$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa File: 295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json) Hash identifier: eAlsp0w09/vEAzc6n1HRuGR6lghn/E/K6KsCtslSTpU= Subject key identifier: 10:AC:44:36:27:A3:83:8B:91:AF:32:69:88:EF:9C:43:A4:14:50:7E Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F43285847C8D9E60BF5CCB714411272E0 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 40342 IP address blocks: 104.200.216.0/24 maxlen: 24 104.200.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e6:0b:f5:cc:b7:14:41:12:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=a580e38d-30f5-4549-af86-bf77e095eb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:08:2b:d4:29:60:dd:3b:ac:aa:5d:e5:96:3e: 38:95:83:74:1e:41:fe:2f:cc:df:59:aa:16:8f:b1: 62:72:6c:28:8f:70:91:09:1d:73:24:c7:f1:08:e3: 5f:39:5c:e0:7d:08:71:ad:94:17:9f:a5:80:da:1b: 83:a0:e3:96:7c:12:3b:46:5d:fe:8f:fd:e1:a4:94: ad:9f:1e:09:57:22:dd:6e:17:94:3b:9e:bd:02:f7: bd:a8:6c:0f:db:2e:37:e5:f3:81:79:a2:e1:62:53: 75:95:16:f9:a5:39:97:16:94:0f:b8:c2:52:58:13: 0f:72:a3:9a:85:60:04:47:fc:0e:62:66:46:b2:19: 0d:70:9d:a4:98:bb:d2:5b:5b:79:9c:f5:08:9b:04: 9f:2e:0a:b3:d1:c0:74:62:f9:8e:b5:48:f8:38:c6: ab:0a:8a:63:61:89:d0:4d:c8:19:9b:61:5c:3c:83: ce:c6:c1:2d:3e:49:fa:15:ce:f5:41:b8:b2:22:d9: 5f:58:eb:d8:83:62:4a:71:6e:ee:d3:14:3e:95:c2: 27:5a:78:d5:a1:41:85:b6:38:49:40:01:13:0e:0c: 41:24:92:c0:55:51:0e:41:42:ca:0e:05:cf:f6:71: 11:ae:d0:f7:2c:75:af:39:69:2f:73:80:f3:79:3f: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:44:36:27:A3:83:8B:91:AF:32:69:88:EF:9C:43:A4:14:50:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/24 104.200.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:37:41:28:49:c4:81:08:a7:71:c2:fc:3d:5c:21:a5:86:bc: dd:43:79:3f:53:1a:fa:db:13:3e:13:91:3a:ae:28:fb:dd:06: af:8d:f3:d0:49:9c:9f:63:c4:b8:c8:af:51:30:43:42:25:44: 99:4b:56:4c:e0:85:32:b2:32:b5:7e:6b:56:aa:af:29:f9:3b: 85:93:b0:ac:a8:eb:98:d9:52:0d:59:50:c3:10:c5:7d:14:07: ff:49:bc:cd:ce:7f:1d:07:84:8b:65:31:f4:a3:73:c0:3f:85: f8:bb:50:ee:4d:64:bd:86:a6:ce:bf:0c:b1:46:67:97:d6:e7: 92:75:5a:30:07:89:b7:e6:6c:8c:1a:c3:19:79:b9:a0:df:35: a3:5c:4a:76:6d:da:16:4f:b7:96:83:bb:e5:6e:58:3f:99:53: b9:1d:93:29:f1:90:9a:9b:4d:8a:e4:73:a5:b3:7c:39:dd:6e: 1f:0e:c8:11:2d:9f:df:85:94:24:66:ca:fd:6f:38:55:ab:83: 03:c9:f6:01:87:e3:8d:b8:46:cb:b8:47:3d:83:e7:22:ff:9f: ac:3f:82:fd:65:36:95:72:b0:55:1c:4a:9b:c0:d2:2f:e8:c1: 53:c1:00:93:fd:5d:32:fe:f9:4e:b2:82:43:54:ac:29:9e:34: 86:81:e2:07 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfI2eYL9cy3FEEScuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk YTU4MGUzOGQtMzBmNS00NTQ5LWFmODYtYmY3N2UwOTVlYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Agr1Clg3Tusql3llj44lYN0HkH+L8zfWaoW j7Ficmwoj3CRCR1zJMfxCONfOVzgfQhxrZQXn6WA2huDoOOWfBI7Rl3+j/3hpJSt nx4JVyLdbheUO569Ave9qGwP2y435fOBeaLhYlN1lRb5pTmXFpQPuMJSWBMPcqOa hWAER/wOYmZGshkNcJ2kmLvSW1t5nPUImwSfLgqz0cB0YvmOtUj4OMarCopjYYnQ TcgZm2FcPIPOxsEtPkn6Fc71QbiyItlfWOvYg2JKcW7u0xQ+lcInWnjVoUGFtjhJ QAETDgxBJJLAVVEOQULKDgXP9nERrtD3LHWvOWkvc4DzeT+k+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBCsRDYno4OLka8yaYjvnEOkFFB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvMjk1ZTY0OTUtNDc5Mi0z Nzk3LWEyYmYtNTE0NjFjOTBlOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMjYAwQC aMjcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADA3QShJxIEIp3HC/D1cIaWGvN1DeT9TGvrbEz4TkTquKPvd Bq+N89BJnJ9jxLjIr1EwQ0IlRJlLVkzghTKyMrV+a1aqryn5O4WTsKyo65jZUg1Z UMMQxX0UB/9JvM3Ofx0HhItlMfSjc8A/hfi7UO5NZL2Gps6/DLFGZ5fW55J1WjAH ibfmbIwawxl5uaDfNaNcSnZt2hZPt5aDu+VuWD+ZU7kdkynxkJqbTYrkc6WzfDnd bh8OyBEtn9+FlCRmyv1vOFWrgwPJ9gGH4424Rsu4Rz2D5yL/n6w/gv1lNpVysFUc SpvA0i/owVPBAJP9XTL++U6ygkNUrCmeNIaB4gc= -----END CERTIFICATE-----Generated at Mon Nov 25 20:18:36 2024 by rpki-client on console-fra.rpki-client.org