$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa File: 5225e9df-ff27-341c-bb4c-a55d2b37245e.roa (raw, json) Hash identifier: ryA2umvCEZoy86SctBbf5aDXfLpuG2QnlAGfiERePlM= Subject key identifier: 88:1E:B8:46:1A:8A:D6:C7:A0:60:14:01:44:5C:87:77:81:E7:5D:66 Certificate issuer: /CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Certificate serial: 010D0C9F432858474B1B53846861F64EF528CA00 Authority key identifier: 98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa Signing time: Sun 22 Sep 2024 01:00:32 +0000 ROA not before: Sun 22 Sep 2024 01:00:32 +0000 ROA not after: Sat 21 Dec 2024 02:00:32 +0000 asID: 19257 IP address blocks: 104.255.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:1b:53:84:68:61:f6:4e:f5:28:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b7e801-0cb9-4602-b697-f6df0c2beb40 Validity Not Before: Sep 22 01:00:32 2024 GMT Not After : Dec 21 02:00:32 2024 GMT Subject: CN=b1af1afc-8f05-42c8-b8db-76db8ad4d6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:6d:8c:a4:c0:b5:76:4c:4c:d4:7d:53:ee: 1e:0b:78:d1:17:ad:49:c9:7b:09:e0:f3:d6:e8:b0: 4c:03:17:e6:81:fa:f8:5e:1a:b1:bb:87:66:f8:32: 15:89:4b:4d:dd:65:f1:ce:71:67:be:25:2c:08:16: f3:59:d8:86:c6:4a:d2:e3:8f:52:33:a6:c2:ef:73: 86:6e:9d:00:3b:24:5f:97:f8:35:41:b8:71:22:6e: 53:0c:26:e2:6f:3a:be:db:7b:f2:c1:0c:d1:8b:7b: 6a:f8:70:59:b2:e2:d6:bc:ad:1e:65:0b:eb:fd:a0: c8:2d:98:2c:32:16:50:e7:7a:c3:32:22:c1:c6:40: 1f:42:68:ba:0e:4a:80:de:9b:11:60:6c:09:e1:3e: ab:c1:b3:f3:83:86:c5:57:e1:d8:f6:01:e6:8a:57: e5:16:49:25:fe:91:ad:4b:cf:dd:46:5f:d1:c0:6b: bd:e9:8d:ba:bd:f7:8a:7a:a1:94:f6:50:07:2f:82: 3e:7b:a5:9b:68:a5:61:1d:4d:16:3f:96:68:1e:d6: c5:83:c3:ed:e2:53:0d:30:b1:71:ab:83:d7:91:22: 95:48:77:a0:8e:20:47:2a:b5:ab:ac:60:6c:0b:8c: 11:13:e3:50:9c:2e:64:4f:cf:c6:04:8f:7e:be:df: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:B8:46:1A:8A:D6:C7:A0:60:14:01:44:5C:87:77:81:E7:5D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/5225e9df-ff27-341c-bb4c-a55d2b37245e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40/a1b7e801-0cb9-4602-b697-f6df0c2beb40.crl X509v3 Authority Key Identifier: keyid:98:6A:28:EE:B7:EC:65:16:13:49:EA:17:75:6F:A5:D3:07:5C:3B:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1b7e801-0cb9-4602-b697-f6df0c2beb40.cer sbgp-ipAddrBlock: critical IPv4: 104.255.