$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17faa05f-8cb8-3bcb-9faf-fa5fa231dd6b.roa File: 17faa05f-8cb8-3bcb-9faf-fa5fa231dd6b.roa (raw, json) Hash identifier: PsIeRz+CDNQnwnSnDTmwXc5SYmZhD1yUJxZdb+U3A3U= Subject key identifier: 0C:82:09:E9:1A:14:3F:45:AE:7A:1C:4F:27:50:33:7C:E5:7B:FA:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847792BC3EBF36EB445B30A6080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17faa05f-8cb8-3bcb-9faf-fa5fa231dd6b.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.123.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:c3:eb:f3:6e:b4:45:b3:0a:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=52f81a9a-7f2f-4ec9-8324-4e0f7fcad4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:03:70:4a:94:7c:3a:aa:74:bc:0c:09:44: 9d:f4:df:1f:e6:bb:41:8d:67:87:26:98:6d:b6:3e: fb:cd:35:74:8f:a7:34:0d:28:21:e4:51:83:7f:06: e0:dd:4a:97:bb:51:cc:fc:21:d5:2e:fe:d0:6f:f5: 2e:87:3f:46:99:3e:6c:00:5d:ea:cc:3e:f4:f9:a8: 7b:39:bc:02:fb:9c:bf:0f:ae:64:7d:d4:00:77:66: b6:86:23:6f:2a:28:14:c6:3a:3c:74:5f:ac:bb:8e: f9:60:6f:41:65:37:26:04:fd:1d:59:d1:58:02:b8: e5:b9:a1:0c:20:cb:74:73:b2:3c:01:17:90:05:9e: 27:8b:5d:bb:07:5f:38:48:ae:c1:d1:52:16:98:82: b4:fd:bc:c5:95:51:8d:b5:70:ac:48:9b:0f:93:1e: 81:16:7e:af:82:ff:a0:a1:48:ad:3d:a1:6e:3f:e4: d0:85:89:cf:09:38:46:5a:e0:23:60:a7:08:6b:bf: 2f:c2:50:1d:e7:9c:9b:4f:20:aa:1c:79:5b:95:ea: d1:33:0e:81:f4:8a:ad:99:35:1b:c0:8e:e3:6e:a3: 86:6c:10:89:ac:02:63:af:9f:8c:64:7b:d7:74:b2: c8:ec:ce:35:20:63:f0:05:56:ca:ef:c3:40:1f:af: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:82:09:E9:1A:14:3F:45:AE:7A:1C:4F:27:50:33:7C:E5:7B:FA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17faa05f-8cb8-3bcb-9faf-fa5fa231dd6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:73:f3:f1:c3:3c:bc:1c:14:88:25:a6:be:09:41:b4:a1:c4: 59:8b:dc:02:30:be:4e:52:8c:49:1f:bc:cd:76:34:27:d2:fa: c6:19:66:f6:45:9c:fa:4f:9e:9c:3c:75:46:9b:51:b6:a8:66: e5:4d:b0:c0:89:81:b3:04:59:9d:9f:fc:1b:62:b1:f3:50:bd: af:68:4c:05:6b:c9:30:a8:a0:5f:9b:2e:8e:fa:08:f8:ab:a4: ef:e0:fc:ea:6b:c7:d3:36:14:67:2b:26:b1:df:b8:fa:75:34: d8:6f:0c:52:af:91:f1:8e:e6:7f:bf:fd:5c:66:1c:b8:9b:1b: 05:b4:50:9b:f8:a6:cc:11:43:30:7b:ac:d3:34:a8:fc:58:41: 3d:27:1e:37:92:62:1f:65:d3:d9:fd:83:6a:17:92:75:99:71: b0:c3:80:d9:7d:7a:f3:37:23:46:f5:a8:98:e6:8f:d4:a1:c2: 6e:95:be:11:c9:68:34:08:42:19:95:ea:30:c7:0c:a6:58:71: e6:22:2d:94:5a:85:e6:7a:25:18:0d:7a:4e:be:2f:c2:3a:d9: 43:49:99:1b:55:24:a9:d7:c2:a0:eb:6c:ef:82:15:db:b8:9a: 77:25:54:59:94:2d:1b:05:8a:40:5f:cb:3e:87:13:d7:db:06: b9:6a:3d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K8Pr8260RbMKYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NTJmODFhOWEtN2YyZi00ZWM5LTgzMjQtNGUwZjdmY2FkNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V8DcEqUfDqqdLwMCUSd9N8f5rtBjWeHJpht tj77zTV0j6c0DSgh5FGDfwbg3UqXu1HM/CHVLv7Qb/Uuhz9GmT5sAF3qzD70+ah7 ObwC+5y/D65kfdQAd2a2hiNvKigUxjo8dF+su475YG9BZTcmBP0dWdFYArjluaEM IMt0c7I8AReQBZ4ni127B184SK7B0VIWmIK0/bzFlVGNtXCsSJsPkx6BFn6vgv+g oUitPaFuP+TQhYnPCThGWuAjYKcIa78vwlAd55ybTyCqHHlblerRMw6B9IqtmTUb wI7jbqOGbBCJrAJjr5+MZHvXdLLI7M41IGPwBVbK78NAH69qqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyCCekaFD9FrnocTydQM3zle/oWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdmYWEwNWYtOGNiOC0z YmNiLTlmYWYtZmE1ZmEyMzFkZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaHtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1z8/HDPLwcFIglpr4JQbShxFmL3AIwvk5SjEkfvM12NCfS+sYZZvZF nPpPnpw8dUabUbaoZuVNsMCJgbMEWZ2f/BtisfNQva9oTAVryTCooF+bLo76CPir pO/g/Oprx9M2FGcrJrHfuPp1NNhvDFKvkfGO5n+//VxmHLibGwW0UJv4pswRQzB7 rNM0qPxYQT0nHjeSYh9l09n9g2oXknWZcbDDgNl9evM3I0b1qJjmj9Shwm6VvhHJ aDQIQhmV6jDHDKZYceYiLZRaheZ6JRgNek6+L8I62UNJmRtVJKnXwqDrbO+CFdu4 mnclVFmULRsFikBfyz6HE9fbBrlqPe4= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:02 2024 by rpki-client on console-ams.rpki-client.org