$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa File: 7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa (raw, json) Hash identifier: 1caf7vBcuFMPTy9Kv4WQi62Vghk75OgcAcjWGCJY5Ok= Subject key identifier: 4C:A5:38:81:43:9A:F9:1B:BF:14:17:B3:5F:ED:72:24:11:7D:13:52 Certificate issuer: /CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Certificate serial: 010D0C9F43285847F9B4E2F5D402BF4C3DB2BF80 Authority key identifier: A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa Signing time: Sat 23 Nov 2024 14:00:39 +0000 ROA not before: Sat 23 Nov 2024 14:00:39 +0000 ROA not after: Fri 21 Feb 2025 14:00:39 +0000 asID: 399213 IP address blocks: 104.167.227.0/24 maxlen: 24 2602:f8d9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f9:b4:e2:f5:d4:02:bf:4c:3d:b2:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306 Validity Not Before: Nov 23 14:00:39 2024 GMT Not After : Feb 21 14:00:39 2025 GMT Subject: CN=9d7287e3-5040-40c7-aa1d-01e2b24caf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:62:b7:a2:8e:5a:63:40:62:49:f8:31:21: 84:29:5e:69:11:32:ae:7d:16:78:a5:53:be:8e:7b: 3a:06:3e:15:f8:5d:f9:ff:9d:f1:0a:aa:82:51:dd: cf:a8:72:9b:40:7e:a9:40:1a:45:3e:94:1a:6a:ee: 22:66:a9:c4:2a:8d:18:5b:a1:3b:6c:d1:ee:af:e6: cb:f6:7c:c8:38:51:69:65:7f:26:9f:a7:b7:40:88: f7:c0:84:0b:9f:ac:c8:64:19:85:c3:f3:f0:45:15: 91:62:2e:9f:3a:f0:cc:bc:05:40:89:31:ae:df:92: ae:9c:fa:2f:ed:9c:b6:69:e3:2b:a5:3a:d4:fe:31: 69:1b:4e:a7:cb:e7:ab:98:54:67:7f:c5:17:1e:21: b8:0f:fd:2e:91:5b:b1:1b:e9:af:24:a6:a7:7d:03: 07:c4:91:ce:a1:10:08:47:f5:cd:f5:d9:a9:17:4b: ed:38:aa:6f:23:dc:9b:d1:9a:b3:fd:50:19:28:73: 39:f0:cc:f2:e1:66:d4:c3:36:a0:95:f6:6f:2b:1c: 82:23:f8:d3:6f:8b:cb:e3:e8:0c:0a:79:cb:7a:20: 56:1c:39:52:89:1c:86:09:a3:dc:b3:3e:03:a7:34: 82:1d:d9:f9:89:12:6f:c4:ca:0d:55:f3:60:d9:6c: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A5:38:81:43:9A:F9:1B:BF:14:17:B3:5F:ED:72:24:11:7D:13:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/7dc5f10e-ddce-3970-80f8-6a11e52e6c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.crl X509v3 Authority Key Identifier: keyid:A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer sbgp-ipAddrBlock: critical IPv4: 104.167.227.0/24 IPv6: 2602:f8d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5a:8d:93:ec:5c:10:5f:6b:48:1d:90:0f:0f:76:31:32:11: a1:31:8f:f4:0f:c4:fc:f7:27:c2:76:ee:9c:ae:a6:29:cb:32: 53:de:67:75:6b:3e:c0:d6:93:02:e5:ed:92:8b:aa:98:a4:19: