$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53bf62f2-627d-3598-8787-263f4a0389bf.roa File: 53bf62f2-627d-3598-8787-263f4a0389bf.roa (raw, json) Hash identifier: 4p+6BjqV/JxZDy2dKRrGZqyceGFqoZfdNwMo3RKLrcs= Subject key identifier: 44:8C:96:32:27:25:A2:09:C2:BD:DF:12:83:38:A8:11:CC:FE:23:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847792BBDE5A33BAAE5893AB120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53bf62f2-627d-3598-8787-263f4a0389bf.roa Signing time: Tue 08 Oct 2024 13:00:40 +0000 ROA not before: Tue 08 Oct 2024 13:00:40 +0000 ROA not after: Mon 06 Jan 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.125.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:79:2b:bd:e5:a3:3b:aa:e5:89:3a:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 13:00:40 2024 GMT Not After : Jan 6 14:00:40 2025 GMT Subject: CN=2b375e97-93ca-40de-b8b4-bf026f832c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:06:9d:5f:2a:38:e0:6a:3d:7b:fb:3c:1c: 52:a8:e0:f7:39:d0:a5:80:99:73:76:7e:cd:0f:59: 2f:b4:e8:4a:a4:a3:e7:cd:c3:73:96:ce:ae:b9:48: 4a:40:d3:22:56:d5:18:99:59:f6:1e:db:10:af:8a: 7e:10:a1:23:2c:94:64:eb:e6:67:b3:c4:cd:fe:07: 4d:11:57:28:21:b8:58:a3:58:d3:8e:94:ea:ae:8e: c7:41:77:d0:25:bf:ac:6a:05:11:43:3e:01:42:e9: e1:01:e6:bf:34:29:eb:b6:07:c2:52:d9:c2:f1:47: 10:50:56:06:c8:39:b0:14:98:38:29:9f:aa:e7:18: 8c:f0:bc:e9:e3:df:bf:82:4c:08:22:43:ad:d2:ce: 61:0c:dc:d1:62:55:bb:60:67:a6:82:8b:87:03:fe: 1a:ba:4e:ab:19:25:a4:e4:c7:c3:fd:23:6a:ab:25: 29:49:53:7f:d2:f9:cd:11:cd:d8:d8:eb:44:7c:4b: 7c:06:c9:66:02:0f:f9:25:bd:7a:5a:c2:71:9a:12: 95:a9:ae:3e:71:8b:82:d3:01:dc:8f:74:70:18:e2: c1:97:90:14:e8:c5:8f:13:f0:0c:bc:c6:dd:5a:3c: 70:1a:8b:40:1c:3e:fc:84:5f:7b:aa:5a:47:2f:b2: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:96:32:27:25:A2:09:C2:BD:DF:12:83:38:A8:11:CC:FE:23:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53bf62f2-627d-3598-8787-263f4a0389bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:67:f4:86:1a:cb:25:92:62:ef:bc:6c:cb:b8:8e:30:01:42: bb:13:40:4f:2a:db:58:4c:a1:84:68:60:7b:5d:8a:c1:94:81: c1:c0:3f:a9:07:a5:58:fb:28:9a:6d:c7:d4:16:2a:f1:fe:ba: 04:be:aa:09:43:59:f0:86:7d:aa:67:f9:8d:16:17:db:f0:96: 83:9b:9e:d1:e4:29:d0:bd:7f:39:ef:45:ac:2f:f0:86:d5:e3: 78:8a:8f:7a:29:14:11:75:41:db:78:e8:09:63:29:9d:7c:25: 61:a0:1d:23:5f:eb:4b:3c:a6:9e:d0:31:ac:79:c7:00:0a:66: 99:56:e1:14:5f:09:e8:11:49:53:bc:88:66:c8:9f:5d:db:99: 5d:49:6e:d2:4a:e9:79:36:84:bf:82:81:cb:16:ff:bd:56:4e: 4f:36:39:fe:23:60:21:a6:9e:ca:9c:5b:32:e1:8e:0d:dd:7c: 7d:3b:a7:c9:a0:53:01:1b:69:ac:b4:01:ba:d4:18:af:69:4a: e4:9c:c5:e6:a3:ce:d1:92:2b:1a:e2:bf:06:ce:59:38:c3:d0: 72:6c:ba:cc:bb:66:ed:6d:bf:00:34:ef:fe:ef:7a:af:8b:42: da:b1:3e:14:a0:ec:da:28:c4:58:44:c5:7f:99:5b:80:8a:37: 8f:45:f3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd5K73lozuq5Yk6sSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwODEzMDA0MFoXDTI1MDEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MmIzNzVlOTctOTNjYS00MGRlLWI4YjQtYmYwMjZmODMyYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7MGnV8qOOBqPXv7PBxSqOD3OdClgJlzdn7N D1kvtOhKpKPnzcNzls6uuUhKQNMiVtUYmVn2HtsQr4p+EKEjLJRk6+Zns8TN/gdN EVcoIbhYo1jTjpTqro7HQXfQJb+sagURQz4BQunhAea/NCnrtgfCUtnC8UcQUFYG yDmwFJg4KZ+q5xiM8Lzp49+/gkwIIkOt0s5hDNzRYlW7YGemgouHA/4auk6rGSWk 5MfD/SNqqyUpSVN/0vnNEc3Y2OtEfEt8BslmAg/5Jb16WsJxmhKVqa4+cYuC0wHc j3RwGOLBl5AU6MWPE/AMvMbdWjxwGotAHD78hF97qlpHL7LS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESMljInJaIJwr3fEoM4qBHM/iO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNiZjYyZjItNjI3ZC0z NTk4LTg3ODctMjYzZjRhMDM4OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNn9IYayyWSYu+8bMu4jjABQrsTQE8q21hMoYRoYHtdisGUgcHAP6kH pVj7KJptx9QWKvH+ugS+qglDWfCGfapn+Y0WF9vwloObntHkKdC9fznvRawv8IbV 43iKj3opFBF1Qdt46AljKZ18JWGgHSNf60s8pp7QMax5xwAKZplW4RRfCegRSVO8 iGbIn13bmV1JbtJK6Xk2hL+CgcsW/71WTk82Of4jYCGmnsqcWzLhjg3dfH07p8mg UwEbaay0AbrUGK9pSuScxeajztGSKxrivwbOWTjD0HJsusy7Zu1tvwA07/7veq+L QtqxPhSg7NooxFhExX+ZW4CKN49F80k= -----END CERTIFICATE-----Generated at Thu Nov 21 23:39:31 2024 by rpki-client on console-ams.rpki-client.org