$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa File: aaf31aab-4b95-35a5-8785-33e89424e316.roa (raw, json) Hash identifier: Fg+EgjTAAghsE5tJf+K1/FZB3rXjazqVE3GEGqFV4Gg= Subject key identifier: 3A:27:90:1E:B6:6A:3C:35:1C:B1:83:C6:4A:E8:4F:DB:B0:2B:4C:BD Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584793B137C17528BBE90E87E280 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa Signing time: Fri 18 Oct 2024 01:00:31 +0000 ROA not before: Fri 18 Oct 2024 01:00:31 +0000 ROA not after: Thu 16 Jan 2025 02:00:31 +0000 asID: 54113 IP address blocks: 104.156.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:b1:37:c1:75:28:bb:e9:0e:87:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Oct 18 01:00:31 2024 GMT Not After : Jan 16 02:00:31 2025 GMT Subject: CN=488a546c-370c-4954-a197-69f3e40c9725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:19:c8:a8:f3:f4:4f:ee:ae:02:41:4e:d0: 31:bb:42:17:1f:bf:30:00:b9:1b:1f:1a:19:35:ff: 6c:c7:f9:e5:09:26:14:e5:80:91:d8:57:34:84:12: de:50:7c:eb:a1:4e:b3:3a:9d:68:36:5d:cf:47:16: 82:73:ca:1b:a3:64:3b:ad:e0:ad:6a:4b:91:5f:15: 01:e4:72:0c:b5:d4:9a:96:af:cc:7e:9d:51:fb:11: 63:2d:77:ab:44:26:77:1d:89:f7:5e:5d:0d:e3:95: 0f:f3:e4:f9:4b:54:76:31:29:3c:b5:8d:97:8c:fc: 70:76:83:8d:6f:c2:8c:0b:59:62:29:08:a2:21:9a: 16:60:67:66:b3:86:48:9e:0f:55:c4:bf:29:3b:28: bf:9c:a6:be:78:b4:fd:31:43:ed:a3:a1:fe:69:40: 89:54:04:67:4f:ff:39:83:8c:16:44:bf:eb:15:28: 24:9b:00:38:ee:87:a6:64:ec:2a:54:e0:b9:52:14: 4b:ed:27:3a:55:27:6c:68:3a:bd:58:c3:f0:41:e9: 06:97:14:52:a8:c4:ac:fc:6b:aa:b4:b8:05:cc:e1: 2b:4f:0a:35:f5:f8:5b:a0:bb:11:53:e5:ff:11:fe: 1f:5c:bf:8c:e6:92:d8:06:5d:45:82:6a:71:e8:8c: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:90:1E:B6:6A:3C:35:1C:B1:83:C6:4A:E8:4F:DB:B0:2B:4C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aaf31aab-4b95-35a5-8785-33e89424e316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1b:93:4d:e0:aa:0c:07:32:5b:4c:e2:44:d1:c4:69:0d:31: 0d:2b:ec:e6:3a:21:af:c4:19:7f:cb:f0:a1:e2:37:a2:06:a3: 22:a1:55:60:00:d2:c9:e7:28:86:aa:d6:c8:7f:a5:da:81:35: cd:09:4b:64:dd:ce:91:53:2b:41:2c:b9:e5:ad:6d:8a:05:8a: cb:31:32:af:49:7d:d3:02:d1:8d:02:c7:b6:57:0c:e7:fd:75: 37:84:3e:2b:46:c8:3d:d4:e2:0d:86:cc:e7:b3:52:2d:c5:df: 71:cd:4f:50:b0:fd:6c:d9:08:a5:63:d1:e2:c0:0a:74:77:63: d6:6d:e7:aa:21:02:5f:2c:64:95:2e:4e:bd:2b:c6:d7:51:d2: 64:c6:27:3b:ff:99:c0:cb:f6:17:b1:82:ef:62:1a:94:61:8f: 1a:49:53:ec:7b:02:62:7a:69:a2:91:74:40:83:60:38:20:5e: 5b:9c:56:92:2f:52:42:90:90:4f:d6:5b:a3:8b:50:37:b4:63: 12:5b:4a:61:1b:12:8a:54:e8:25:ea:9f:cc:d6:3c:d0:74:d8: 61:25:8a:3c:c0:45:30:37:99:0f:0b:82:31:31:2f:25:4b:4f: 83:d6:75:1c:e0:85:87:e6:7b:74:81:09:b4:99:c1:70:24:ca: 98:2f:13:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeTsTfBdSi76Q6H4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk NDg4YTU0NmMtMzcwYy00OTU0LWExOTctNjlmM2U0MGM5NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbcZyKjz9E/urgJBTtAxu0IXH78wALkbHxoZ Nf9sx/nlCSYU5YCR2Fc0hBLeUHzroU6zOp1oNl3PRxaCc8obo2Q7reCtakuRXxUB 5HIMtdSalq/Mfp1R+xFjLXerRCZ3HYn3Xl0N45UP8+T5S1R2MSk8tY2XjPxwdoON b8KMC1liKQiiIZoWYGdms4ZIng9VxL8pOyi/nKa+eLT9MUPto6H+aUCJVARnT/85 g4wWRL/rFSgkmwA47oemZOwqVOC5UhRL7Sc6VSdsaDq9WMPwQekGlxRSqMSs/Guq tLgFzOErTwo19fhboLsRU+X/Ef4fXL+M5pLYBl1Fgmpx6IyAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDonkB62ajw1HLGDxkroT9uwK0y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWFmMzFhYWItNGI5NS0z NWE1LTg3ODUtMzNlODk0MjRlMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4bk03gqgwHMltM4kTRxGkNMQ0r7OY6Ia/EGX/L8KHiN6IGoyKhVWAA 0snnKIaq1sh/pdqBNc0JS2TdzpFTK0EsueWtbYoFissxMq9JfdMC0Y0Cx7ZXDOf9 dTeEPitGyD3U4g2GzOezUi3F33HNT1Cw/WzZCKVj0eLACnR3Y9Zt56ohAl8sZJUu Tr0rxtdR0mTGJzv/mcDL9hexgu9iGpRhjxpJU+x7AmJ6aaKRdECDYDggXlucVpIv UkKQkE/WW6OLUDe0YxJbSmEbEopU6CXqn8zWPNB02GElijzARTA3mQ8LgjExLyVL T4PWdRzghYfme3SBCbSZwXAkypgvE80= -----END CERTIFICATE-----Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org