$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa File: 3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa (raw, json) Hash identifier: BVNHmFf0fUPXDq78t1cL4GXpDob7STUL6LZn7Pun6Lw= Subject key identifier: A9:33:B8:A8:61:88:54:97:B4:9D:CC:8D:2C:93:CE:FB:2F:B5:48:03 Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Certificate serial: 010D0C9F432858479EDBCF9456C91CA285267680 Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa Signing time: Tue 22 Oct 2024 01:00:31 +0000 ROA not before: Tue 22 Oct 2024 01:00:31 +0000 ROA not after: Mon 20 Jan 2025 02:00:31 +0000 asID: 13438 IP address blocks: 104.232.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:db:cf:94:56:c9:1c:a2:85:26:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Validity Not Before: Oct 22 01:00:31 2024 GMT Not After : Jan 20 02:00:31 2025 GMT Subject: CN=ade8dd91-e79e-410e-826a-dc3d77c7a6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:92:61:39:24:2f:87:c4:8d:71:0a:34:9e: ef:b0:f6:1f:07:94:61:d5:39:34:66:bc:7a:f6:ef: 26:87:2e:12:a2:e1:0c:40:e6:f7:2b:bf:5f:fd:2a: 48:89:82:be:48:05:d3:32:51:fb:42:62:9f:32:8c: cd:05:75:2f:fb:68:93:be:c8:9f:79:04:c6:a0:a1: 97:aa:7d:9d:49:74:eb:1b:4f:d7:85:91:7b:d3:e3: 93:1a:27:bb:b8:82:09:7d:26:00:30:32:44:b9:63: 1a:f2:5a:ca:72:bf:30:5a:16:1c:68:b3:33:ce:ca: 77:b3:4d:36:a5:c7:01:02:29:3e:a3:a1:00:78:c0: f0:22:21:01:8c:db:3c:73:92:53:07:3a:27:e5:5d: 0d:ad:9c:5b:e5:ee:65:4b:2e:1b:f2:09:44:5d:d8: 38:a7:cb:78:02:91:93:7b:bb:b1:e3:6e:76:64:ca: 18:2b:32:e4:e1:ec:1c:cf:c7:b6:40:07:d0:e2:22: af:42:5f:a8:f5:95:76:79:a9:4b:4b:45:56:3e:fa: 9d:52:73:e8:78:94:0d:88:54:c3:a5:5a:33:5a:7f: 73:a0:a1:2b:b7:a8:ac:5c:53:ce:8d:f5:91:43:6b: 4d:8d:ee:00:eb:d8:f7:34:46:65:a0:6b:73:56:d4: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:B8:A8:61:88:54:97:B4:9D:CC:8D:2C:93:CE:FB:2F:B5:48:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl X509v3 Authority Key Identifier: keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer sbgp-ipAddrBlock: critical IPv4: 104.232.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e1:f9:89:7d:1e:82:3c:f6:75:0e:7f:8d:81:a1:ea:19:52: 9a:8b:4b:21:f8:d7:63:b1:4e:c2:af:30:a4:68:75:6b:60:d6: e4:10:78:e9:46:9d:0f:8e:26:4b:43:80:82:a5:39:36:8c:ce: 10:63:3b:8d:85:9a:03:cc:25:d6:b4:ba:94:07:29:cf:99:1b: 0f:98:29:0b:1c:70:27:db:8b:10:1a:32:bc:68:b3:80:48:f9: 00:1f:f9:b4:f2:35:96:a5:3e:e7:c9:b8:c5:f7:46:1e:7f:e5: ca:c2:20:42:e5:af:b7:e0:6b:12:dd:5b:fd:44:79:fa:16:d8: d5:50:b6:83:84:e8:33:9b:3c:61:b0:3a:5c:1f:e4:1e:50:52: 2d:47:a7:ad:f3:59:b1:09:57:cf:27:09:c1:07:e4:b1:29:41: c0:18:a7:c7:e8:ab:55:e3:4e:dc:d2:db:5a:68:ba:6d:00:9d: 4e:51:1e:e1:bb:72:05:de:fd:f4:fa:8b:2a:2b:b6:f2:1a:50: cf:1d:bb:71:44:73:5e:e0:5c:9a:aa:fb:62:98:b9:41:b6:89: fa:a7:5b:be:ee:02:68:f5:a7:8f:fc:a3:bb:fb:dd:56:49:a1: 45:e9:d0:97:bc:6b:23:ca:b9:9a:04:08:41:d8:36:c1:66:3f: ff:92:2d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEee28+UVskcooUmdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdj ODM5MB4XDTI0MTAyMjAxMDAzMVoXDTI1MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWRlOGRkOTEtZTc5ZS00MTBlLTgyNmEtZGMzZDc3YzdhNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEOSYTkkL4fEjXEKNJ7vsPYfB5Rh1Tk0Zrx6 9u8mhy4SouEMQOb3K79f/SpIiYK+SAXTMlH7QmKfMozNBXUv+2iTvsifeQTGoKGX qn2dSXTrG0/XhZF70+OTGie7uIIJfSYAMDJEuWMa8lrKcr8wWhYcaLMzzsp3s002 pccBAik+o6EAeMDwIiEBjNs8c5JTBzon5V0NrZxb5e5lSy4b8glEXdg4p8t4ApGT e7ux4252ZMoYKzLk4ewcz8e2QAfQ4iKvQl+o9ZV2ealLS0VWPvqdUnPoeJQNiFTD pVozWn9zoKErt6isXFPOjfWRQ2tNje4A69j3NEZloGtzVtQMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkzuKhhiFSXtJ3MjSyTzvsvtUgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jM2Nk NDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvM2UyZmJkNTAtNzIxMi0z MWI1LWI5NDQtYmU5ZWY3YzUyYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzNjZDQ2MjUtNjAzNC00YjNiLTlk OGItNTQxN2NhOTdjODM5L2MzY2Q0NjI1LTYwMzQtNGIzYi05ZDhiLTU0MTdjYTk3 YzgzOS5jcmwwHwYDVR0jBBgwFoAUluTtbp4/i42uv7q7CCGjw5vRbtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3 Y2E5N2M4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfh+Yl9HoI89nUOf42BoeoZUpqLSyH412OxTsKvMKRodWtg1uQQeOlG nQ+OJktDgIKlOTaMzhBjO42FmgPMJda0upQHKc+ZGw+YKQsccCfbixAaMrxos4BI +QAf+bTyNZalPufJuMX3Rh5/5crCIELlr7fgaxLdW/1EefoW2NVQtoOE6DObPGGw Olwf5B5QUi1Hp63zWbEJV88nCcEH5LEpQcAYp8foq1XjTtzS21poum0AnU5RHuG7 cgXe/fT6iyortvIaUM8du3FEc17gXJqq+2KYuUG2ifqnW77uAmj1p4/8o7v73VZJ oUXp0Je8ayPKuZoECEHYNsFmP/+SLX4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:11 2024 by rpki-client on console-ams.rpki-client.org