$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa File: 9d2999d7-a1bb-3446-acf4-a09d095fef48.roa (raw, json) Hash identifier: zcbTqaretsfHbvj1i77Kame86nUBbrZ3LZl8o8V9788= Subject key identifier: 13:E9:0C:09:CF:92:A7:52:06:15:0F:13:72:67:3D:3D:5A:39:67:B6 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858474C80BEDEE5D43E2F49600700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa Signing time: Sun 22 Sep 2024 13:00:40 +0000 ROA not before: Sun 22 Sep 2024 13:00:40 +0000 ROA not after: Sat 21 Dec 2024 14:00:40 +0000 asID: 19437 IP address blocks: 104.254.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4c:80:be:de:e5:d4:3e:2f:49:60:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 22 13:00:40 2024 GMT Not After : Dec 21 14:00:40 2024 GMT Subject: CN=c9a5ef70-bf98-4f08-84af-3e9d84322b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:3f:6a:b1:a8:1d:32:c3:60:cd:a0:c7:41: ac:fa:68:4c:c1:17:02:2f:bb:67:db:2d:b2:1d:6a: e1:38:62:e4:5a:6f:bd:ec:71:4c:4c:aa:1e:6b:07: fe:0d:3f:2d:ff:0d:a4:46:26:f0:47:c4:8d:69:7d: ef:5e:d2:74:ba:bf:59:ee:f9:2b:31:74:5c:f2:1d: 52:39:e9:66:94:49:96:3e:d1:d3:54:28:0f:ae:18: a4:78:17:5e:82:17:fa:b0:2e:cd:ba:e9:f1:2b:88: ef:59:f8:c3:33:09:19:53:c3:45:4f:85:dc:44:f3: 66:2a:17:95:23:c5:52:70:ab:04:0b:58:b8:38:90: 32:60:25:f7:42:ed:51:82:22:2f:9c:76:20:0d:af: a3:74:6d:82:bb:3e:bb:e4:dc:ce:a4:de:27:8e:ec: f8:c3:b3:d2:c3:59:4d:da:04:04:fa:03:99:49:42: 67:f0:36:b8:fd:3f:48:f7:8c:ae:80:d8:39:10:7e: e2:c5:9e:fa:02:05:b5:4d:ad:84:43:2f:3e:4b:68: a6:cb:be:df:ec:ae:a5:86:dc:23:29:e4:1a:76:5c: c5:92:94:95:72:ae:ab:fd:e8:21:0b:e6:9a:5b:9b: 60:04:df:51:90:69:88:dc:1f:2f:fc:58:ee:bf:27: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E9:0C:09:CF:92:A7:52:06:15:0F:13:72:67:3D:3D:5A:39:67:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9d2999d7-a1bb-3446-acf4-a09d095fef48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8a:c9:ee:c1:c5:18:61:0d:01:94:67:6a:5e:73:97:e6:db: e0:61:4e:f0:34:bb:ad:d9:a2:2b:35:4d:c1:cd:a1:06:e5:83: 90:04:79:9f:df:e2:2f:0e:06:6b:37:6d:68:b3:dd:c8:f8:3c: fc:f9:3c:e4:7d:e2:e0:1e:ec:ff:0c:3f:3c:9c:b3:0a:9e:54: fe:aa:ed:0a:b9:fc:da:fc:88:a0:bf:19:40:f8:61:8d:85:e5: 2b:df:11:bc:b3:65:83:ab:57:00:93:c2:a3:d2:ec:fc:a5:78: 7e:76:f5:f4:ad:c0:29:b1:86:2b:a0:e1:92:b2:68:85:87:23: e1:80:33:0f:ea:e2:dd:a8:6c:a5:84:c4:93:c9:04:ab:c1:6e: 60:ce:63:47:d7:d1:0d:4a:f8:e5:f9:43:c8:a8:f2:cb:2b:55: 19:e3:68:8d:0a:2a:e6:25:19:5f:04:d7:50:7b:75:09:f0:1b: ae:03:cc:93:2d:51:df:74:b5:a8:8e:d1:b6:d3:e6:d7:d3:6f: a6:f8:52:78:ac:91:b3:71:9b:d4:87:f3:21:02:fd:07:82:62: d6:51:92:b6:92:74:fe:06:76:27:33:a0:a7:c5:0e:19:ff:2f: ca:eb:25:52:66:6b:8d:3f:01:c4:83:9f:cc:e3:1b:d3:b5:e1: c4:57:06:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdMgL7e5dQ+L0lgBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI0MDkyMjEzMDA0MFoXDTI0MTIyMTE0MDA0MFowLzEtMCsGA1UEAxMk YzlhNWVmNzAtYmY5OC00ZjA4LTg0YWYtM2U5ZDg0MzIyYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XY/arGoHTLDYM2gx0Gs+mhMwRcCL7tn2y2y HWrhOGLkWm+97HFMTKoeawf+DT8t/w2kRibwR8SNaX3vXtJ0ur9Z7vkrMXRc8h1S OelmlEmWPtHTVCgPrhikeBdeghf6sC7NuunxK4jvWfjDMwkZU8NFT4XcRPNmKheV I8VScKsEC1i4OJAyYCX3Qu1RgiIvnHYgDa+jdG2Cuz675NzOpN4njuz4w7PSw1lN 2gQE+gOZSUJn8Da4/T9I94yugNg5EH7ixZ76AgW1Ta2EQy8+S2imy77f7K6lhtwj KeQadlzFkpSVcq6r/eghC+aaW5tgBN9RkGmI3B8v/FjuvyeBSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPpDAnPkqdSBhUPE3JnPT1aOWe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWQyOTk5ZDctYTFiYi0z NDQ2LWFjZjQtYTA5ZDA5NWZlZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqKye7BxRhhDQGUZ2pec5fm2+BhTvA0u63Zois1TcHNoQblg5AEeZ/f 4i8OBms3bWiz3cj4PPz5POR94uAe7P8MPzycswqeVP6q7Qq5/Nr8iKC/GUD4YY2F 5SvfEbyzZYOrVwCTwqPS7PyleH529fStwCmxhiug4ZKyaIWHI+GAMw/q4t2obKWE xJPJBKvBbmDOY0fX0Q1K+OX5Q8io8ssrVRnjaI0KKuYlGV8E11B7dQnwG64DzJMt Ud90taiO0bbT5tfTb6b4UniskbNxm9SH8yEC/QeCYtZRkraSdP4GdiczoKfFDhn/ L8rrJVJma40/AcSDn8zjG9O14cRXBqg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org