$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1236e3d1-9da7-32c8-ae40-47f0ad8ae48b.roa File: 1236e3d1-9da7-32c8-ae40-47f0ad8ae48b.roa (raw, json) Hash identifier: BBc4+WZ7X2ESlGy55uHQ9IGBE0GF1+WiAdukfOQUm9E= Subject key identifier: B7:88:08:91:D0:88:58:E8:6B:AD:91:71:DB:1C:60:D8:B5:AF:74:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584776611232C485850C4894E800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1236e3d1-9da7-32c8-ae40-47f0ad8ae48b.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 4771 IP address blocks: 104.95.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:12:32:c4:85:85:0c:48:94:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=ace32c05-4895-4505-827d-d95142f164c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:87:ff:dd:fe:d3:1f:3b:f4:9e:33:84:61: 6e:6f:09:90:e7:fb:04:cc:97:50:bc:e5:a1:14:38: 25:8d:6a:65:14:c9:d8:ff:7d:c3:74:f4:ed:88:ae: b7:11:4f:02:48:54:19:8c:cd:5e:a2:24:62:46:89: f8:d7:07:d5:c8:0a:0c:cf:35:af:d6:04:7d:5b:a0: 71:1d:e6:88:27:8a:96:a9:43:bb:a0:df:e3:79:09: 9c:01:3b:8d:2c:8c:b2:c6:ca:1a:92:9e:e5:60:c4: b2:7a:13:cc:92:80:25:09:e5:7f:58:3c:68:5a:3f: 05:f0:32:39:0e:62:b8:2e:2b:b0:05:02:a6:c5:f7: c3:f4:0d:df:01:78:63:59:51:d7:98:0a:33:77:38: eb:de:c8:1d:8f:35:4f:af:5c:79:00:03:77:f8:49: 58:98:d4:47:ff:09:03:fa:63:da:42:61:c2:38:bf: c4:e6:5c:32:7f:c3:bd:59:70:b7:7c:65:5c:68:b9: ff:5f:56:64:14:18:83:b4:12:d8:f7:98:a6:9f:9c: 5b:a8:19:34:ee:2d:52:be:09:42:e2:f7:c3:7f:6a: e7:d2:04:30:ed:a8:bf:f7:1c:c3:c1:17:ce:7d:a2: b9:ea:ef:36:a1:22:06:2c:d1:45:99:0f:78:f3:c9: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:88:08:91:D0:88:58:E8:6B:AD:91:71:DB:1C:60:D8:B5:AF:74:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1236e3d1-9da7-32c8-ae40-47f0ad8ae48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.95.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ca:ae:57:3c:2b:8d:02:fd:e5:da:ff:1b:2d:0f:6f:ce:ed: a2:dc:af:ef:0c:97:e0:c1:2a:88:aa:00:e4:d3:fb:10:e5:e0: 16:b1:48:6c:d1:42:ff:90:d5:54:62:a8:23:ba:5f:1b:c3:76: 77:80:f4:e0:65:2d:a1:54:68:b4:a6:46:1d:40:2b:d3:1e:8a: 6d:7b:ff:70:80:20:64:f3:0b:28:ea:53:44:e1:66:71:bb:d7: 4d:68:05:b3:fa:f5:e5:9b:64:9b:ca:30:2d:48:15:5e:95:f2: d5:19:4c:48:c6:17:ee:7b:a4:89:ae:c3:13:6a:3b:46:5a:ba: 57:f0:cf:2d:13:44:d0:2a:af:c8:58:7b:47:1f:51:26:43:cb: 1a:8f:41:9f:c8:e0:fc:70:93:e0:03:60:6c:f8:ec:0f:dc:a7: 2d:27:1e:98:75:c1:50:74:f1:0e:2c:23:ac:97:7b:18:76:38: 91:0c:38:68:b2:42:9a:14:c2:54:2c:d9:b3:b6:cf:dc:6c:a9: b1:8f:57:13:ab:8e:34:76:70:ee:2b:10:dd:9d:69:31:89:5c: df:c4:41:f8:cf:50:e8:65:23:85:cf:6f:14:17:96:b0:d1:d3: 3b:90:ed:5b:5d:fc:4d:61:f7:2d:35:53:58:b3:be:7a:da:01: 06:dd:3e:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRIyxIWFDEiU6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YWNlMzJjMDUtNDg5NS00NTA1LTgyN2QtZDk1MTQyZjE2NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFGH/93+0x879J4zhGFubwmQ5/sEzJdQvOWh FDgljWplFMnY/33DdPTtiK63EU8CSFQZjM1eoiRiRon41wfVyAoMzzWv1gR9W6Bx HeaIJ4qWqUO7oN/jeQmcATuNLIyyxsoakp7lYMSyehPMkoAlCeV/WDxoWj8F8DI5 DmK4LiuwBQKmxffD9A3fAXhjWVHXmAozdzjr3sgdjzVPr1x5AAN3+ElYmNRH/wkD +mPaQmHCOL/E5lwyf8O9WXC3fGVcaLn/X1ZkFBiDtBLY95imn5xbqBk07i1SvglC 4vfDf2rn0gQw7ai/9xzDwRfOfaK56u82oSIGLNFFmQ9488mudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeICJHQiFjoa62RcdscYNi1r3Q9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIzNmUzZDEtOWRhNy0z MmM4LWFlNDAtNDdmMGFkOGFlNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaF9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvKrlc8K40C/eXa/xstD2/O7aLcr+8Ml+DBKoiqAOTT+xDl4BaxSGzR Qv+Q1VRiqCO6XxvDdneA9OBlLaFUaLSmRh1AK9Meim17/3CAIGTzCyjqU0ThZnG7 101oBbP69eWbZJvKMC1IFV6V8tUZTEjGF+57pImuwxNqO0Zaulfwzy0TRNAqr8hY e0cfUSZDyxqPQZ/I4Pxwk+ADYGz47A/cpy0nHph1wVB08Q4sI6yXexh2OJEMOGiy QpoUwlQs2bO2z9xsqbGPVxOrjjR2cO4rEN2daTGJXN/EQfjPUOhlI4XPbxQXlrDR 0zuQ7Vtd/E1h9y01U1izvnraAQbdPoc= -----END CERTIFICATE-----Generated at Tue Nov 26 00:24:19 2024 by rpki-client on console-ams.rpki-client.org