$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa File: d0a39b3b-d235-3903-8484-31fed3ad5af7.roa (raw, json) Hash identifier: xrAHfhE33Hbcjbs+7Y+C03zKkmNEn8v1VcbP+Bnx8q8= Subject key identifier: 94:96:08:00:0A:E4:D9:01:54:A2:5A:55:A9:3D:7E:AB:92:C9:AE:78 Certificate issuer: /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82 Certificate serial: 010D0C9F432858475A763863B46AD4520E970540 Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 400544 IP address blocks: 104.156.129.0/24 maxlen: 24 104.156.130.0/24 maxlen: 24 104.156.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:38:63:b4:6a:d4:52:0e:97:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=fd3dfe6f-e744-434e-b52c-5c9fac4c85bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:b4:5a:a3:a3:b5:fd:fe:f4:c8:c4:e3:5e: 46:e6:4a:f3:1d:e3:db:77:65:62:f9:f2:a1:7c:7c: b6:fc:ea:8f:24:a0:03:27:fc:35:51:15:b5:27:83: ef:57:69:05:2c:42:b5:7c:b7:20:c1:0d:12:bc:4e: 1b:a0:6b:30:d6:2a:d5:81:32:de:83:f9:0d:47:2b: 85:70:f7:47:37:45:1e:d8:19:5c:65:68:3c:00:3e: 7a:35:18:af:54:cc:e1:ea:d9:eb:11:4f:05:b8:f2: e8:3b:2d:c4:4c:a3:c8:12:03:7a:9e:bb:b8:d5:b9: e6:94:7c:65:47:8f:7d:45:51:d1:e8:e0:6f:84:73: eb:4d:72:3e:f9:cd:ca:bc:59:5b:0d:30:0b:7c:78: 62:b7:32:10:23:ce:c2:8a:3c:bd:18:bd:30:d1:d4: 9a:17:50:18:8d:2f:49:a0:7b:24:f3:2d:e1:72:f7: b7:38:97:76:95:54:eb:5a:cf:ef:7a:02:2a:91:bb: e3:66:57:20:02:41:9e:57:76:dd:d9:eb:e9:b3:01: e1:72:a7:91:22:c4:a0:26:c6:fe:9c:83:36:ca:ea: f0:cc:0e:0b:4f:38:0c:a9:7a:69:dc:51:bc:cc:b2: 30:6f:07:ea:70:b3:5e:49:06:19:f7:d3:a4:38:96: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:96:08:00:0A:E4:D9:01:54:A2:5A:55:A9:3D:7E:AB:92:C9:AE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d0a39b3b-d235-3903-8484-31fed3ad5af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl X509v3 Authority Key Identifier: keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer sbgp-ipAddrBlock: critical IPv4: 104.156.129.0-104.156.131.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5a:20:dd:29:91:0c:74:63:e8:45:fd:56:80:5d:0d:cc:2a: 82:c5:4a:2e:cc:84:e4:6d:17:49:1a:a2:64:83:c3:7d:8f:8e: 6b:e0:51:9b:32:b4:71:e1:01:ca:9a:98:eb:d5:8b:c2:4c:0f: cf:7f:e9:03:76:0b:2c:be:12:78:bd:f1:30:c1:86:ff:01:db: 21:d2:59:fd:97:c1:f4:ff:ca:50:af:02:d9:d3:40:66:ed:b2: 9e:fe:37:66:64:15:e4:c8:70:99:b3:37:59:dd:28:52:cc:e9: dd:e7:62:2d:12:1f:66:61:f6:31:a5:38:77:42:35:7c:b9:18: 49:7c:cf:b6:e4:e9:6e:7c:e0:9d:0d:b3:5f:94:5a:6c:60:47: 38:85:c6:35:ce:57:7e:6d:81:35:9e:3c:e2:ef:8a:9e:27:cd: bd:6e:4d:1a:b5:16:e1:e9:ca:74:5e:e3:96:05:c8:e7:40:e0: f8:e6:c6:1b:7d:9c:3a:e9:a1:a0:aa:2b:08:42:0a:2d:93:97: 7a:71:2e:b0:92:ac:5f:4a:75:92:70:04:3a:74:5b:c6:1c:a1: c7:5b:31:14:f7:be:87:45:d3:91:6b:43:7e:6c:a7:16:ce:c8: 73:d9:77:48:33:16:87:2a:d7:a9:d2:4a:07:29:7f:a2:06:23: 1c:74:46:10 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEdadjhjtGrUUg6XBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjgxYmFjZDgtZjdkOS00N2Q3LWFhMjQtNTM5MTA0OWY5 YzgyMB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZmQzZGZlNmYtZTc0NC00MzRlLWI1MmMtNWM5ZmFjNGM4NWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou20WqOjtf3+9MjE415G5krzHePbd2Vi+fKh fHy2/OqPJKADJ/w1URW1J4PvV2kFLEK1fLcgwQ0SvE4boGsw1irVgTLeg/kNRyuF cPdHN0Ue2BlcZWg8AD56NRivVMzh6tnrEU8FuPLoOy3ETKPIEgN6nru41bnmlHxl R499RVHR6OBvhHPrTXI++c3KvFlbDTALfHhitzIQI87Cijy9GL0w0dSaF1AYjS9J oHsk8y3hcve3OJd2lVTrWs/vegIqkbvjZlcgAkGeV3bd2evpswHhcqeRIsSgJsb+ nIM2yurwzA4LTzgMqXpp3FG8zLIwbwfqcLNeSQYZ99OkOJbzbQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJSWCAAK5NkBVKJaVak9fquSya54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFi YWNkOC1mN2Q5LTQ3ZDctYWEyNC01MzkxMDQ5ZjljODIvZDBhMzliM2ItZDIzNS0z OTAzLTg0ODQtMzFmZWQzYWQ1YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjgxYmFjZDgtZjdkOS00N2Q3LWFh MjQtNTM5MTA0OWY5YzgyL2Y4MWJhY2Q4LWY3ZDktNDdkNy1hYTI0LTUzOTEwNDlm OWM4Mi5jcmwwHwYDVR0jBBgwFoAU7P3I67I287uW2sRk65LZqan3Ez0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mODFiYWNkOC1mN2Q5LTQ3ZDctYWEyNC01Mzkx MDQ5ZjljODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABonIED BAJonIAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAM1og3SmRDHRj6EX9VoBdDcwqgsVKLsyE5G0XSRqiZIPD fY+Oa+BRmzK0ceEBypqY69WLwkwPz3/pA3YLLL4SeL3xMMGG/wHbIdJZ/ZfB9P/K UK8C2dNAZu2ynv43ZmQV5MhwmbM3Wd0oUszp3ediLRIfZmH2MaU4d0I1fLkYSXzP tuTpbnzgnQ2zX5RabGBHOIXGNc5Xfm2BNZ484u+KnifNvW5NGrUW4enKdF7jlgXI 50Dg+ObGG32cOumhoKorCEIKLZOXenEusJKsX0p1knAEOnRbxhyhx1sxFPe+h0XT kWtDfmynFs7Ic9l3SDMWhyrXqdJKByl/ogYjHHRGEA== -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org