$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json) Hash identifier: zP6/ZsilA4yz/R44wK/SKkEcnyoEf5xsogUQPNx/bG0= Subject key identifier: 9B:1F:BF:D4:C7:C7:4D:92:F0:9A:5B:76:11:8C:E8:4E:D0:33:3A:AF Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F43285847B4C0FA54E0B52D48A2770C00 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa Signing time: Tue 29 Oct 2024 21:14:17 +0000 ROA not before: Tue 29 Oct 2024 21:14:17 +0000 ROA not after: Mon 27 Jan 2025 22:14:17 +0000 asID: 9712 IP address blocks: 104.251.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b4:c0:fa:54:e0:b5:2d:48:a2:77:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Oct 29 21:14:17 2024 GMT Not After : Jan 27 22:14:17 2025 GMT Subject: CN=7bc9eb0c-78c7-46ff-b397-0fa309c3dc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:e4:a6:c6:0c:54:55:26:20:51:e3:ed:37: ec:f2:c9:2d:48:90:31:bc:3e:de:0c:c0:28:19:66: 67:73:d2:ba:34:d2:8b:9d:da:38:2c:5f:c9:4a:a6: e8:a8:8c:1d:eb:ec:6a:97:1d:26:73:9f:c3:95:7f: 11:d2:88:f1:04:9a:85:45:28:fd:74:91:3a:49:d9: 88:8f:e3:2f:70:23:fc:c2:58:4c:11:6c:31:98:c4: 00:77:5f:f9:0d:94:9a:5e:5e:32:d0:12:19:bc:ce: 7c:d7:72:bb:eb:0a:c4:90:51:4d:b5:eb:18:46:23: a4:5f:4a:82:64:de:13:0e:4b:4b:78:bc:cd:e2:88: e4:47:00:a5:bb:fb:1a:81:5a:0c:ff:cc:43:eb:33: b0:df:3e:cf:9e:86:bf:29:64:01:cf:72:a6:46:2c: 17:3e:9c:77:ab:ca:8e:fb:0d:52:12:5e:a7:48:99: a3:a2:56:65:d5:d8:ac:d6:fc:11:93:ad:e3:5a:36: e3:5f:7d:f1:2a:ae:58:50:b5:2b:7d:f5:eb:07:2a: c9:7a:93:f4:61:08:7f:bf:20:95:64:62:32:a6:30: f6:a4:66:44:8f:3a:ee:ca:6f:1b:7d:53:fd:3b:f8: ae:4f:d0:fb:47:8b:9e:61:9e:16:a9:22:46:0b:be: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:BF:D4:C7:C7:4D:92:F0:9A:5B:76:11:8C:E8:4E:D0:33:3A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a1:3e:bf:2e:f9:d2:e3:08:1c:81:02:25:43:52:19:af:15: ed:c3:77:77:57:b4:76:46:ff:ff:b4:11:cd:de:c6:3c:fd:ba: 88:cf:1b:db:3c:ad:de:dc:4d:b5:bb:90:26:8d:0e:76:a7:0d: 18:6f:90:a2:dd:5e:fe:8d:45:c7:4e:7e:9d:1c:da:e8:64:fb: d7:32:17:27:7b:e0:59:13:91:ee:f7:43:b2:94:f7:74:88:82: d8:3a:a6:9c:c1:8b:ae:cd:26:4b:a2:30:18:3e:36:67:71:ac: 7d:ca:e7:c6:5b:21:32:fa:cb:43:73:ce:06:95:ac:61:50:d0: 0f:e3:9a:95:fe:bd:59:6b:3d:c5:c5:f4:21:cc:96:09:1b:ab: ce:87:94:af:63:d4:20:30:b1:68:a1:9d:fd:5a:eb:be:b8:41: 66:c5:22:eb:a8:16:c2:14:e8:e6:e1:48:d9:98:b3:e7:2b:ea: c0:bb:e5:3b:51:17:27:2d:9f:0d:43:5f:53:86:55:64:a5:16: b4:c4:39:22:65:53:50:b6:45:b7:e9:5a:43:0a:f2:00:f2:ac: a3:06:0a:0a:b7:f5:e7:cb:a9:1b:69:44:2e:27:de:71:6d:dd: 8d:6e:1c:6d:00:e2:85:c4:b4:bd:36:8d:3d:5e:3a:da:02:55: 39:4a:30:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe0wPpU4LUtSKJ3DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI0MTAyOTIxMTQxN1oXDTI1MDEyNzIyMTQxN1owLzEtMCsGA1UEAxMk N2JjOWViMGMtNzhjNy00NmZmLWIzOTctMGZhMzA5YzNkYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZPkpsYMVFUmIFHj7Tfs8sktSJAxvD7eDMAo GWZnc9K6NNKLndo4LF/JSqboqIwd6+xqlx0mc5/DlX8R0ojxBJqFRSj9dJE6SdmI j+MvcCP8wlhMEWwxmMQAd1/5DZSaXl4y0BIZvM5813K76wrEkFFNtesYRiOkX0qC ZN4TDktLeLzN4ojkRwClu/sagVoM/8xD6zOw3z7Pnoa/KWQBz3KmRiwXPpx3q8qO +w1SEl6nSJmjolZl1dis1vwRk63jWjbjX33xKq5YULUrffXrByrJepP0YQh/vyCV ZGIypjD2pGZEjzruym8bfVP9O/iuT9D7R4ueYZ4WqSJGC74fYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsfv9THx02S8JpbdhGM6E7QMzqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWhPr8u+dLjCByBAiVDUhmvFe3Dd3dXtHZG//+0Ec3exjz9uojPG9s8 rd7cTbW7kCaNDnanDRhvkKLdXv6NRcdOfp0c2uhk+9cyFyd74FkTke73Q7KU93SI gtg6ppzBi67NJkuiMBg+NmdxrH3K58ZbITL6y0NzzgaVrGFQ0A/jmpX+vVlrPcXF 9CHMlgkbq86HlK9j1CAwsWihnf1a6764QWbFIuuoFsIU6ObhSNmYs+cr6sC75TtR Fyctnw1DX1OGVWSlFrTEOSJlU1C2RbfpWkMK8gDyrKMGCgq39efLqRtpRC4n3nFt 3Y1uHG0A4oXEtL02jT1eOtoCVTlKMJM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:51 2024 by rpki-client on console-fra.rpki-client.org