cc:81:58:46:df:78:72:46:b9:e7:e7:65:72:b9:de:02:bb:59: e9:86:1c:38:8e:43:ec:aa:20:0f:6c:e3:ea:80:c8:64:ab:c0: 9e:20:2d:a7:ae:c8:e3:0d:30:90:59:96:5b:e1:03:cd:25:b5: 7d:8e:28:f3:97:51:7c:60:e4:de:b1:56:3b:97:35:bb:ea:c4: 4e:45:1c:45:99:5d:af:0a:52:97:be:63:d2:85:8a:29:3e:ec: 8f:8f:92:1e:66:9d:61:af:72:25:73:25:28:7e:4e:08:dc:28: a6:5d:80:8e:13:c9:8d:7f:a9:76:cf:1e:1e:2d:c9:da:a2:be: 30:a8:4e:1b:27:03:5c:51:04:d5:bc:28:49:fb:ff:56:63:0a: c5:7a:2a:36:8f:90:f4:2d:f2:5b:63:07:37:ef:3e:ab:a0:0e: 74:69:17:bf:16:0c:3c:79:88:a1:9e:a9:4d:d8:da:f6:73:c1: 87:3b:18:df:5b:cd:48:38:8b:71:a5:32:9f:8b:95:41:40:d1: 3e:91:d3:27 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEf5tOL11AK/TD2yv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2YTVkN2EtNTFhMi00YTgzLWI1YjUtZDhjMTU0Yjhk MzA2MB4XDTI0MTEyMzE0MDAzOVoXDTI1MDIyMTE0MDAzOVowLzEtMCsGA1UEAxMk OWQ3Mjg3ZTMtNTA0MC00MGM3LWFhMWQtMDFlMmIyNGNhZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrNit6KOWmNAYkn4MSGEKV5pETKufRZ4pVO+ jns6Bj4V+F35/53xCqqCUd3PqHKbQH6pQBpFPpQaau4iZqnEKo0YW6E7bNHur+bL 9nzIOFFpZX8mn6e3QIj3wIQLn6zIZBmFw/PwRRWRYi6fOvDMvAVAiTGu35KunPov 7Zy2aeMrpTrU/jFpG06ny+ermFRnf8UXHiG4D/0ukVuxG+mvJKanfQMHxJHOoRAI R/XN9dmpF0vtOKpvI9yb0Zqz/VAZKHM58Mzy4WbUwzaglfZvKxyCI/jTb4vL4+gM CnnLeiBWHDlSiRyGCaPcsz4DpzSCHdn5iRJvxMoNVfNg2WzITQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEylOIFDmvkbvxQXs1/tciQRfRNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZh NWQ3YS01MWEyLTRhODMtYjViNS1kOGMxNTRiOGQzMDYvN2RjNWYxMGUtZGRjZS0z OTcwLTgwZjgtNmExMWU1MmU2YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWQ2YTVkN2EtNTFhMi00YTgzLWI1 YjUtZDhjMTU0YjhkMzA2LzVkNmE1ZDdhLTUxYTItNGE4My1iNWI1LWQ4YzE1NGI4 ZDMwNi5jcmwwHwYDVR0jBBgwFoAUoJLYIXxJM+T6p/ExBrt1ksbID2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZDZhNWQ3YS01MWEyLTRhODMtYjViNS1kOGMx NTRiOGQzMDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAaKfjMA4E AgACMAgDBgAmAvjZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2Wo2T7FwQX2tIHZAPD3YxMhGhMY/0D8T8 9yfCdu6crqYpyzJT3md1az7A1pMC5e2Si6qYpBnMgVhG33hyRrnn52Vyud4Cu1np hhw4jkPsqiAPbOPqgMhkq8CeIC2nrsjjDTCQWZZb4QPNJbV9jijzl1F8YOTesVY7 lzW76sRORRxFmV2vClKXvmPShYopPuyPj5IeZp1hr3IlcyUofk4I3CimXYCOE8mN f6l2zx4eLcnaor4wqE4bJwNcUQTVvChJ+/9WYwrFeio2j5D0LfJbYwc37z6roA50 aRe/Fgw8eYihnqlN2Nr2c8GHOxjfW81IOItxpTKfi5VBQNE+kdMn -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:26 2024 by rpki-client on console-ams.rpki-client.org