$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa File: 29ee82f2-26f5-3427-b2a3-e130b3600811.roa (raw, json) Hash identifier: dLVvsEv/Mq5Pd6QprCffUW0CwTwswC4slgGkaBCmAd8= Subject key identifier: 2C:C8:0F:C3:99:85:5C:E0:ED:F0:85:CD:F9:2A:78:06:05:E4:E4:D6 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F43285847D999EE017D71CE0C766DBA40 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 14445 IP address blocks: 104.249.137.0/24 maxlen: 24 104.249.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:ee:01:7d:71:ce:0c:76:6d:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=4d032d1c-32f9-4ee3-bf9b-c164f3b81f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:a4:b1:ce:c9:c6:5e:a2:a3:31:8f:a0:f4: ef:08:20:3f:ab:f3:81:1f:8b:a6:4e:96:45:8d:9b: 5b:5a:7f:c2:87:a8:98:df:b2:49:54:7c:53:5b:88: f4:11:fb:68:87:04:b9:0a:7c:92:ca:c7:44:b5:21: 8c:52:0f:25:6e:ad:86:fc:6a:6c:07:d4:4a:af:7e: e6:6d:03:f4:e5:fa:04:10:96:de:6c:21:3d:8e:7c: a7:88:51:34:b8:d0:46:05:bb:d8:ac:6a:6d:62:ed: 1d:9b:5f:2b:f7:e8:ef:50:75:f3:62:06:6f:e8:5b: 2d:96:33:76:d5:88:fd:bc:83:89:d8:7d:a6:90:bc: 16:69:f2:62:d4:19:9f:1c:76:a8:56:18:f5:f7:9a: 2d:8a:53:55:aa:9d:0b:62:df:7f:96:0f:93:5c:7d: 28:fb:61:e6:c9:b0:d0:56:69:ee:6f:1d:ed:e1:bb: c6:23:fa:6b:36:23:16:bb:12:d5:62:9a:ab:45:cc: b7:db:f5:37:bb:b0:29:16:64:43:38:25:a1:65:5f: 7e:3d:dd:50:53:b3:9b:78:12:46:ad:1f:ec:1b:80: d1:02:5a:46:50:65:f0:0e:d2:8c:ca:de:60:3e:d3: 23:0c:5a:24:37:bc:4c:83:a3:37:77:cc:68:e2:2d: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:0F:C3:99:85:5C:E0:ED:F0:85:CD:F9:2A:78:06:05:E4:E4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.137.0-104.249.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e6:34:5e:2f:b8:29:c7:73:ff:55:48:98:a3:96:86:bb:45: 42:6f:fd:3e:b8:2a:b8:4b:65:49:70:b4:04:dc:b1:da:b3:77: 48:fd:83:34:56:33:25:dc:1a:0e:63:f0:44:f9:54:96:94:38: e1:e4:f7:5a:cf:1a:fd:4c:25:e1:1a:0c:99:31:ba:39:82:86: 24:e6:1b:86:d8:75:a4:50:21:ad:ad:88:d5:90:68:f6:97:24: 70:f2:f1:ad:60:3d:4e:46:b1:8a:db:0c:48:29:a5:70:55:33: da:e2:df:64:1f:54:27:40:27:92:d7:91:f2:50:04:e8:41:66: c7:b9:80:17:05:2f:48:42:f9:44:a0:24:9b:03:3f:7f:11:1c: 8a:68:14:62:42:14:26:71:1f:3f:aa:2e:36:12:e7:b4:f8:cd: 4d:45:27:ec:e9:3b:30:7b:de:bc:b0:11:12:28:dc:18:02:6b: 24:4b:ba:d8:88:49:03:3a:c1:b4:0a:7d:62:ac:79:f5:5b:2c: 31:93:fc:68:e0:5a:95:9d:e4:98:52:42:43:13:5b:40:bb:86: 46:19:f9:14:3c:db:24:73:d4:07:7a:ce:10:15:0c:d6:aa:8c: 5a:e3:39:a3:27:df:38:24:86:f0:f4:ce:dd:25:b3:54:8d:34: 9a:b1:14:ac -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEfZme4BfXHODHZtukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk NGQwMzJkMWMtMzJmOS00ZWUzLWJmOWItYzE2NGYzYjgxZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpyksc7Jxl6iozGPoPTvCCA/q/OBH4umTpZF jZtbWn/Ch6iY37JJVHxTW4j0EftohwS5CnySysdEtSGMUg8lbq2G/GpsB9RKr37m bQP05foEEJbebCE9jnyniFE0uNBGBbvYrGptYu0dm18r9+jvUHXzYgZv6FstljN2 1Yj9vIOJ2H2mkLwWafJi1BmfHHaoVhj195otilNVqp0LYt9/lg+TXH0o+2HmybDQ Vmnubx3t4bvGI/prNiMWuxLVYpqrRcy32/U3u7ApFmRDOCWhZV9+Pd1QU7ObeBJG rR/sG4DRAlpGUGXwDtKMyt5gPtMjDFokN7xMg6M3d8xo4i2v5QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCzID8OZhVzg7fCFzfkqeAYF5OTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMjllZTgyZjItMjZmNS0z NDI3LWIyYTMtZTEzMGIzNjAwODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo+YkD BABo+YowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAaOY0Xi+4Kcdz/1VImKOWhrtFQm/9PrgquEtlSXC0BNyx 2rN3SP2DNFYzJdwaDmPwRPlUlpQ44eT3Ws8a/Uwl4RoMmTG6OYKGJOYbhth1pFAh ra2I1ZBo9pckcPLxrWA9TkaxitsMSCmlcFUz2uLfZB9UJ0AnkteR8lAE6EFmx7mA FwUvSEL5RKAkmwM/fxEcimgUYkIUJnEfP6ouNhLntPjNTUUn7Ok7MHvevLAREijc GAJrJEu62IhJAzrBtAp9Yqx59VssMZP8aOBalZ3kmFJCQxNbQLuGRhn5FDzbJHPU B3rOEBUM1qqMWuM5oyffOCSG8PTO3SWzVI00mrEUrA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:58 2024 by rpki-client on console-ams.rpki-client.org