$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa File: 4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa (raw, json) Hash identifier: vCXciM+p8qvydG46i7rB1GUVcjW+MpPbMnqWG5rMYN4= Subject key identifier: 9C:65:B8:03:38:31:C9:D0:49:79:9A:EB:EA:D4:17:B7:64:BA:CD:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584777C6485E5CB34D2C7769A680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa Signing time: Tue 08 Oct 2024 01:00:31 +0000 ROA not before: Tue 08 Oct 2024 01:00:31 +0000 ROA not after: Mon 06 Jan 2025 02:00:31 +0000 asID: 16625 IP address blocks: 104.109.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:c6:48:5e:5c:b3:4d:2c:77:69:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 01:00:31 2024 GMT Not After : Jan 6 02:00:31 2025 GMT Subject: CN=b4b55187-1515-4263-ae7e-22f24260028a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:c4:57:81:74:63:65:15:d4:30:ec:74:d8: c2:53:9a:0f:1d:51:c3:ed:4b:bd:b9:db:ea:c7:da: 3e:25:68:2e:75:0d:73:dd:11:76:fd:b4:b1:4e:10: 9d:18:cc:da:8f:15:5a:12:d8:be:86:d5:cc:28:f4: 41:38:d2:17:57:3f:ef:6b:a0:d8:5a:fa:39:35:aa: 02:36:a6:b5:93:a6:62:a2:01:6b:0b:d7:5b:a0:f5: d0:bc:08:16:8b:46:64:f6:85:35:7b:5f:b5:06:21: 59:05:65:8c:70:75:3b:85:c5:b5:0a:dc:02:12:f7: 17:fe:31:ca:22:56:b9:1d:aa:2b:f9:72:55:d0:d6: f4:84:e9:77:e1:5b:ec:15:61:ff:16:7e:80:41:2e: b9:4f:b3:ee:55:5d:45:3f:71:ec:4e:07:6c:ff:a7: 9a:4e:17:1f:31:3a:22:e8:0a:92:66:ba:14:6c:fd: 42:0d:c5:62:99:c4:61:27:3e:8c:e5:35:93:e5:d6: 61:0c:55:64:18:e8:4b:c4:65:13:a4:0c:62:1a:33: b3:35:63:a4:47:81:06:59:e9:c5:fc:5f:80:ac:10: 63:9d:55:e9:5e:67:ca:20:b0:fe:c0:4a:38:5a:89: d3:e5:79:b2:ce:59:90:39:73:76:7a:17:25:99:f0: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:65:B8:03:38:31:C9:D0:49:79:9A:EB:EA:D4:17:B7:64:BA:CD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.109.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4c:68:a2:71:52:79:47:b8:87:c6:80:ac:d6:0a:a9:fb:ee: bf:74:63:7b:dd:91:a3:1d:09:c7:66:74:5f:d3:4c:9c:f4:26: 6c:65:87:f1:d0:3e:ae:32:fc:19:73:7b:26:35:69:83:e7:78: 13:86:bc:ad:fd:a4:34:e6:bc:d0:a7:ba:43:bd:95:1d:d8:6a: 7f:de:ce:2b:69:9d:26:6d:d0:03:31:4e:48:c4:9b:9c:87:fd: f9:b8:65:18:c0:9a:fe:03:8d:1c:e8:aa:86:20:4b:44:a4:e1: 2d:b3:36:80:06:de:e3:a6:18:73:bc:ac:4d:b4:25:43:55:9a: e1:4a:4e:66:54:e8:a3:a0:dd:32:37:ac:85:4c:95:c2:0c:07: 80:3f:10:e0:36:89:f6:b2:c5:54:15:e5:38:b9:47:c6:ef:01: c6:d6:8b:7e:2f:85:88:7f:c9:18:95:eb:cd:0c:88:4c:8a:2e: f6:78:af:05:49:d8:6d:cf:ba:48:04:88:ca:88:59:fb:63:90: 50:ce:34:3c:b9:9f:d0:8a:bb:99:1c:ea:c7:f9:9d:a3:bd:c8: a8:85:91:21:26:77:7a:f8:5c:b0:57:42:f6:8b:46:2a:77:ab: 8e:9e:73:b3:09:ba:ca:07:88:03:c6:9d:f4:16:0a:bd:af:00: 6d:8e:a4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xkheXLNNLHdppoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk YjRiNTUxODctMTUxNS00MjYzLWFlN2UtMjJmMjQyNjAwMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE/EV4F0Y2UV1DDsdNjCU5oPHVHD7Uu9udvq x9o+JWgudQ1z3RF2/bSxThCdGMzajxVaEti+htXMKPRBONIXVz/va6DYWvo5NaoC Nqa1k6ZiogFrC9dboPXQvAgWi0Zk9oU1e1+1BiFZBWWMcHU7hcW1CtwCEvcX/jHK Ila5Haor+XJV0Nb0hOl34VvsFWH/Fn6AQS65T7PuVV1FP3HsTgds/6eaThcfMToi 6AqSZroUbP1CDcVimcRhJz6M5TWT5dZhDFVkGOhLxGUTpAxiGjOzNWOkR4EGWenF /F+ArBBjnVXpXmfKILD+wEo4WonT5XmyzlmQOXN2ehclmfDEDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxluAM4McnQSXma6+rUF7dkus17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM5OTc5NTktZWQ3Yi0z Y2M2LWI4NDEtZTJjZDcxMWQwZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaG3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElMaKJxUnlHuIfGgKzWCqn77r90Y3vdkaMdCcdmdF/TTJz0Jmxlh/HQ Pq4y/BlzeyY1aYPneBOGvK39pDTmvNCnukO9lR3Yan/ezitpnSZt0AMxTkjEm5yH /fm4ZRjAmv4DjRzoqoYgS0Sk4S2zNoAG3uOmGHO8rE20JUNVmuFKTmZU6KOg3TI3 rIVMlcIMB4A/EOA2ifayxVQV5Ti5R8bvAcbWi34vhYh/yRiV680MiEyKLvZ4rwVJ 2G3PukgEiMqIWftjkFDONDy5n9CKu5kc6sf5naO9yKiFkSEmd3r4XLBXQvaLRip3 q46ec7MJusoHiAPGnfQWCr2vAG2OpEk= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:00 2024 by rpki-client on console-ams.rpki-client.org