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d7:6a:e8:ce:b1:ee:da:8b:38:e5:79:ae:ee:f8:7b:96:d6: 0b:b3:75:1d:f8:4b:26:ef:0f:ae:0b:d6:47:66:19:ec:01:17: 23:4d:b8:d2:97:1a:77:c7:c5:c4:eb:b4:4d:45:6f:5e:11:9c: 98:d1:0c:52:f0:5e:bd:b1:54:9f:62:71:9b:75:3c:7d:3a:cc: 04:59:ff:97:da:5b:32:1e:d8:68:1e:38:4e:49:f0:72:6d:3a: da:f7:3e:6a:23:09:11:33:a7:38:11:a1:09:8c:b8:f9:d4:5d: 8a:bb:8f:47:2b:75:16:2d:e3:f8:82:e1:2c:4d:07:83:9f:3d: 5d:ac:66:53:f1:b9:de:b5:8a:33:1d:1b:df:b0:2f:09:56:0b: 88:be:5c:52:4a:3c:e7:93:09:7c:6b:8f:c8:e3:b0:b6:83:c4: b1:8b:6a:b3:2f:b1:cf:ad:8d:49:ad:05:a2:3a:d0:b5:b4:6f: bd:09:48:4d:b0:21:92:9f:c0:8b:93:dc:f8:d0:17:bd:1e:51: 05:a4:aa:ba:1d:3e:d1:21:52:69:41:fb:61:4f:c4:f5:69:15: 04:8b:c7:ce:db:d3:5c:b0:0d:1d:dc:87:5c:0e:fb:5c:d8:b7: 6d:e1:df:1b:28:77:18:6e:cb:73:00:a4:d8:bd:8f:fc:d9:54: 08:53:ab:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdLG1OEaGH2TvUoygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiN2U4MDEtMGNiOS00NjAyLWI2OTctZjZkZjBjMmJl YjQwMB4XDTI0MDkyMjAxMDAzMloXDTI0MTIyMTAyMDAzMlowLzEtMCsGA1UEAxMk YjFhZjFhZmMtOGYwNS00MmM4LWI4ZGItNzZkYjhhZDRkNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk9tjKTAtXZMTNR9U+4eC3jRF61JyXsJ4PPW 6LBMAxfmgfr4Xhqxu4dm+DIViUtN3WXxznFnviUsCBbzWdiGxkrS449SM6bC73OG bp0AOyRfl/g1QbhxIm5TDCbibzq+23vywQzRi3tq+HBZsuLWvK0eZQvr/aDILZgs MhZQ53rDMiLBxkAfQmi6DkqA3psRYGwJ4T6rwbPzg4bFV+HY9gHmilflFkkl/pGt S8/dRl/RwGu96Y26vfeKeqGU9lAHL4I+e6WbaKVhHU0WP5ZoHtbFg8Pt4lMNMLFx q4PXkSKVSHegjiBHKrWrrGBsC4wRE+NQnC5kT8/GBI9+vt/+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgeuEYaitbHoGAUAURch3eB511mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3 ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRmMGMyYmViNDAvNTIyNWU5ZGYtZmYyNy0z NDFjLWJiNGMtYTU1ZDJiMzcyNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFiN2U4MDEtMGNiOS00NjAyLWI2 OTctZjZkZjBjMmJlYjQwL2ExYjdlODAxLTBjYjktNDYwMi1iNjk3LWY2ZGYwYzJi ZWI0MC5jcmwwHwYDVR0jBBgwFoAUmGoo7rfsZRYTSeoXdW+l0wdcOzYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWI3ZTgwMS0wY2I5LTQ2MDItYjY5Ny1mNmRm MGMyYmViNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjXaujOse7aizjlea7u+HuW1guzdR34SybvD64L1kdmGewBFyNNuNKX GnfHxcTrtE1Fb14RnJjRDFLwXr2xVJ9icZt1PH06zARZ/5faWzIe2GgeOE5J8HJt Otr3PmojCREzpzgRoQmMuPnUXYq7j0crdRYt4/iC4SxNB4OfPV2sZlPxud61ijMd G9+wLwlWC4i+XFJKPOeTCXxrj8jjsLaDxLGLarMvsc+tjUmtBaI60LW0b70JSE2w IZKfwIuT3PjQF70eUQWkqrodPtEhUmlB+2FPxPVpFQSLx87b01ywDR3ch1wO+1zY t23h3xsodxhuy3MApNi9j/zZVAhTq7U= -----END CERTIFICATE-----Generated at Fri Nov 22 22:22:22 2024 by rpki-client on console-ams.rpki-client.org