$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa File: b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa (raw, json) Hash identifier: sJnuZWfbviIhYMD34Nb4198u8bulU/UP9YLQavQvB60= Subject key identifier: D2:DF:3D:81:E6:A3:77:01:9A:6E:4B:65:1B:0F:CC:EF:C8:D4:F1:C3 Certificate issuer: /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Certificate serial: 010D0C9F43285847F2BA29981E2E793D5913FAC0 Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 399045 IP address blocks: 104.167.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:29:98:1e:2e:79:3d:59:13:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35 Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=68b2670e-efab-4171-b5a6-549f8112aa2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:a5:8d:0e:7c:dd:fc:51:99:92:95:f4:5d: 7e:a8:66:37:ae:a2:e8:50:32:14:c5:fa:32:bd:11: 56:73:f6:3f:f3:d0:28:fa:d4:07:f5:4f:20:eb:52: 10:63:bf:c3:38:2c:b9:4e:cf:e5:81:a4:3c:3e:24: e7:5f:90:cd:f0:89:89:ff:ee:b3:e7:a0:57:46:28: 5a:f8:10:df:a6:5c:4b:41:ab:9d:d2:bc:10:1a:76: f1:69:82:51:75:80:61:13:4d:24:c5:a1:c1:c6:1d: db:28:ac:3f:00:f4:9f:15:9e:fb:f1:f6:2e:8d:d7: 1c:85:31:90:96:2e:89:c5:34:28:8a:e4:43:cf:08: d9:f0:af:7b:1c:4b:fe:98:cf:55:3b:83:f9:c0:e1: b6:5d:ce:82:6d:7d:9a:48:85:71:e7:30:ba:5f:51: 63:4a:47:03:7c:b6:9c:5a:f1:3a:47:48:45:cf:95: a5:7e:28:27:cc:a4:7f:0f:55:40:50:bb:d4:fb:ba: 8f:4d:d4:4e:5d:ff:af:48:41:07:07:f0:09:f0:89: 0b:15:1d:98:d4:e7:45:37:d3:9c:00:58:dd:7d:55: e0:f6:70:e3:2b:e6:b7:0d:0f:d4:f8:bb:58:4b:0a: 69:64:c1:46:d5:d2:79:b2:43:99:fa:7f:3a:43:b4: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DF:3D:81:E6:A3:77:01:9A:6E:4B:65:1B:0F:CC:EF:C8:D4:F1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b1f8fb3b-a82a-3540-813b-3f7707cf6368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl X509v3 Authority Key Identifier: keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer sbgp-ipAddrBlock: critical IPv4: 104.167.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a4:9b:bc:19:e6:77:fe:a1:ae:65:4f:40:33:e3:09:e5:83: b3:2d:b9:aa:8b:e7:62:a4:94:0c:8a:7f:aa:fe:cc:f0:df:fc: cb:7c:35:9c:3d:5e:12:9a:76:d6:44:6d:7e:c8:76:29:12:9b: 40:6d:04:25:1e:77:79:de:27:b5:9c:d8:94:1f:aa:da:e3:84: 96:12:98:b4:a1:f6:a5:03:2a:e2:b2:14:73:c5:95:60:77:26: b0:87:f4:95:2b:39:84:be:c9:dc:6b:8f:00:41:34:7a:5c:67: f1:f6:05:43:2c:b2:de:dc:40:05:26:aa:6e:e2:88:b7:68:51: d5:06:f7:9d:98:b9:57:62:70:d8:0c:d4:3d:2b:e7:17:ad:7e: 06:e8:98:30:45:44:d4:fd:38:55:52:07:66:c3:05:41:ac:59: 6c:30:63:bb:d4:22:47:62:28:6b:0c:73:05:85:a0:85:33:fc: b0:0f:f9:18:ec:b6:27:6b:53:35:89:50:61:4d:35:16:f9:c6: b0:7f:84:4b:7d:af:b3:04:03:53:1f:15:f0:c7:de:f7:26:8d: 00:a4:95:71:8b:64:de:58:76:bd:90:de:00:a6:bc:58:bd:c8: d7:e8:f9:28:4f:0c:ca:a8:54:b4:77:05:7e:89:a6:13:a8:4b: 0d:48:dd:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyuimYHi55PVkT+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk YTM1MB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk NjhiMjY3MGUtZWZhYi00MTcxLWI1YTYtNTQ5ZjgxMTJhYTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DOljQ583fxRmZKV9F1+qGY3rqLoUDIUxfoy vRFWc/Y/89Ao+tQH9U8g61IQY7/DOCy5Ts/lgaQ8PiTnX5DN8ImJ/+6z56BXRiha +BDfplxLQaud0rwQGnbxaYJRdYBhE00kxaHBxh3bKKw/APSfFZ778fYujdcchTGQ li6JxTQoiuRDzwjZ8K97HEv+mM9VO4P5wOG2Xc6CbX2aSIVx5zC6X1FjSkcDfLac WvE6R0hFz5WlfignzKR/D1VAULvU+7qPTdROXf+vSEEHB/AJ8IkLFR2Y1OdFN9Oc AFjdfVXg9nDjK+a3DQ/U+LtYSwppZMFG1dJ5skOZ+n86Q7SfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLfPYHmo3cBmm5LZRsPzO/I1PHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5 YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvYjFmOGZiM2ItYTgyYS0z NTQwLTgxM2ItM2Y3NzA3Y2Y2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1 NGZkY2RhMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSkm7wZ5nf+oa5lT0Az4wnlg7MtuaqL52KklAyKf6r+zPDf/Mt8NZw9 XhKadtZEbX7IdikSm0BtBCUed3neJ7Wc2JQfqtrjhJYSmLSh9qUDKuKyFHPFlWB3 JrCH9JUrOYS+ydxrjwBBNHpcZ/H2BUMsst7cQAUmqm7iiLdoUdUG952YuVdicNgM 1D0r5xetfgbomDBFRNT9OFVSB2bDBUGsWWwwY7vUIkdiKGsMcwWFoIUz/LAP+Rjs tidrUzWJUGFNNRb5xrB/hEt9r7MEA1MfFfDH3vcmjQCklXGLZN5Ydr2Q3gCmvFi9 yNfo+ShPDMqoVLR3BX6JphOoSw1I3dU= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:48 2024 by rpki-client on console-fra.rpki-client.org