$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json) Hash identifier: 0+h9lPeIENwfRScDh/JtgYKIFWk1/COoA2uJmRF2iV8= Subject key identifier: AB:F2:09:97:50:00:03:A6:12:87:0F:95:D6:30:71:85:65:6A:70:E0 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F43285847A0413BF5B630C7DEE3E29358 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 14445 IP address blocks: 104.249.136.0/24 maxlen: 24 104.249.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:3b:f5:b6:30:c7:de:e3:e2:93:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=7464c74c-5844-4239-b83e-6bd16faf1b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:2e:b1:6d:41:f6:39:4d:7f:10:51:24:54: 2f:7b:2a:da:df:8b:ee:64:8f:ad:d7:ad:bd:1b:0a: 73:29:43:7a:4c:8f:66:1d:5f:b9:66:8a:93:e3:e8: c3:1d:7e:d2:cc:c8:34:09:58:4e:b7:19:2a:8d:bd: 12:aa:c9:8e:69:5a:01:4b:01:f1:59:f2:4a:49:ae: c2:e0:88:f4:5f:34:d0:1c:09:5d:a6:72:83:2b:cd: ef:87:9c:fd:06:76:c2:66:80:f9:fa:72:25:8d:0b: 49:3b:8c:5a:31:9a:95:d2:96:14:19:05:ed:39:2b: 63:4f:29:a5:15:ed:bd:64:3e:60:bf:41:49:db:6f: 37:fc:7c:13:09:72:7a:da:a1:f6:81:37:e0:ca:b2: e8:77:78:f2:19:d6:bb:e2:ba:52:54:e6:c1:db:e4: 94:b8:7d:fb:16:5b:e6:94:f1:d0:f2:69:54:cc:2f: af:4e:35:da:56:d9:46:1f:e7:a8:7f:57:c5:81:c3: 0f:54:10:18:9f:ca:ff:cf:00:88:aa:5e:83:ed:85: 62:87:15:77:90:b6:b0:f2:02:20:a5:f0:e5:ab:8f: c4:29:d2:25:95:77:48:86:a5:5b:ce:55:de:9e:cb: 68:e5:2e:0b:4d:d4:fe:d9:d9:cd:af:e4:71:72:c0: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F2:09:97:50:00:03:A6:12:87:0F:95:D6:30:71:85:65:6A:70:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.136.0/24 104.249.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:01:dd:61:22:15:fd:bd:50:56:ae:87:11:8a:5c:d0:ae:0b: 5a:9a:06:e9:ce:d5:f2:8a:91:e4:d8:ee:5b:b0:75:c9:ab:93: 15:16:c7:70:e1:b9:74:c6:23:55:ee:91:32:81:f3:33:99:93: 78:43:0e:35:e7:54:38:4c:0e:1a:57:47:cc:16:03:dc:21:ae: 25:55:f4:0a:61:3a:c6:4b:b5:5f:fe:68:ce:24:1f:c9:68:fa: 78:73:05:83:07:01:61:58:18:62:01:a5:1e:68:53:fc:e4:8e: 6a:1e:a6:4e:b8:16:38:f6:23:48:cf:e4:6e:a6:0c:71:41:51: bd:42:d6:66:35:6c:c9:de:95:3e:9a:c2:7c:ea:1e:c5:29:98: 1d:d4:c5:64:ea:c8:d9:6f:ac:5a:48:a4:81:e1:60:0f:7e:fb: 02:ef:f2:c3:6f:ed:04:91:ff:c7:d9:cf:fa:da:ba:25:3c:a5: 2f:38:0c:2f:b0:bc:ce:ab:ce:24:c5:3d:0d:2b:4a:7b:f2:bc: b1:20:fb:11:03:9d:26:97:20:a3:dc:30:bf:45:87:93:b0:0f: 5f:e2:bc:dc:14:de:b0:8d:52:6f:be:69:94:2c:25:86:d8:71: 5b:9b:3e:40:ff:10:79:99:48:ef:77:69:97:d0:74:c2:15:be: 4d:d4:71:37 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEegQTv1tjDH3uPik1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk NzQ2NGM3NGMtNTg0NC00MjM5LWI4M2UtNmJkMTZmYWYxYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lMusW1B9jlNfxBRJFQveyra34vuZI+t1629 GwpzKUN6TI9mHV+5ZoqT4+jDHX7SzMg0CVhOtxkqjb0SqsmOaVoBSwHxWfJKSa7C 4Ij0XzTQHAldpnKDK83vh5z9BnbCZoD5+nIljQtJO4xaMZqV0pYUGQXtOStjTyml Fe29ZD5gv0FJ2283/HwTCXJ62qH2gTfgyrLod3jyGda74rpSVObB2+SUuH37Flvm lPHQ8mlUzC+vTjXaVtlGH+eof1fFgcMPVBAYn8r/zwCIql6D7YVihxV3kLaw8gIg pfDlq4/EKdIllXdIhqVbzlXensto5S4LTdT+2dnNr+RxcsAaqQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKvyCZdQAAOmEocPldYwcYVlanDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMDAyZTIyMGQtNTU2Ny0z M2VmLWJkOTItMjhkODlkZmU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPmIAwQA aPmLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKIB3WEiFf29UFauhxGKXNCuC1qaBunO1fKKkeTY7luwdcmr kxUWx3DhuXTGI1XukTKB8zOZk3hDDjXnVDhMDhpXR8wWA9whriVV9AphOsZLtV/+ aM4kH8lo+nhzBYMHAWFYGGIBpR5oU/zkjmoepk64Fjj2I0jP5G6mDHFBUb1C1mY1 bMnelT6awnzqHsUpmB3UxWTqyNlvrFpIpIHhYA9++wLv8sNv7QSR/8fZz/rauiU8 pS84DC+wvM6rziTFPQ0rSnvyvLEg+xEDnSaXIKPcML9Fh5OwD1/ivNwU3rCNUm++ aZQsJYbYcVubPkD/EHmZSO93aZfQdMIVvk3UcTc= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:58 2024 by rpki-client on console-ams.rpki-client.org