$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b32c8f13-c1e6-35da-930e-40c9baa9f5f3.roa File: b32c8f13-c1e6-35da-930e-40c9baa9f5f3.roa (raw, json) Hash identifier: oMQNG5F/u6jzDuTDyTF/AzZduqZ2eJJogi3jyvoLbz8= Subject key identifier: E0:36:12:21:DB:E0:CA:FD:04:E7:67:A7:D2:D2:B4:F3:9E:7B:20:4F Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584784567F7CF802014516F96780 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b32c8f13-c1e6-35da-930e-40c9baa9f5f3.roa Signing time: Sat 12 Oct 2024 13:00:42 +0000 ROA not before: Sat 12 Oct 2024 13:00:42 +0000 ROA not after: Fri 10 Jan 2025 14:00:42 +0000 asID: 26548 IP address blocks: 104.218.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:84:56:7f:7c:f8:02:01:45:16:f9:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Oct 12 13:00:42 2024 GMT Not After : Jan 10 14:00:42 2025 GMT Subject: CN=ac3dc3a0-0058-4598-b5fa-7a6ff1450722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:d1:79:af:ea:8d:ef:65:32:15:c1:0e:6d: ed:21:8f:35:dc:34:50:7a:b9:b1:29:41:42:75:3e: 19:b4:d4:56:c3:6b:ba:aa:f9:cc:ce:86:f3:6a:ca: 23:42:c1:4f:16:da:f9:d1:0e:7d:25:0f:51:56:75: 43:e4:7f:59:8c:20:a9:f9:bf:6d:2d:d3:fb:11:03: aa:ca:21:b2:30:4b:fb:30:26:a4:8d:02:ab:12:46: 17:72:d9:34:d1:48:14:83:30:01:56:49:63:90:76: e6:f3:10:54:dc:a3:97:15:76:b9:41:da:53:dc:2a: c0:0e:7b:3b:15:c4:f1:6e:ff:1b:16:cd:d1:a0:ef: a6:4b:23:c1:22:8b:fb:ea:93:d7:b7:26:9a:b3:68: 79:cb:0c:bf:3a:60:46:35:32:f7:75:3f:8d:fd:82: 30:b1:ab:55:e9:cc:05:7a:c6:04:f9:c9:32:f4:00: ec:c1:b7:7a:8e:b1:ac:09:09:8c:39:07:06:80:92: 3e:d9:e0:cc:85:89:01:31:ee:ee:7a:4f:c0:46:b1: c7:66:d5:9b:6a:a4:ec:ac:9a:2e:5d:9a:d8:bf:98: 2a:04:bb:a0:71:a1:84:13:d0:0e:94:f4:b3:be:6e: a6:6b:18:ff:15:fe:b1:eb:d4:be:e9:60:8f:36:f6: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:36:12:21:DB:E0:CA:FD:04:E7:67:A7:D2:D2:B4:F3:9E:7B:20:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b32c8f13-c1e6-35da-930e-40c9baa9f5f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 104.218.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:11:c5:94:84:e8:71:17:03:6d:54:54:bc:83:3a:9a:7c:d3: 65:33:34:69:2b:0a:57:3e:6e:8d:58:d8:ae:64:f6:5c:c9:f4: 6f:33:18:f9:bb:6f:8a:14:73:41:86:c0:38:ba:f5:51:eb:f6: aa:38:59:a4:97:0c:a0:fa:00:03:32:9c:a6:59:60:3e:a1:f3: 71:8b:66:de:eb:02:b8:4f:ef:87:fa:52:71:2c:d6:22:3e:3e: ae:ef:d0:a1:a3:8e:4f:81:7c:fd:59:7f:c0:a4:8b:cc:bb:76: 6d:db:04:59:1c:35:ad:77:cf:4c:3c:fd:60:40:a0:9a:ff:f5: 93:5e:d5:57:c0:06:aa:dc:b2:9a:21:42:b1:70:3b:26:80:61: 90:62:d8:ea:a2:bf:92:c9:ff:00:7f:7d:f4:73:21:4d:1b:22: 64:4c:7f:76:ae:8d:46:80:0b:25:5e:ac:ed:af:7f:8e:26:0a: 9f:66:ff:84:dd:4b:d6:75:9f:d0:63:33:49:fe:14:1c:77:48: da:ac:c4:47:de:4f:5a:d9:e6:7f:81:79:c9:dd:91:2e:7b:3f: 37:8c:15:ec:bc:37:73:a5:ab:07:96:42:76:ac:e1:27:70:0c: 97:38:a7:66:52:b1:24:b5:d7:1b:69:c0:7c:1a:57:98:5e:14: 12:a3:0a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVn98+AIBRRb5Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk YWMzZGMzYTAtMDA1OC00NTk4LWI1ZmEtN2E2ZmYxNDUwNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirRea/qje9lMhXBDm3tIY813DRQermxKUFC dT4ZtNRWw2u6qvnMzobzasojQsFPFtr50Q59JQ9RVnVD5H9ZjCCp+b9tLdP7EQOq yiGyMEv7MCakjQKrEkYXctk00UgUgzABVkljkHbm8xBU3KOXFXa5QdpT3CrADns7 FcTxbv8bFs3RoO+mSyPBIov76pPXtyaas2h5ywy/OmBGNTL3dT+N/YIwsatV6cwF esYE+cky9ADswbd6jrGsCQmMOQcGgJI+2eDMhYkBMe7uek/ARrHHZtWbaqTsrJou XZrYv5gqBLugcaGEE9AOlPSzvm6maxj/Ff6x69S+6WCPNvaQtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA2EiHb4Mr9BOdnp9LStPOeeyBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvYjMyYzhmMTMtYzFlNi0z NWRhLTkzMGUtNDBjOWJhYTlmNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4RxZSE6HEXA21UVLyDOpp802UzNGkrClc+bo1Y2K5k9lzJ9G8zGPm7 b4oUc0GGwDi69VHr9qo4WaSXDKD6AAMynKZZYD6h83GLZt7rArhP74f6UnEs1iI+ Pq7v0KGjjk+BfP1Zf8Cki8y7dm3bBFkcNa13z0w8/WBAoJr/9ZNe1VfABqrcspoh QrFwOyaAYZBi2Oqiv5LJ/wB/ffRzIU0bImRMf3aujUaACyVerO2vf44mCp9m/4Td S9Z1n9BjM0n+FBx3SNqsxEfeT1rZ5n+BecndkS57PzeMFey8N3OlqweWQnas4Sdw DJc4p2ZSsSS11xtpwHwaV5heFBKjCpA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:28:19 2024 by rpki-client on console-fra.rpki-client.org