$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa File: 407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json) Hash identifier: Eee7/c+4hfgq41DVgYOnX/cSlcUzo12CWJCnQIDrEBU= Subject key identifier: 52:C3:F3:BA:2A:99:79:5C:67:A1:BB:A0:29:4F:54:B0:6F:99:34:98 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285847E78F628CEBD39438CD11AA00 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 16433 IP address blocks: 104.243.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:62:8c:eb:d3:94:38:cd:11:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=466c15d0-960f-4b85-a812-2e66c8667446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:f2:cd:b0:8d:17:b4:af:08:4d:8b:b4:4a: af:cf:82:47:22:f4:bb:b8:ff:40:13:8e:f3:8c:b7: 01:af:dd:e1:de:e3:e3:90:44:db:f3:c3:25:45:51: f2:f6:ea:61:ac:fc:6f:c6:09:47:b1:d8:d3:29:90: e4:1e:2d:a6:c8:78:52:2c:3f:89:33:50:c6:b2:3c: 71:c4:ef:65:25:fd:fa:31:e9:4f:67:d0:82:8c:a1: 40:f7:64:a8:e6:0b:e9:a6:f0:52:1b:fe:65:73:25: e5:09:b2:47:a7:36:61:17:0e:89:c4:a4:4e:d7:05: 1c:5b:78:13:f6:3a:ee:e5:f9:ea:be:57:31:79:dd: 95:6f:de:a2:f1:a8:ea:0d:6c:30:50:46:20:cd:82: 85:26:3c:0e:0f:d2:2f:bd:0c:f8:63:ee:16:6d:b4: 80:d5:b5:4f:8e:e7:5d:cf:7d:c8:6a:5a:55:76:07: fc:a7:e2:c5:28:39:13:71:82:2e:86:65:06:64:3d: e5:d4:99:d4:34:12:92:cc:ab:36:07:02:61:db:47: 1b:39:8d:23:f1:0a:09:eb:71:9b:98:e4:c9:96:8e: e9:fa:ce:e5:27:d6:40:1d:2e:4e:a9:93:75:8c:05: 0f:b3:f1:99:ea:ab:13:34:a7:a5:c9:f6:99:68:88: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:F3:BA:2A:99:79:5C:67:A1:BB:A0:29:4F:54:B0:6F:99:34:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 104.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e4:c2:b5:51:1a:20:77:63:3b:67:ab:6c:6b:89:a9:b0:91: 60:40:63:67:a3:06:12:89:09:42:7a:a0:c3:ff:04:0a:10:f6: f4:5c:77:c1:b7:43:9f:81:07:8c:a0:37:08:b7:a6:94:a7:4e: a6:89:91:7b:3f:e4:0b:6b:85:bd:23:93:f4:16:78:bd:61:7b: 19:70:92:47:fa:83:11:b2:fd:33:7e:ef:4a:3e:ee:f4:8b:c1: b2:e6:4c:08:1e:53:64:59:e2:1c:e7:b0:fb:22:23:17:f9:ea: f4:ba:a7:d1:80:e4:51:e1:c5:83:7b:5a:13:f3:ac:90:c1:ba: 70:8c:4a:40:8c:5e:c1:65:cd:7d:84:f6:05:61:0a:fb:b3:ac: 70:9b:ba:14:d6:76:54:18:c6:c7:4e:be:43:b5:78:8b:86:41: 11:74:8f:07:b6:bc:f1:9e:06:61:02:66:4c:db:de:04:28:c2: ca:28:08:30:16:4b:72:48:02:c4:87:1f:62:fe:04:9d:ab:90: cf:23:18:53:5a:60:8b:4e:0a:7b:4b:23:35:fb:dd:f5:d3:a2: 69:a1:f8:94:26:93:75:c5:03:3b:f7:55:f6:0b:17:46:0e:29: e0:46:72:ce:9c:fc:d5:ef:df:89:73:7a:e4:85:b3:d0:c9:d0: 96:09:cd:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj2KM69OUOM0RqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk NDY2YzE1ZDAtOTYwZi00Yjg1LWE4MTItMmU2NmM4NjY3NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAfyzbCNF7SvCE2LtEqvz4JHIvS7uP9AE47z jLcBr93h3uPjkETb88MlRVHy9uphrPxvxglHsdjTKZDkHi2myHhSLD+JM1DGsjxx xO9lJf36MelPZ9CCjKFA92So5gvppvBSG/5lcyXlCbJHpzZhFw6JxKRO1wUcW3gT 9jru5fnqvlcxed2Vb96i8ajqDWwwUEYgzYKFJjwOD9IvvQz4Y+4WbbSA1bVPjudd z33IalpVdgf8p+LFKDkTcYIuhmUGZD3l1JnUNBKSzKs2BwJh20cbOY0j8QoJ63Gb mOTJlo7p+s7lJ9ZAHS5OqZN1jAUPs/GZ6qsTNKelyfaZaIjcqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLD87oqmXlcZ6G7oClPVLBvmTSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNDA3ZWZhMGEtYzhlNS0z NTQ4LWEyMGQtZTk3MmRjNzNmYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzkwrVRGiB3Yztnq2xriamwkWBAY2ejBhKJCUJ6oMP/BAoQ9vRcd8G3 Q5+BB4ygNwi3ppSnTqaJkXs/5Atrhb0jk/QWeL1hexlwkkf6gxGy/TN+70o+7vSL wbLmTAgeU2RZ4hznsPsiIxf56vS6p9GA5FHhxYN7WhPzrJDBunCMSkCMXsFlzX2E 9gVhCvuzrHCbuhTWdlQYxsdOvkO1eIuGQRF0jwe2vPGeBmECZkzb3gQowsooCDAW S3JIAsSHH2L+BJ2rkM8jGFNaYItOCntLIzX73fXTommh+JQmk3XFAzv3VfYLF0YO KeBGcs6c/NXv34lzeuSFs9DJ0JYJzWs= -----END CERTIFICATE-----Generated at Sat Nov 23 20:22:48 2024 by rpki-client on console-ams.rpki-client.org