$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f655aa7-a203-3fd5-9081-416fc0611de5.roa File: 0f655aa7-a203-3fd5-9081-416fc0611de5.roa (raw, json) Hash identifier: NloE29lzH5lYlnmnHKFSaUrZ3XcNxHT/NDycMk2+NKA= Subject key identifier: 4D:66:93:40:D1:2A:65:F8:7B:EE:FB:56:72:7F:2A:89:A1:43:0F:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584776611AFE1594538E5BD42A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f655aa7-a203-3fd5-9081-416fc0611de5.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.88.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:1a:fe:15:94:53:8e:5b:d4:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=01b1193b-c59c-4409-94e2-05815b215013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:18:bd:14:92:37:24:ca:2f:d3:cc:d7:c7: d8:33:9c:58:bb:a4:9e:35:46:90:c7:d8:bc:08:da: 4e:12:df:19:4b:b7:b4:04:57:3e:b4:5f:95:cc:de: 44:8c:9e:ac:43:8c:ae:4f:07:4d:17:e2:2a:42:73: b5:4f:ca:5c:db:d7:2a:5f:76:55:9b:7c:b0:56:6d: a8:a2:af:08:6e:f8:ed:f6:dd:bf:3a:78:3e:a6:69: e8:13:3a:dc:53:2c:52:da:41:fe:74:aa:46:76:9a: dc:aa:6d:a2:72:d7:a3:66:0d:30:4c:7b:0b:02:86: ef:8a:d6:49:ce:b3:af:a3:32:d8:19:60:a2:66:41: ca:65:35:73:0a:56:e2:27:fd:91:ea:ef:29:3a:6a: 85:03:98:f3:1b:4a:69:8f:25:f3:c4:ea:db:a9:ba: 5a:28:bd:12:bf:3a:e2:f9:dc:96:4e:1e:67:b8:12: e0:d2:cb:49:cb:80:19:17:fa:47:2c:70:49:18:bc: 8a:27:16:3e:8b:a8:2c:b5:93:d2:a8:ca:ce:11:dd: 08:ef:73:01:c7:d1:d7:7a:d1:74:f4:ba:9f:59:87: a4:32:69:39:67:c5:c4:e5:97:0e:52:1a:d4:a3:27: 6f:64:23:bc:ff:51:67:0e:0c:d3:6c:b6:eb:0b:a9: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:66:93:40:D1:2A:65:F8:7B:EE:FB:56:72:7F:2A:89:A1:43:0F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f655aa7-a203-3fd5-9081-416fc0611de5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.88.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b1:c0:82:4e:81:4c:c2:57:6c:bf:c1:62:fa:17:3f:17:c9: 64:d4:bd:e2:81:dd:fe:a4:8b:ec:55:09:c6:0e:b1:46:82:72: 30:a8:4a:86:f9:61:73:80:6d:c2:0a:4d:0a:d9:39:a4:92:88: f2:6b:eb:5c:02:35:21:2c:01:e2:17:fa:13:be:d5:35:d0:16: cd:f6:d1:1e:ce:c0:46:97:ec:5f:12:af:8d:8b:e7:45:76:33: 3e:a1:3f:cd:73:63:47:20:de:c6:9f:9e:c0:ec:8e:56:51:fe: 86:8c:95:2a:53:33:f1:10:92:39:5e:2e:bf:96:c0:e5:3d:47: d9:06:1c:c8:a3:5f:0f:42:57:a5:64:4e:95:e3:8e:49:77:24: b3:35:90:6b:a9:fc:57:f5:5b:f9:22:58:b9:0b:29:87:2e:7e: 20:f6:74:70:f5:c6:47:cc:3e:89:84:4f:a5:e7:53:24:4b:eb: 3d:41:5d:52:33:b3:83:e8:a4:21:21:6b:10:bf:d4:0d:ce:1f: d3:0a:a7:54:94:48:2a:47:5f:4e:3d:90:42:8e:5c:08:5a:86: 9a:38:a4:f3:c7:8f:fd:12:1f:be:ba:78:4b:d9:3f:b0:68:97: e4:34:f2:58:d2:c5:ff:61:a7:f6:23:5f:f7:6b:40:33:04:01: ff:26:cf:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRr+FZRTjlvUKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MDFiMTE5M2ItYzU5Yy00NDA5LTk0ZTItMDU4MTViMjE1MDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uQYvRSSNyTKL9PM18fYM5xYu6SeNUaQx9i8 CNpOEt8ZS7e0BFc+tF+VzN5EjJ6sQ4yuTwdNF+IqQnO1T8pc29cqX3ZVm3ywVm2o oq8Ibvjt9t2/Ong+pmnoEzrcUyxS2kH+dKpGdprcqm2ictejZg0wTHsLAobvitZJ zrOvozLYGWCiZkHKZTVzClbiJ/2R6u8pOmqFA5jzG0ppjyXzxOrbqbpaKL0Svzri +dyWTh5nuBLg0stJy4AZF/pHLHBJGLyKJxY+i6gstZPSqMrOEd0I73MBx9HXetF0 9LqfWYekMmk5Z8XE5ZcOUhrUoydvZCO8/1FnDgzTbLbrC6la/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1mk0DRKmX4e+77VnJ/KomhQw9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY2NTVhYTctYTIwMy0z ZmQ1LTkwODEtNDE2ZmMwNjExZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFhHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuxwIJOgUzCV2y/wWL6Fz8XyWTUveKB3f6ki+xVCcYOsUaCcjCoSob5 YXOAbcIKTQrZOaSSiPJr61wCNSEsAeIX+hO+1TXQFs320R7OwEaX7F8Sr42L50V2 Mz6hP81zY0cg3safnsDsjlZR/oaMlSpTM/EQkjleLr+WwOU9R9kGHMijXw9CV6Vk TpXjjkl3JLM1kGup/Ff1W/kiWLkLKYcufiD2dHD1xkfMPomET6XnUyRL6z1BXVIz s4PopCEhaxC/1A3OH9MKp1SUSCpHX049kEKOXAhahpo4pPPHj/0SH766eEvZP7Bo l+Q08ljSxf9hp/YjX/drQDMEAf8mz3I= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:58 2024 by rpki-client on console-ams.rpki-client.org