$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa File: c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa (raw, json) Hash identifier: 331RpAy7GQB3hpfI/WQ38PVgO36Fh6rIYxitszPC0jE= Subject key identifier: 33:4F:E6:AD:8A:F6:8D:3A:89:DB:05:95:58:B3:E3:44:57:4E:44:63 Certificate issuer: /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Certificate serial: 010D0C9F43285847F2BA37EAE74BFBC0B69FD000 Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa Signing time: Thu 21 Nov 2024 02:00:38 +0000 ROA not before: Thu 21 Nov 2024 02:00:38 +0000 ROA not after: Wed 19 Feb 2025 02:00:38 +0000 asID: 23393 IP address blocks: 104.37.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:ba:37:ea:e7:4b:fb:c0:b6:9f:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493 Validity Not Before: Nov 21 02:00:38 2024 GMT Not After : Feb 19 02:00:38 2025 GMT Subject: CN=ced5ae42-0187-4bf8-b714-5b4847bdb0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:29:35:4e:0e:84:9a:77:5d:72:36:3c:66: 66:29:c8:90:e1:24:7d:42:90:3c:ee:78:c1:0f:9d: a6:72:a5:02:12:1c:bd:1c:e7:fc:e4:27:de:9f:7c: 9d:69:cd:3e:5c:da:f4:1b:30:df:67:47:9a:f2:9a: d0:b6:2b:88:01:92:74:ac:01:8e:2d:d0:e0:5b:ec: e3:94:7d:d9:a7:2f:4a:00:06:19:00:81:b4:28:b7: 4b:9c:7f:66:f7:3d:65:e9:a0:70:13:4c:f5:49:a1: 54:15:e2:8c:61:7f:b5:f3:c4:f6:63:f2:18:b2:b3: 06:93:ef:f7:22:9d:37:2a:6e:3a:e8:25:81:fd:92: 90:23:ce:46:26:fe:0f:54:70:86:81:45:78:e1:00: 2e:d1:eb:e8:4e:0a:9e:77:3f:2d:26:1c:b6:7b:38: c3:31:57:da:11:eb:b9:3e:9b:d5:61:92:37:29:5d: ad:8c:1d:ce:69:da:54:7d:1e:cd:c3:ea:9f:1c:15: 63:28:b3:dd:4b:cc:03:64:29:c0:5d:08:25:81:0e: 68:9c:db:e4:c8:0a:b6:09:9c:24:97:65:16:91:81: e5:f7:eb:b2:6c:64:39:91:12:2d:a2:2c:ed:4e:a3: f7:6c:af:12:d6:bb:de:52:8b:fd:79:7e:59:23:8f: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:E6:AD:8A:F6:8D:3A:89:DB:05:95:58:B3:E3:44:57:4E:44:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/c21bb6c5-9592-39b4-8b5f-5af9a91334fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl X509v3 Authority Key Identifier: keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer sbgp-ipAddrBlock: critical IPv4: 104.37.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:01:ae:e2:8c:4a:01:9a:fb:71:05:c1:a1:cd:73:e8:e7:99: 81:7f:d7:74:35:12:9c:3b:61:0a:ff:e0:33:20:24:28:34:0c: 73:72:c4:55:d9:d1:a4:39:71:38:6a:28:63:60:99:2d:57:20: 83:cb:a2:51:89:a8:ef:57:bf:e0:fa:3e:c9:31:c5:ce:d3:da: 53:7c:af:d9:bf:aa:95:f2:71:a1:77:fe:00:b8:20:89:64:7d: fd:48:39:0a:50:f2:63:32:6c:84:67:0b:76:92:f3:db:07:00: cf:53:c0:8e:5f:ee:d3:78:04:8a:17:70:05:92:20:3e:31:f4: cf:53:95:f4:eb:2d:5d:ca:6f:24:f3:22:8d:f7:12:28:88:e6: ef:32:14:e5:a8:cd:63:27:c9:95:76:4a:1e:53:49:52:42:91: b6:db:03:7c:38:fd:73:f7:ce:63:da:81:91:64:12:1d:7c:d1: 0d:06:9d:a3:26:92:58:0f:40:87:39:bf:c2:45:51:f3:3d:81: b8:b8:20:e1:bc:78:e8:57:46:e5:bc:77:bf:93:16:ea:0c:36: 21:48:cb:d2:46:5f:f8:11:94:7c:23:e7:e9:d4:6e:71:70:9d: ef:09:a7:c1:fc:cc:d2:04:fa:0e:d3:a0:d7:9f:05:27:19:ef: 8a:0c:51:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyujfq50v7wLaf0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3 NDkzMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk Y2VkNWFlNDItMDE4Ny00YmY4LWI3MTQtNWI0ODQ3YmRiMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR4pNU4OhJp3XXI2PGZmKciQ4SR9QpA87njB D52mcqUCEhy9HOf85Cfen3ydac0+XNr0GzDfZ0ea8prQtiuIAZJ0rAGOLdDgW+zj lH3Zpy9KAAYZAIG0KLdLnH9m9z1l6aBwE0z1SaFUFeKMYX+188T2Y/IYsrMGk+/3 Ip03Km466CWB/ZKQI85GJv4PVHCGgUV44QAu0evoTgqedz8tJhy2ezjDMVfaEeu5 PpvVYZI3KV2tjB3OadpUfR7Nw+qfHBVjKLPdS8wDZCnAXQglgQ5onNvkyAq2CZwk l2UWkYHl9+uybGQ5kRItoiztTqP3bK8S1rveUov9eX5ZI4+uMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNP5q2K9o06idsFlViz40RXTkRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvYzIxYmI2YzUtOTU5Mi0z OWI0LThiNWYtNWFmOWE5MTMzNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy MmRhYzc0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQBruKMSgGa+3EFwaHNc+jnmYF/13Q1Epw7YQr/4DMgJCg0DHNyxFXZ 0aQ5cThqKGNgmS1XIIPLolGJqO9Xv+D6Pskxxc7T2lN8r9m/qpXycaF3/gC4IIlk ff1IOQpQ8mMybIRnC3aS89sHAM9TwI5f7tN4BIoXcAWSID4x9M9TlfTrLV3KbyTz Io33EiiI5u8yFOWozWMnyZV2Sh5TSVJCkbbbA3w4/XP3zmPagZFkEh180Q0GnaMm klgPQIc5v8JFUfM9gbi4IOG8eOhXRuW8d7+TFuoMNiFIy9JGX/gRlHwj5+nUbnFw ne8Jp8H8zNIE+g7ToNefBScZ74oMUdI= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org