$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa File: d459f45e-a006-338c-9b08-b1327ea9704d.roa (raw, json) Hash identifier: kKWZq8UC5tzX12Tj5qKRt1aZWHyNNCkIMEmePobW6I0= Subject key identifier: 21:E3:44:65:4B:01:AC:BB:F8:91:8D:6A:79:5E:B8:10:7F:74:EF:5D Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584529528F44F912A70A283B6C20 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 22773 IP address blocks: 104.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8f:44:f9:12:a7:0a:28:3b:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=02683b32-ab19-4f5d-a150-94a4e5fef112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:db:ba:01:5a:da:43:e7:59:ca:6a:1b:5e: 4b:e9:91:a3:f1:a6:62:6a:b4:ed:b2:bd:d6:3a:21: f3:46:f6:ad:e0:ee:21:52:34:b7:0d:cb:6a:9f:75: f9:07:a3:de:56:dc:22:47:8e:6a:ed:69:d5:37:ef: 68:86:bb:b1:eb:0a:b1:9e:3f:65:8d:e2:62:a6:4b: ac:58:6d:3b:31:f3:4d:39:41:ac:4c:a9:24:64:5a: 5c:83:d0:67:18:2e:61:f2:de:96:25:a3:cc:dc:1f: a6:e2:f7:b9:04:b6:df:3d:65:2b:e1:98:9c:46:d3: af:46:49:1d:f8:11:3d:88:4a:40:7d:3f:dc:2a:00: 7b:61:47:ca:11:9f:68:84:0a:9b:18:51:05:61:81: b1:bc:bf:99:59:07:02:63:95:54:e2:be:6e:72:73: 55:24:9f:ef:97:ae:27:b1:ca:88:b4:1a:c8:29:21: bb:2d:df:d0:84:ce:d6:e5:ff:a0:ac:cc:38:32:f0: 27:1c:08:f0:60:02:1c:04:10:77:57:df:37:9a:03: f8:b6:e1:1d:18:cf:84:51:02:3e:be:6d:19:5d:0d: 25:23:45:78:a9:aa:bb:ec:87:dd:4a:f8:fc:ab:2b: 8c:73:f8:15:a3:69:3a:f1:7a:3a:76:0e:8c:ab:e5: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E3:44:65:4B:01:AC:BB:F8:91:8D:6A:79:5E:B8:10:7F:74:EF:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/d459f45e-a006-338c-9b08-b1327ea9704d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e5:4b:d8:36:17:b1:1f:d6:5e:0b:ab:32:fe:44:9c:6c:fe: e5:80:ef:72:1d:03:c6:40:71:89:a8:33:3b:b1:52:b3:3d:c6: dd:4a:2f:ad:bd:40:ca:45:e8:be:d0:14:05:69:11:1c:bc:58: a1:e9:1c:d3:de:dd:be:f8:20:67:e8:62:ca:01:8a:cd:82:f8: 5b:d6:f1:59:54:90:e4:1b:b1:e4:ac:d8:d2:cf:c9:8c:b3:33: 9d:d3:5b:3f:65:25:a1:d0:52:eb:ca:91:bc:a5:3a:cb:47:00: bd:e4:69:b4:8c:c7:fb:d5:61:bc:ee:a3:78:f5:00:bf:86:29: 77:0b:f0:88:c4:02:44:9d:94:d9:d6:05:b7:ea:e6:af:ec:03: 47:e0:80:fe:49:a3:b8:af:70:67:d2:91:a9:f4:6b:41:d1:19: 8b:02:da:86:07:d0:4b:0a:df:02:99:06:e6:a6:ca:b4:5e:7d: 64:10:54:d3:76:59:b3:00:03:78:3b:19:7a:aa:69:fc:f1:36: 65:75:88:f1:05:e7:03:fa:ab:3f:05:f5:7c:96:b1:80:38:9e: 4f:69:b8:10:18:31:b3:5b:7e:dd:74:d9:0a:4e:66:fb:00:4c: 0a:b0:be:3b:a0:37:f1:be:d3:01:72:ef:28:01:79:09:bd:61: f6:6c:df:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUpUo9E+RKnCig7bCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk MDI2ODNiMzItYWIxOS00ZjVkLWExNTAtOTRhNGU1ZmVmMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUrbugFa2kPnWcpqG15L6ZGj8aZiarTtsr3W OiHzRvat4O4hUjS3Dctqn3X5B6PeVtwiR45q7WnVN+9ohrux6wqxnj9ljeJipkus WG07MfNNOUGsTKkkZFpcg9BnGC5h8t6WJaPM3B+m4ve5BLbfPWUr4ZicRtOvRkkd +BE9iEpAfT/cKgB7YUfKEZ9ohAqbGFEFYYGxvL+ZWQcCY5VU4r5ucnNVJJ/vl64n scqItBrIKSG7Ld/QhM7W5f+grMw4MvAnHAjwYAIcBBB3V983mgP4tuEdGM+EUQI+ vm0ZXQ0lI0V4qaq77IfdSvj8qyuMc/gVo2k68Xo6dg6Mq+WALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHjRGVLAay7+JGNanleuBB/dO9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvZDQ1OWY0NWUtYTAwNi0z MzhjLTliMDgtYjEzMjdlYTk3MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFflS9g2F7Ef1l4LqzL+RJxs/uWA73IdA8ZAcYmoMzuxUrM9xt1KL629 QMpF6L7QFAVpERy8WKHpHNPe3b74IGfoYsoBis2C+FvW8VlUkOQbseSs2NLPyYyz M53TWz9lJaHQUuvKkbylOstHAL3kabSMx/vVYbzuo3j1AL+GKXcL8IjEAkSdlNnW Bbfq5q/sA0fggP5Jo7ivcGfSkan0a0HRGYsC2oYH0EsK3wKZBuamyrRefWQQVNN2 WbMAA3g7GXqqafzxNmV1iPEF5wP6qz8F9XyWsYA4nk9puBAYMbNbft102QpOZvsA TAqwvjugN/G+0wFy7ygBeQm9YfZs30M= -----END CERTIFICATE-----Generated at Sun May 5 01:44:04 2024 by rpki-client on console-fra.rpki-client.org