$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa File: 643b1254-d7f1-376e-9ab7-2d0174638962.roa (raw, json) Hash identifier: FbDtLJUlbi0nyj0we58ICeRpDM+rH+ACtKJOtcIoPzI= Subject key identifier: D4:76:FB:7C:0F:F8:7A:96:F7:2B:3D:2A:99:AF:09:CF:FD:85:2D:09 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F43285847C3448D961029C205C58DB500 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 397423 IP address blocks: 104.245.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:8d:96:10:29:c2:05:c5:8d:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=934c79df-852b-4b61-a44f-475dc8da79ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:63:5a:16:c0:04:e6:59:06:3a:3c:7f:b9: de:f9:04:fb:ed:02:24:43:0e:15:50:74:94:50:47: c7:da:9f:68:de:c1:0e:c7:a1:99:a5:82:2a:0b:be: 4c:85:f7:1b:3c:68:b3:84:56:02:78:94:81:01:9b: 3e:9a:6e:59:0b:e2:2a:cb:33:43:d6:7a:e5:a0:ff: ab:84:59:1d:60:ea:84:bc:85:91:58:19:d4:05:e4: 61:5b:5f:86:71:34:60:7a:10:c9:16:47:fc:5b:93: 5d:38:24:e6:d7:12:b1:79:b3:71:91:eb:13:c6:a3: d0:06:a5:a6:cd:27:92:dc:ad:d3:e8:25:34:2d:6b: 04:10:5c:9b:ff:b0:99:26:79:69:4d:7c:77:24:af: 53:aa:68:2f:14:02:ef:34:99:28:ab:b8:15:65:3b: 09:44:73:be:2d:44:6f:dd:a2:47:43:20:42:6b:e7: 18:e4:29:a2:66:cc:9a:87:88:e3:29:aa:7e:7a:83: 2d:e1:f8:0d:9c:cf:83:d7:e7:ec:06:ac:0a:b0:c2: aa:87:68:4f:c4:51:24:e4:13:da:fe:10:c2:cb:df: 8b:a9:72:33:40:4b:5a:51:ec:36:42:3d:c5:75:27: 32:4e:87:e8:e7:b8:69:d9:a6:df:25:ee:52:3b:bb: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:FB:7C:0F:F8:7A:96:F7:2B:3D:2A:99:AF:09:CF:FD:85:2D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/643b1254-d7f1-376e-9ab7-2d0174638962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 104.245.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f6:de:dc:af:ab:ac:91:9f:68:82:f6:53:46:f3:bf:3e:34: 24:a8:01:99:89:93:a0:d6:a7:37:74:df:7a:a0:48:f9:08:f8: 22:0f:f9:1d:25:a0:8c:10:8e:b6:b3:46:ce:fc:c3:12:c2:b2: 39:c2:44:43:18:e7:51:23:b2:f6:dc:e7:57:a5:75:4f:76:31: 7f:a5:96:c8:ed:b5:38:4c:6f:81:99:df:6a:c5:2a:3c:87:48: ac:cc:0c:1c:62:b5:de:a4:59:90:96:d8:14:b4:1e:1f:5f:36: 0b:9e:40:af:38:b2:0f:3a:de:10:34:d5:f0:67:c0:5b:76:69: e4:d3:bb:57:d7:45:4d:3d:db:d5:d6:87:7d:58:5f:5a:06:19: 76:2d:3d:3d:3a:7f:13:4f:8a:68:8e:ce:b1:50:9c:85:ca:0c: 70:25:d1:ea:7b:7c:d7:36:ae:8c:c9:c3:76:92:45:f2:e2:48: 57:0e:5f:ab:30:b5:03:3f:28:f0:c8:e9:e0:76:19:5b:4a:76: 1c:39:bc:81:f9:a5:e9:89:7c:92:49:e6:0e:9f:a2:93:b5:2d: ec:db:46:d8:e3:94:83:1c:ad:7b:52:90:ce:ac:b4:14:5b:1f: 81:3c:d4:71:9d:10:c9:5f:1c:09:35:19:e8:80:9f:51:ae:e8: d7:7f:46:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRI2WECnCBcWNtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk OTM0Yzc5ZGYtODUyYi00YjYxLWE0NGYtNDc1ZGM4ZGE3OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncJjWhbABOZZBjo8f7ne+QT77QIkQw4VUHSU UEfH2p9o3sEOx6GZpYIqC75MhfcbPGizhFYCeJSBAZs+mm5ZC+IqyzND1nrloP+r hFkdYOqEvIWRWBnUBeRhW1+GcTRgehDJFkf8W5NdOCTm1xKxebNxkesTxqPQBqWm zSeS3K3T6CU0LWsEEFyb/7CZJnlpTXx3JK9TqmgvFALvNJkoq7gVZTsJRHO+LURv 3aJHQyBCa+cY5CmiZsyah4jjKap+eoMt4fgNnM+D1+fsBqwKsMKqh2hPxFEk5BPa /hDCy9+LqXIzQEtaUew2Qj3FdScyTofo57hp2abfJe5SO7snIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR2+3wP+HqW9ys9KpmvCc/9hS0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjQzYjEyNTQtZDdmMS0z NzZlLTlhYjctMmQwMTc0NjM4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb23tyvq6yRn2iC9lNG878+NCSoAZmJk6DWpzd033qgSPkI+CIP+R0l oIwQjrazRs78wxLCsjnCREMY51Ejsvbc51eldU92MX+llsjttThMb4GZ32rFKjyH SKzMDBxitd6kWZCW2BS0Hh9fNgueQK84sg863hA01fBnwFt2aeTTu1fXRU0929XW h31YX1oGGXYtPT06fxNPimiOzrFQnIXKDHAl0ep7fNc2rozJw3aSRfLiSFcOX6sw tQM/KPDI6eB2GVtKdhw5vIH5pemJfJJJ5g6fopO1LezbRtjjlIMcrXtSkM6stBRb H4E81HGdEMlfHAk1GeiAn1Gu6Nd/Rto= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:12 2024 by rpki-client on console-fra.rpki-client.org