$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa File: 1ec66764-de3c-396b-8fb9-7220c150b28e.roa (raw, json) Hash identifier: wEDvtuS5YoMb4agMqZwT0gJ1xTEAMjlaVhVK9qkuIwE= Subject key identifier: E3:99:23:C2:66:FB:CF:64:24:FF:D5:C3:EA:19:39:71:08:D7:6F:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584776610FAE394FAE37D0429000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.89.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:0f:ae:39:4f:ae:37:d0:42:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=f9c1b28c-dbdb-4a44-a46b-9d1b934151a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:2b:1a:70:7f:04:1b:7f:d1:cb:5c:5a:64: e8:05:5a:25:6a:17:f8:0c:0f:e0:93:5f:14:14:49: a2:cc:9a:c2:be:a1:2a:ea:fd:48:9c:77:fc:21:9c: f7:35:34:05:41:d5:61:28:f4:d2:7a:8d:2b:92:57: 23:ec:24:64:63:77:00:24:89:35:f3:a6:c8:ec:bf: 14:90:51:f8:1c:d2:6d:ee:e3:d9:15:88:d7:18:1b: df:8f:8f:78:8c:2f:8e:64:0d:62:3d:d4:bb:8b:06: b2:23:7a:79:76:ee:e6:56:b4:3d:96:87:6f:62:a7: 18:4b:12:3f:b0:32:11:f4:69:9b:82:b1:bb:70:dd: b7:51:c3:89:c3:5e:bd:6e:35:3f:8e:9e:b3:46:14: d7:55:64:eb:a5:02:cd:66:0d:4a:a4:ff:77:df:8c: c5:92:63:16:3c:e9:06:1e:0c:93:22:e9:4c:2b:cd: 4c:bb:6b:e6:d7:d4:ad:05:38:e1:0c:3f:63:b1:c7: f5:5e:29:fb:7e:4c:d1:ea:d2:35:00:8d:1e:d0:22: 0b:24:30:ce:cb:e7:6a:1c:46:49:fc:f9:04:06:20: c8:f1:b6:36:af:8e:de:0b:fd:0a:c1:ce:31:fe:eb: a9:d8:01:7b:6e:bc:ca:0b:7b:13:66:e4:ad:e6:2c: 00:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:99:23:C2:66:FB:CF:64:24:FF:D5:C3:EA:19:39:71:08:D7:6F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec66764-de3c-396b-8fb9-7220c150b28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d2:cc:be:f0:c3:ec:65:6c:8e:5d:c3:fe:6d:1b:86:1a:9d: df:ab:b4:1b:67:36:b7:8a:f5:ee:5b:db:01:40:6c:6f:6d:f3: 70:d5:70:93:40:86:cd:03:dc:35:bb:d5:ec:f2:75:87:c9:67: 78:89:db:45:82:79:86:e7:32:d6:bd:88:6f:f5:d5:8b:95:7f: b7:5b:5f:d6:6b:91:63:17:59:9c:ab:83:05:f6:65:6f:d4:e0: b8:77:47:f5:3c:55:84:27:a4:94:f9:56:4d:05:84:e9:b8:83: 9f:1b:9d:87:83:c7:a3:0a:9c:a0:f0:2e:db:b6:1c:8f:96:53: 46:42:7f:da:f7:96:93:a8:30:47:f4:f7:fc:ce:39:b4:d5:fb: 3a:8d:25:25:23:0f:d5:86:14:91:83:9a:e9:a8:fb:25:36:60: be:b3:a1:c4:1f:2e:4d:ce:6a:b6:f5:ac:87:60:2f:e5:77:a7: 0c:44:54:7e:22:32:f0:dd:da:9e:05:56:6e:dc:6d:13:7c:48: 4e:13:d6:a6:e5:de:31:6a:a5:08:c8:f9:59:2c:23:a1:8a:39: 84:f8:14:94:7e:6e:d9:8d:1b:c4:62:39:d9:6d:f9:7d:a1:0b: 66:84:72:a0:dd:a4:b6:be:8a:8c:a9:f5:45:5b:d3:df:fe:4e: 9e:3b:3c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQ+uOU+uN9BCkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZjljMWIyOGMtZGJkYi00YTQ0LWE0NmItOWQxYjkzNDE1MWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshorGnB/BBt/0ctcWmToBVolahf4DA/gk18U FEmizJrCvqEq6v1InHf8IZz3NTQFQdVhKPTSeo0rklcj7CRkY3cAJIk186bI7L8U kFH4HNJt7uPZFYjXGBvfj494jC+OZA1iPdS7iwayI3p5du7mVrQ9lodvYqcYSxI/ sDIR9GmbgrG7cN23UcOJw169bjU/jp6zRhTXVWTrpQLNZg1KpP9334zFkmMWPOkG HgyTIulMK81Mu2vm19StBTjhDD9jscf1Xin7fkzR6tI1AI0e0CILJDDOy+dqHEZJ /PkEBiDI8bY2r47eC/0Kwc4x/uup2AF7brzKC3sTZuSt5iwAaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOZI8Jm+89kJP/Vw+oZOXEI12+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVjNjY3NjQtZGUzYy0z OTZiLThmYjktNzIyMGMxNTBiMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbSzL7ww+xlbI5dw/5tG4Yand+rtBtnNreK9e5b2wFAbG9t83DVcJNA hs0D3DW71ezydYfJZ3iJ20WCeYbnMta9iG/11YuVf7dbX9ZrkWMXWZyrgwX2ZW/U 4Lh3R/U8VYQnpJT5Vk0FhOm4g58bnYeDx6MKnKDwLtu2HI+WU0ZCf9r3lpOoMEf0 9/zOObTV+zqNJSUjD9WGFJGDmumo+yU2YL6zocQfLk3Oarb1rIdgL+V3pwxEVH4i MvDd2p4FVm7cbRN8SE4T1qbl3jFqpQjI+VksI6GKOYT4FJR+btmNG8RiOdlt+X2h C2aEcqDdpLa+ioyp9UVb09/+Tp47PNE= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:25 2024 by rpki-client on console-fra.rpki-client.org