:82:04:3d:a7:61:0d:38:15:df:d3:e2: ca:ba:55:fe:b6:af:ec:aa:6d:80:6f:12:eb:dd:0a: 22:02:03:29:d0:ac:63:3a:55:86:a8:0a:9b:6b:22: df:c2:ef:e6:2d:2b:52:fc:a7:f0:70:a5:ac:04:a0: 0e:10:e9:89:b3:44:ce:db:ce:41:2d:b3:35:12:b7: 10:65:1d:5d:58:16:47:03:5f:ef:48:ad:d3:84:89: 25:c0:31:db:84:2d:76:72:46:5c:ef:e0:3f:32:74: 4a:01:c9:72:a7:34:46:db:fd:64:c5:43:b8:00:80: 78:7f:e5:fb:ff:ec:1e:02:f1:d5:f8:4d:a3:5f:db: 56:9e:09:89:aa:53:30:a6:56:82:91:e4:cd:84:16: 12:fe:2c:31:26:e6:9b:5f:77:66:b4:ad:4d:00:a9: 8a:f7:81:a1:8c:f0:d5:b4:76:7e:19:29:95:4e:a1: 52:84:d2:f0:d6:99:2e:80:77:ca:4d:ff:c6:b7:be: a7:35:99:82:1f:67:1a:99:76:aa:bd:c0:4c:9a:7a: 74:a7:5e:0e:ad:6a:fa:4b:bf:11:0a:20:73:5c:eb: 98:c3:54:45:e8:02:ff:17:23:0f:59:00:78:03:ea: 24:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F3:8C:16:CC:65:2E:C3:3E:A8:E9:76:60:8D:AF:25:86:79:E9:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/b4642f35-203c-3d60-866e-f81bb2b35e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1f:92:37:0f:ea:93:2a:1f:ef:63:63:6a:57:59:50:c8:52: 55:86:4d:99:db:9c:f5:48:9e:b3:b6:b4:e2:80:fb:0f:bc:43: fd:0b:ac:32:ca:47:15:77:7d:07:5b:96:65:6a:13:56:9c:36: 38:d0:29:1c:6c:2d:ac:b8:07:b0:ba:1d:59:12:9e:5e:2b:b8: d5:5b:4a:b0:43:80:db:f6:21:4a:0d:67:d5:46:0d:24:9c:11: 5a:54:bf:c1:d6:bb:f3:90:0b:3c:86:a7:c3:dd:a3:3b:15:ab: b8:d1:2f:19:c5:26:76:3b:52:90:5c:bc:bd:44:d0:b6:0f:c4: 63:a1:b4:06:9a:05:0e:2c:0a:60:e2:47:e2:0a:ee:ad:96:bc: d2:37:7e:89:ae:f1:df:e0:67:f3:8d:95:93:d6:42:0a:b7:7e: e9:24:7c:b5:64:78:46:1a:74:00:cb:88:2d:40:1e:60:9c:da: 70:7b:2f:c9:3d:a3:da:e7:c8:15:ff:53:04:35:ae:ec:bf:cd: 38:20:aa:a4:61:9a:f5:89:a4:fb:28:67:ae:de:68:05:f6:40: ab:7a:1d:58:ec:66:c0:cb:91:cb:e2:65:70:29:48:60:17:26: f1:0f:18:f0:6c:d1:e6:19:40:70:08:85:3f:2a:3c:78:9e:7c: 9e:84:6e:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRJakEbfpA1OElsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk NmJhMDllMTYtMGQ1Yi00ZTdmLWI4YTYtYzBjNGU1NjdkZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMrrbP8Zq1G71MXXhM+THDgLggQ9p2ENOBXf 0+LKulX+tq/sqm2AbxLr3QoiAgMp0KxjOlWGqAqbayLfwu/mLStS/KfwcKWsBKAO EOmJs0TO285BLbM1ErcQZR1dWBZHA1/vSK3ThIklwDHbhC12ckZc7+A/MnRKAcly pzRG2/1kxUO4AIB4f+X7/+weAvHV+E2jX9tWngmJqlMwplaCkeTNhBYS/iwxJuab X3dmtK1NAKmK94GhjPDVtHZ+GSmVTqFShNLw1pkugHfKTf/Gt76nNZmCH2camXaq vcBMmnp0p14OrWr6S78RCiBzXOuYw1RF6AL/FyMPWQB4A+okMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPzjBbMZS7DPqjpdmCNryWGeek7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYjQ2NDJmMzUtMjAzYy0z ZDYwLTg2NmUtZjgxYmIyYjM1ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcfkjcP6pMqH+9jY2pXWVDIUlWGTZnbnPVInrO2tOKA+w+8Q/0LrDLK RxV3fQdblmVqE1acNjjQKRxsLay4B7C6HVkSnl4ruNVbSrBDgNv2IUoNZ9VGDSSc EVpUv8HWu/OQCzyGp8PdozsVq7jRLxnFJnY7UpBcvL1E0LYPxGOhtAaaBQ4sCmDi R+IK7q2WvNI3fomu8d/gZ/ONlZPWQgq3fukkfLVkeEYadADLiC1AHmCc2nB7L8k9 o9rnyBX/UwQ1ruy/zTggqqRhmvWJpPsoZ67eaAX2QKt6HVjsZsDLkcviZXApSGAX JvEPGPBs0eYZQHAIhT8qPHiefJ6EbqQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:40 2024 by rpki-client on console-fra.rpki-client.org