$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa File: a492bc79-a43d-3b74-a966-215a139f5151.roa (raw, json) Hash identifier: YxSu/XFONzeCGVQraNMODBngpYwjhVcLLowRmilgo8Q= Subject key identifier: D3:D7:55:6C:07:FA:CC:25:36:38:BF:30:10:B1:06:7D:1E:79:BD:94 Certificate issuer: /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Certificate serial: 010D0C9F43285847845676B56968B9785FA6F200 Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 399833 IP address blocks: 104.250.248.0/22 maxlen: 25 204.144.124.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:76:b5:69:68:b9:78:5f:a6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=931e81f0-458f-4e5d-8112-769896d88b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:b4:bd:2b:00:7d:10:ab:ed:5d:c9:17:2b: c2:7a:ed:c7:a6:8c:e9:4c:bb:63:c7:cc:9c:b8:46: 1e:34:28:61:aa:cf:8d:a0:f0:6d:5c:d1:70:5c:01: 87:63:46:30:dc:6c:53:5a:b5:20:3e:87:d2:25:a5: 75:3a:b7:4a:c6:49:0f:30:7b:46:d4:6b:69:ab:db: fd:41:e1:9e:82:ac:12:d7:a3:fb:a2:1c:b6:09:1c: 70:d1:82:8f:08:bf:42:45:4d:b0:1d:b2:b5:a6:73: 99:70:7c:58:8f:fe:03:d7:b6:2c:c4:08:fd:14:ed: 2e:15:62:a3:8d:86:dc:98:6d:f4:1b:15:aa:77:cc: 43:54:7e:90:40:ce:62:c9:aa:07:33:30:b7:41:13: b7:3c:28:b3:33:0d:fd:14:b0:e5:cd:9f:52:fe:b1: 4c:c1:98:94:37:d0:0b:0b:b5:25:70:31:7d:a3:0d: d8:93:cb:84:7e:33:7c:4c:b0:ad:a3:8a:ab:85:26: 7c:99:c5:be:50:6c:e3:6d:0d:46:68:02:a4:70:1b: 31:71:75:c9:08:8a:2f:75:7b:f7:82:0f:7e:6d:f1: 40:94:04:9a:a7:59:2a:f2:3a:94:6c:53:9c:ee:80: d1:48:f2:21:b8:47:93:af:cc:94:c6:6c:0c:22:54: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:55:6C:07:FA:CC:25:36:38:BF:30:10:B1:06:7D:1E:79:BD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl X509v3 Authority Key Identifier: keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer sbgp-ipAddrBlock: critical IPv4: 104.250.248.0/22 204.144.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1a:30:39:77:ce:e0:5e:1f:10:3e:07:9e:1b:e9:2a:a3:06: 90:b3:73:5b:72:10:a8:f2:63:2b:e4:3e:31:63:ef:0f:08:62: b2:52:20:ba:90:28:bb:ba:04:35:58:7b:ae:17:a8:eb:1f:8c: 00:3e:4d:37:d4:65:67:52:53:e2:1d:0c:0d:fd:f8:c9:00:bd: bc:8f:70:b9:77:18:c7:ec:e1:d5:13:82:45:13:da:1a:62:6b: 8b:30:31:49:b5:96:ac:93:48:df:81:37:62:0a:b8:93:9d:2f: 6b:c4:40:12:32:14:48:58:91:c3:3c:44:f3:6a:22:b6:e4:85: b9:39:c7:4e:de:ac:60:ad:f5:78:3b:39:72:ea:92:71:91:c8: 93:2c:d6:fe:ec:91:00:8c:fa:74:9c:35:46:b9:0d:d3:48:19: b8:f0:a0:dd:02:84:18:6b:b9:0b:c0:ca:ee:c3:8e:e9:37:b3: 05:a7:24:cb:f0:32:0d:ce:20:61:51:53:06:b3:6f:b4:a5:43: e6:2a:a9:21:05:f9:dc:1e:f2:89:bb:d3:06:1c:dd:80:53:94: 8f:65:f3:d8:6f:48:46:92:ff:93:fb:0b:04:93:7a:97:de:6a: ab:d9:ae:67:2a:b7:b8:b9:0f:8c:69:56:f6:b8:7c:98:90:3b: 73:c6:e9:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeEVna1aWi5eF+m8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxY2U2YjAtMTc5MS00NGRkLWI3ZjctZjBiMzhiYjMw YzA5MB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk OTMxZTgxZjAtNDU4Zi00ZTVkLTgxMTItNzY5ODk2ZDg4YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjW0vSsAfRCr7V3JFyvCeu3HpozpTLtjx8yc uEYeNChhqs+NoPBtXNFwXAGHY0Yw3GxTWrUgPofSJaV1OrdKxkkPMHtG1Gtpq9v9 QeGegqwS16P7ohy2CRxw0YKPCL9CRU2wHbK1pnOZcHxYj/4D17YsxAj9FO0uFWKj jYbcmG30GxWqd8xDVH6QQM5iyaoHMzC3QRO3PCizMw39FLDlzZ9S/rFMwZiUN9AL C7UlcDF9ow3Yk8uEfjN8TLCto4qrhSZ8mcW+UGzjbQ1GaAKkcBsxcXXJCIovdXv3 gg9+bfFAlASap1kq8jqUbFOc7oDRSPIhuEeTr8yUxmwMIlTgtwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNPXVWwH+swlNji/MBCxBn0eeb2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NzFj ZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIzOGJiMzBjMDkvYTQ5MmJjNzktYTQzZC0z Yjc0LWE5NjYtMjE1YTEzOWY1MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODcxY2U2YjAtMTc5MS00NGRkLWI3 ZjctZjBiMzhiYjMwYzA5Lzg3MWNlNmIwLTE3OTEtNDRkZC1iN2Y3LWYwYjM4YmIz MGMwOS5jcmwwHwYDVR0jBBgwFoAU3z/H11IEIJx7JuUPfsAY2zqMdnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NzFjZTZiMC0xNzkxLTQ0ZGQtYjdmNy1mMGIz OGJiMzBjMDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCaPr4AwQC zJB8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHwaMDl3zuBeHxA+B54b6SqjBpCzc1tyEKjyYyvkPjFj7w8I YrJSILqQKLu6BDVYe64XqOsfjAA+TTfUZWdSU+IdDA39+MkAvbyPcLl3GMfs4dUT gkUT2hpia4swMUm1lqyTSN+BN2IKuJOdL2vEQBIyFEhYkcM8RPNqIrbkhbk5x07e rGCt9Xg7OXLqknGRyJMs1v7skQCM+nScNUa5DdNIGbjwoN0ChBhruQvAyu7Djuk3 swWnJMvwMg3OIGFRUwazb7SlQ+YqqSEF+dwe8om70wYc3YBTlI9l89hvSEaS/5P7 CwSTepfeaqvZrmcqt7i5D4xpVva4fJiQO3PG6Vo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:50 2024 by rpki-client on console-ams.rpki-client.org