$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa File: 0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa (raw, json) Hash identifier: blnXV6UIMSuLAlQDiRQUjB14w41OIoDULAAfGqqIPD0= Subject key identifier: 7C:33:A5:0D:01:42:6F:AC:D1:EB:46:22:4B:EF:90:C1:86:88:A4:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477396708CA600D1FE5A56BB10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 104.68.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:70:8c:a6:00:d1:fe:5a:56:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=a7a35dfc-c87e-437f-aadf-7c9279216d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:0f:25:ce:b9:1f:19:16:b9:b3:e8:9b:24: 9c:d9:64:2e:db:c5:97:b2:ce:1c:76:92:02:d8:27: 81:88:88:c6:d5:dd:30:1e:54:e0:d5:03:e8:52:3f: 7f:5a:ee:e1:c5:be:bd:21:e1:4c:87:5f:b9:d5:e8: 54:4a:a1:ab:77:89:de:47:c8:97:48:ff:2c:91:95: 21:ce:2f:89:d4:34:5f:fb:87:4c:76:a5:74:81:08: 69:5c:90:4f:e7:1e:77:65:05:08:36:91:1f:b8:78: ba:2f:4c:81:79:fa:a4:ec:a0:ad:d6:84:41:f7:bd: c4:0e:07:6d:4c:84:99:e6:11:7a:a9:ea:b6:67:b4: c8:4e:74:ea:6b:8d:5f:72:5d:19:3c:fe:ea:b1:31: 44:cb:f6:a9:48:2f:31:5e:8f:4f:e9:e4:8b:e3:3d: 2a:8f:39:98:2f:1f:7f:7c:e5:c4:4d:93:91:a6:b2: 38:c6:48:07:2a:c7:72:cf:21:a5:36:6a:3c:74:8c: de:ae:37:f6:af:89:69:2c:5c:1e:8d:ba:8e:b0:f2: d0:14:d7:f7:39:18:37:19:e7:8e:0b:a4:e7:74:d8: dc:65:c0:ba:94:ef:5b:d0:93:56:cb:4e:02:b6:e2: a8:78:68:ab:2d:1a:d2:c6:c2:9d:0e:18:08:7c:de: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:33:A5:0D:01:42:6F:AC:D1:EB:46:22:4B:EF:90:C1:86:88:A4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.68.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:73:56:7f:d4:83:97:8d:bb:76:3a:75:51:69:9a:d2:8d:9b: 77:e7:24:54:95:37:61:96:89:28:03:00:14:ed:e8:85:a6:a6: cb:2a:b8:cb:0c:a6:a2:19:1c:f1:35:87:94:3d:38:ff:ed:20: b8:17:5b:1b:a0:93:e1:fe:10:d2:e3:23:85:e4:49:9f:9a:e7: 6b:08:12:12:bc:fd:28:3c:5e:6e:30:5a:3b:de:d5:63:d6:7e: 35:c5:2a:0c:44:c1:b7:4d:9f:76:e1:80:c7:bb:1f:ca:9e:fb: ec:5c:a6:2b:1f:12:ce:77:fa:d0:b3:19:02:4c:b7:0c:8d:0e: 83:35:81:da:4c:3c:cf:9d:96:85:6e:c7:c3:13:06:5d:2f:fd: fc:f3:cc:98:6a:d2:3f:31:1b:82:64:fc:03:9c:2c:1a:d6:77: a6:e5:d9:21:f0:a9:0d:63:7f:b6:a9:f0:50:f8:3e:b2:9a:9a: b7:2a:0a:f9:97:30:aa:e2:c6:ff:a8:e6:95:98:9c:3b:e1:b8: 06:0c:41:f7:92:40:8f:21:c7:ed:82:f8:b4:19:8a:be:e9:8f: 3f:00:b5:32:ba:90:f4:a7:9d:ce:33:d7:eb:1d:9f:17:cd:cb: cc:5f:ff:16:07:4a:01:96:fb:f7:b0:60:86:1e:f6:aa:61:46: cd:64:a5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlnCMpgDR/lpWuxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTdhMzVkZmMtYzg3ZS00MzdmLWFhZGYtN2M5Mjc5MjE2ZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz0PJc65HxkWubPomySc2WQu28WXss4cdpIC 2CeBiIjG1d0wHlTg1QPoUj9/Wu7hxb69IeFMh1+51ehUSqGrd4neR8iXSP8skZUh zi+J1DRf+4dMdqV0gQhpXJBP5x53ZQUINpEfuHi6L0yBefqk7KCt1oRB973EDgdt TISZ5hF6qeq2Z7TITnTqa41fcl0ZPP7qsTFEy/apSC8xXo9P6eSL4z0qjzmYLx9/ fOXETZORprI4xkgHKsdyzyGlNmo8dIzerjf2r4lpLFwejbqOsPLQFNf3ORg3GeeO C6TndNjcZcC6lO9b0JNWy04CtuKoeGirLRrSxsKdDhgIfN68kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwzpQ0BQm+s0etGIkvvkMGGiKSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU5NWZjOGQtMmE4ZC0z ZTMwLTg0MDktMjg4MWUzOTg0OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdzVn/Ug5eNu3Y6dVFpmtKNm3fnJFSVN2GWiSgDABTt6IWmpssquMsM pqIZHPE1h5Q9OP/tILgXWxugk+H+ENLjI4XkSZ+a52sIEhK8/Sg8Xm4wWjve1WPW fjXFKgxEwbdNn3bhgMe7H8qe++xcpisfEs53+tCzGQJMtwyNDoM1gdpMPM+dloVu x8MTBl0v/fzzzJhq0j8xG4Jk/AOcLBrWd6bl2SHwqQ1jf7ap8FD4PrKamrcqCvmX MKrixv+o5pWYnDvhuAYMQfeSQI8hx+2C+LQZir7pjz8AtTK6kPSnnc4z1+sdnxfN y8xf/xYHSgGW+/ewYIYe9qphRs1kpZI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:31:33 2024 by rpki-client on console-ams.rpki-client.org