$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: wVi2O0Twz0OB+fcJjZ1bMGrvgh0dKwRy3D8sOlBT3+E= Subject key identifier: C5:51:1F:4C:99:91:05:AD:73:BD:F8:48:B9:DA:77:21:37:45:85:3C Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285845254040014D0528B85FD76480 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Sat 09 Mar 2024 02:00:25 +0000 ROA not before: Sat 09 Mar 2024 02:00:25 +0000 ROA not after: Fri 07 Jun 2024 01:00:25 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:25:40:40:01:4d:05:28:b8:5f:d7:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Mar 9 02:00:25 2024 GMT Not After : Jun 7 01:00:25 2024 GMT Subject: CN=0522e745-86fc-47d2-bd10-0e6d62078af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:66:a4:68:3b:31:37:5e:41:c3:39:c1:29: 65:c0:29:9d:1e:5a:d0:17:14:e5:ed:aa:22:cf:3d: fd:a3:b1:1f:b4:41:8e:89:b0:b1:bb:bd:24:68:66: 40:bf:f7:1a:6c:88:59:d5:5b:71:c0:fa:cd:69:2f: af:c9:1e:dc:8d:70:92:a2:e2:3c:d1:fb:d6:1e:d1: 4d:1a:dd:4d:0f:f9:bc:69:4a:85:af:1c:46:84:70: 1b:ae:fa:52:0e:7d:74:48:88:28:fe:c6:62:5e:6a: 5c:4f:80:be:3d:cb:48:55:27:c0:1e:0b:df:60:b5: ad:3d:91:40:47:0e:d8:17:47:00:69:40:d2:04:0c: 40:07:3d:82:55:f5:0d:d2:18:f6:4f:ac:65:90:27: d0:b3:8a:d6:e6:00:51:ad:72:45:14:58:32:9e:b3: 1c:e4:96:42:2e:0c:87:67:25:f9:cd:ef:15:6c:96: da:a0:7b:8a:f2:20:89:f4:0b:be:41:e8:8f:d9:f2: d1:b1:a5:e4:fa:3b:64:a6:38:e0:1c:9b:d8:e9:05: 31:c9:0d:04:1e:21:21:ab:52:af:ff:63:63:28:a3: 8e:b5:42:b4:57:c7:7f:39:b2:02:83:80:96:8c:6b: 1a:35:5e:5c:c0:1e:32:6b:97:13:7c:73:c6:5a:a8: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:51:1F:4C:99:91:05:AD:73:BD:F8:48:B9:DA:77:21:37:45:85:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:26:e7:47:06:ac:41:64:c9:f9:3e:02:cd:e4:61:47:57:e8: d7:e0:02:44:14:54:a6:d2:bf:b9:b8:71:b5:dc:8a:75:ae:76: 53:b9:ec:b9:df:2a:e0:71:cb:5f:63:ac:ba:61:0b:44:76:23: 5a:ea:2b:3a:9d:26:3e:52:8d:be:71:b4:5c:a9:ca:32:15:7c: b8:a0:4a:b9:2e:74:0c:91:1c:06:11:f3:9f:9a:68:3c:b0:21: 2b:11:10:6e:e4:3a:58:d4:f2:f8:59:ec:5f:a3:cc:94:69:a6: 5c:54:16:af:8e:8e:6b:1c:88:05:c0:ef:ed:4f:1c:62:a6:81: f6:bb:06:92:53:dc:95:1e:75:87:9c:47:6b:7b:f8:5a:63:78: be:4d:57:67:7a:31:58:e7:77:6f:45:31:8b:dd:c6:ca:9a:d2: 51:92:ba:81:a0:b7:d1:bf:f6:ed:3f:c0:d3:01:2b:31:d9:0b: d0:ed:87:d9:8b:da:a3:50:80:8a:78:9f:7e:17:bc:92:09:59: 07:b0:c0:24:d3:c3:ef:81:b7:42:46:32:ad:3a:33:86:78:dd: 5a:1f:04:41:85:50:ed:e5:bb:a0:0c:9b:e4:25:7a:ed:38:c4: 7c:59:3e:02:ef:d1:09:8e:a6:9e:50:ca:3a:dd:54:f7:a4:db: 92:a9:0d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUlQEABTQUouF/XZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI0MDMwOTAyMDAyNVoXDTI0MDYwNzAxMDAyNVowLzEtMCsGA1UEAxMk MDUyMmU3NDUtODZmYy00N2QyLWJkMTAtMGU2ZDYyMDc4YWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0lmpGg7MTdeQcM5wSllwCmdHlrQFxTl7aoi zz39o7EftEGOibCxu70kaGZAv/cabIhZ1VtxwPrNaS+vyR7cjXCSouI80fvWHtFN Gt1ND/m8aUqFrxxGhHAbrvpSDn10SIgo/sZiXmpcT4C+PctIVSfAHgvfYLWtPZFA Rw7YF0cAaUDSBAxABz2CVfUN0hj2T6xlkCfQs4rW5gBRrXJFFFgynrMc5JZCLgyH ZyX5ze8VbJbaoHuK8iCJ9Au+QeiP2fLRsaXk+jtkpjjgHJvY6QUxyQ0EHiEhq1Kv /2NjKKOOtUK0V8d/ObICg4CWjGsaNV5cwB4ya5cTfHPGWqhRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVRH0yZkQWtc734SLnadyE3RYU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4m50cGrEFkyfk+As3kYUdX6NfgAkQUVKbSv7m4cbXcinWudlO57Lnf KuBxy19jrLphC0R2I1rqKzqdJj5Sjb5xtFypyjIVfLigSrkudAyRHAYR85+aaDyw ISsREG7kOljU8vhZ7F+jzJRpplxUFq+OjmsciAXA7+1PHGKmgfa7BpJT3JUedYec R2t7+FpjeL5NV2d6MVjnd29FMYvdxsqa0lGSuoGgt9G/9u0/wNMBKzHZC9Dth9mL 2qNQgIp4n34XvJIJWQewwCTTw++Bt0JGMq06M4Z43VofBEGFUO3lu6AMm+Qleu04 xHxZPgLv0QmOpp5QyjrdVPek25KpDcM= -----END CERTIFICATE-----Generated at Sat May 4 15:05:47 2024 by rpki-client on console-fra.rpki-client.org