$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa File: 169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa (raw, json) Hash identifier: Bo1cX6iLCmykC99UuQdNE7K8RvOq0yswBuzBhMepl3I= Subject key identifier: F0:C5:B6:F3:7C:FE:2F:E4:07:08:E8:D8:7F:2C:62:1C:84:5C:01:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847766113555275ACD7827BAFC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.97.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:13:55:52:75:ac:d7:82:7b:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=4520d6d8-846e-4dd8-a60b-eba1139d6fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:4a:95:3b:25:87:8d:a2:09:3f:d7:7f:91: f6:c2:c9:4f:2a:94:80:2f:c1:b3:4d:93:a2:35:b0: 0b:6e:a7:4d:36:fd:6a:52:47:f3:2d:f0:c6:82:32: d1:b8:55:80:7f:a1:55:e6:0e:2b:75:14:e1:0d:79: e2:cd:0e:5d:2a:4f:6e:56:62:c0:32:50:9d:aa:78: ff:fc:4d:b9:74:d7:65:26:94:4e:58:6a:dc:15:f9: 64:7b:d5:80:f9:7c:89:ee:0b:32:52:a6:cb:3a:e9: 8a:2e:40:d1:c0:c7:63:99:90:f8:8f:22:05:00:01: 5f:20:ee:6a:80:e3:b5:61:ab:05:52:3d:f9:02:0b: 8b:0f:cd:c4:26:45:87:b0:3d:76:90:8b:cf:8f:b6: 40:c1:8c:39:6e:37:44:6e:43:95:03:62:6e:3f:63: 47:38:4f:fd:4c:90:be:cc:36:37:f5:3a:6a:95:42: b6:a1:b4:7d:50:7d:68:82:b6:8e:bb:56:04:58:7d: 89:3e:b1:37:fc:52:0d:5a:16:b1:c0:aa:dc:16:35: 50:7e:6d:cf:0b:4a:6b:02:c8:12:e0:44:e5:39:dd: ce:91:ca:ae:fd:d9:39:d9:5a:cf:08:2f:35:27:b2: a7:4c:d1:72:0b:48:0c:90:56:b6:6f:ea:a6:d1:15: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:B6:F3:7C:FE:2F:E4:07:08:E8:D8:7F:2C:62:1C:84:5C:01:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:42:14:3a:9b:c5:60:20:b9:06:73:d0:f8:4e:b8:4e:04:cf: 24:d4:4f:04:1e:b7:68:c4:e2:d9:08:a7:5f:15:0a:83:a4:5b: db:46:14:fe:db:f2:4c:e9:bf:e9:5b:75:c0:b5:39:ff:d2:da: a5:00:02:09:20:91:f9:34:61:11:73:4c:63:29:e2:25:4d:1b: 13:fa:ff:14:c9:4f:63:f8:91:85:41:5a:85:51:2a:2c:7f:e7: fb:a3:c4:48:0a:56:e9:a8:34:75:31:67:39:38:48:de:f5:6b: 63:f5:25:e2:28:d0:81:f7:c3:d3:6b:e0:6e:88:51:e3:ed:7c: 90:23:f3:58:c9:0b:2e:4f:25:a8:ae:72:e5:37:96:ec:71:1f: 5c:4b:3b:d6:f7:dc:a9:72:1f:c8:41:a8:d7:98:49:8b:af:a8: 14:3d:3a:47:6d:0b:23:45:50:8b:7a:48:10:a4:35:5c:c6:90: f9:8b:2a:10:37:36:49:58:9a:de:76:71:71:d4:a9:37:d9:49: a1:f0:38:95:53:0f:b5:27:04:6f:db:4b:8e:2f:d5:57:3d:cd: 4a:17:e9:8d:84:f9:d4:0b:2c:61:42:a5:e2:9b:c0:f0:86:ae: 2b:32:28:c0:57:64:d6:2f:11:d2:60:cb:f7:ac:3b:9e:10:46: e6:fe:33:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRNVUnWs14J7r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NDUyMGQ2ZDgtODQ2ZS00ZGQ4LWE2MGItZWJhMTEzOWQ2ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsxKlTslh42iCT/Xf5H2wslPKpSAL8GzTZOi NbALbqdNNv1qUkfzLfDGgjLRuFWAf6FV5g4rdRThDXnizQ5dKk9uVmLAMlCdqnj/ /E25dNdlJpROWGrcFflke9WA+XyJ7gsyUqbLOumKLkDRwMdjmZD4jyIFAAFfIO5q gOO1YasFUj35AguLD83EJkWHsD12kIvPj7ZAwYw5bjdEbkOVA2JuP2NHOE/9TJC+ zDY39TpqlUK2obR9UH1ograOu1YEWH2JPrE3/FINWhaxwKrcFjVQfm3PC0prAsgS 4ETlOd3Okcqu/dk52VrPCC81J7KnTNFyC0gMkFa2b+qm0RV3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDFtvN8/i/kBwjo2H8sYhyEXAEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY5ZTY4ZmQtZTllNC0z YTczLWJhYWQtYWZiMGVmYTRiNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFCFDqbxWAguQZz0PhOuE4EzyTUTwQet2jE4tkIp18VCoOkW9tGFP7b 8kzpv+lbdcC1Of/S2qUAAgkgkfk0YRFzTGMp4iVNGxP6/xTJT2P4kYVBWoVRKix/ 5/ujxEgKVumoNHUxZzk4SN71a2P1JeIo0IH3w9Nr4G6IUePtfJAj81jJCy5PJaiu cuU3luxxH1xLO9b33KlyH8hBqNeYSYuvqBQ9OkdtCyNFUIt6SBCkNVzGkPmLKhA3 NklYmt52cXHUqTfZSaHwOJVTD7UnBG/bS44v1Vc9zUoX6Y2E+dQLLGFCpeKbwPCG risyKMBXZNYvEdJgy/esO54QRub+M6s= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:21 2024 by rpki-client on console-fra.rpki-client.org