$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342534f8-7c08-39c8-91b8-51b8f2a86253.roa File: 342534f8-7c08-39c8-91b8-51b8f2a86253.roa (raw, json) Hash identifier: dALXT40L6TN205MMygDsT+4hjIMmgg4v3sJVKfYXaRA= Subject key identifier: AD:E8:AC:A6:E4:89:F2:23:C2:C4:B9:83:F7:32:36:4E:2A:82:7A:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847766119C32025054F78823240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342534f8-7c08-39c8-91b8-51b8f2a86253.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.85.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:19:c3:20:25:05:4f:78:82:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=8ddbedba-11d9-4e75-a199-fd7a24dd93b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f8:58:e6:e5:b3:41:35:4f:73:14:44:34:1f: 44:b8:ca:78:03:78:ae:42:13:08:88:0a:74:3e:f7: 33:86:f9:b2:8e:a3:92:f5:37:96:23:49:97:92:2a: 9b:1a:9d:71:83:8e:a2:ff:dc:11:c9:8c:6a:35:b4: 21:07:f8:f4:39:85:70:c9:2b:d3:a3:ab:41:26:72: f2:b1:16:68:28:39:01:96:06:7a:2c:98:3f:c7:e5: cb:6e:06:51:81:5d:e0:d2:57:39:38:f9:6b:2e:e0: bf:bf:7a:49:16:95:08:7d:73:11:ac:f8:8e:b3:10: ef:26:9b:9c:28:1b:fb:5b:5b:4d:73:25:e3:a0:aa: 5c:67:03:5b:7d:55:b9:3e:84:d6:1a:80:4f:80:7a: ac:15:f7:42:35:3f:cb:05:bb:7f:c6:c1:a0:ca:1d: 7c:1a:38:f2:ca:4c:47:68:01:9d:e6:19:de:3e:67: 9f:9c:dd:c2:64:45:95:a1:c1:93:8c:5c:21:31:ff: 0a:b6:f0:c6:d9:7d:9e:36:b7:60:ba:60:c3:a7:5b: 41:a4:d8:c6:b8:c4:d7:cc:4e:42:53:0a:85:1e:be: 44:cf:76:42:ab:68:b1:23:71:6c:24:33:8b:18:2d: cd:cf:c2:2e:de:60:98:e9:c6:f7:9c:54:21:a9:a2: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E8:AC:A6:E4:89:F2:23:C2:C4:B9:83:F7:32:36:4E:2A:82:7A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/342534f8-7c08-39c8-91b8-51b8f2a86253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.85.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:85:79:3c:1f:8b:25:23:8f:8c:24:08:6a:46:3f:27:c3:56: 60:0d:e1:cf:dc:c9:b9:1a:4e:06:b0:98:7c:9f:a4:ba:b1:6a: d6:1c:ae:4e:d6:d2:a7:15:94:aa:59:73:c6:78:ba:3d:95:05: 58:9a:53:ac:ce:3d:25:ea:78:33:4c:1a:e3:ce:dc:8d:46:cf: e2:87:dd:8a:bb:14:70:fc:46:d5:9e:ee:b1:5e:c5:bd:f8:26: 39:77:8b:91:a2:89:ce:40:88:df:cd:49:67:23:1d:ea:cc:be: ab:b4:d9:3c:54:e7:f3:51:a4:ee:e1:56:c5:74:f2:01:32:56: e2:f8:c4:11:21:1d:e2:fc:25:ad:ca:68:cf:e9:e1:82:b0:60: be:bf:ca:30:57:d1:69:49:0f:c8:c2:a0:56:bc:f0:31:8e:1f: 48:98:c8:d7:17:91:f9:e3:33:e3:6f:d1:ee:5e:1b:63:10:da: 44:45:91:2e:ee:b4:e3:05:31:c4:29:14:32:2d:d6:f3:07:20: cd:7b:6b:98:41:89:0e:e1:73:34:c8:dc:60:09:90:e1:25:01: a0:c6:ca:a5:87:d3:fe:91:bf:40:6a:54:73:6b:92:00:8e:f3: 6d:2a:8f:8c:5a:b1:22:7a:f5:a6:7f:78:41:a8:f6:ce:05:17: 6a:7b:46:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRnDICUFT3iCMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk OGRkYmVkYmEtMTFkOS00ZTc1LWExOTktZmQ3YTI0ZGQ5M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PhY5uWzQTVPcxRENB9EuMp4A3iuQhMIiAp0 PvczhvmyjqOS9TeWI0mXkiqbGp1xg46i/9wRyYxqNbQhB/j0OYVwySvTo6tBJnLy sRZoKDkBlgZ6LJg/x+XLbgZRgV3g0lc5OPlrLuC/v3pJFpUIfXMRrPiOsxDvJpuc KBv7W1tNcyXjoKpcZwNbfVW5PoTWGoBPgHqsFfdCNT/LBbt/xsGgyh18GjjyykxH aAGd5hnePmefnN3CZEWVocGTjFwhMf8KtvDG2X2eNrdgumDDp1tBpNjGuMTXzE5C UwqFHr5Ez3ZCq2ixI3FsJDOLGC3Nz8Iu3mCY6cb3nFQhqaIl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3orKbkifIjwsS5g/cyNk4qgnpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQyNTM0ZjgtN2MwOC0z OWM4LTkxYjgtNTFiOGYyYTg2MjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqFeTwfiyUjj4wkCGpGPyfDVmAN4c/cybkaTgawmHyfpLqxatYcrk7W 0qcVlKpZc8Z4uj2VBViaU6zOPSXqeDNMGuPO3I1Gz+KH3Yq7FHD8RtWe7rFexb34 Jjl3i5Giic5AiN/NSWcjHerMvqu02TxU5/NRpO7hVsV08gEyVuL4xBEhHeL8Ja3K aM/p4YKwYL6/yjBX0WlJD8jCoFa88DGOH0iYyNcXkfnjM+Nv0e5eG2MQ2kRFkS7u tOMFMcQpFDIt1vMHIM17a5hBiQ7hczTI3GAJkOElAaDGyqWH0/6Rv0BqVHNrkgCO 820qj4xasSJ69aZ/eEGo9s4FF2p7RpY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:46:43 2024 by rpki-client on console-ams.rpki-client.org