$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa File: 63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa (raw, json) Hash identifier: jaG9sdI6QcJgxHSNIGOSf+PvXVK5lj3axT1yug9BelA= Subject key identifier: DB:8A:20:AD:4A:5A:88:BD:FF:4A:1B:24:D6:C3:E2:12:DD:84:3C:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584769D0E52CEBEF0DA8356F2B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 16625 IP address blocks: 104.81.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:e5:2c:eb:ef:0d:a8:35:6f:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=a8fe83c9-7bb1-4267-af23-c9b3757d702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:64:0e:52:99:18:8a:52:d3:ec:7e:77:d8: 80:cd:9e:36:c4:6a:b7:20:cd:44:00:2b:dd:97:88: f1:33:c5:4f:11:a5:b1:42:51:03:71:50:f1:a1:8b: 18:66:d8:50:a6:3b:53:fe:02:73:c6:74:f2:88:2a: 6b:63:ed:73:78:d0:1c:e1:56:61:fb:d2:63:0b:c4: fa:2b:7f:f5:28:29:61:d5:45:6a:c3:67:4c:e4:d6: 29:c6:a5:06:cc:71:c8:15:62:5f:c6:12:ab:a1:c0: 31:8e:82:49:1c:81:92:cd:81:d4:f1:89:58:3b:61: e3:c1:b4:3b:76:44:ce:d5:81:08:8c:15:06:0e:6e: f1:95:11:59:2d:3e:af:07:70:90:dd:92:b6:3f:bd: 15:6b:34:d8:a2:fa:c6:91:66:05:79:83:b4:fe:6c: 7c:37:d4:a5:8a:a0:f6:b3:b0:e1:2c:f1:65:62:36: eb:47:2e:9a:65:8f:1c:04:f8:64:26:44:67:3d:86: da:83:fa:0c:83:3a:55:6c:75:38:ab:f3:7e:56:61: f2:d9:dd:d1:ca:69:44:0f:0c:ee:5b:6e:f8:33:c6: 3c:cd:e2:70:e1:02:e0:6a:74:22:cb:65:be:dd:02: 28:43:65:0f:cf:56:15:c8:66:d8:c6:3b:16:54:19: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:20:AD:4A:5A:88:BD:FF:4A:1B:24:D6:C3:E2:12:DD:84:3C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.81.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:df:fb:d7:45:59:36:ba:60:74:4d:50:c1:76:90:07:a2: 0a:92:7d:4f:ff:54:36:ec:44:9d:88:45:11:d8:fb:65:c6:26: 91:f7:e5:b2:46:af:6b:5d:c4:e2:db:c1:a5:c0:b9:92:86:8e: 9f:42:f5:36:65:65:75:4d:a5:ff:dd:f0:88:f9:a7:d2:27:a9: 7c:30:5a:7f:b1:a4:da:0f:52:05:08:86:08:58:11:3c:7c:29: 84:d5:d7:02:87:4c:e5:0e:d1:d5:cd:ce:2d:e2:f5:74:da:43: 76:b2:ae:ad:73:ba:c7:fb:e5:1f:0d:75:92:22:6d:ec:ea:9e: 5b:3c:77:78:70:3d:6b:59:fc:c8:5e:1f:10:8c:17:28:2d:da: bb:3d:3a:ed:60:f6:dc:8d:eb:c8:05:47:b3:d9:6a:0a:85:b2: ff:5b:3b:e0:f6:49:31:e4:0f:17:b1:27:df:24:4d:9e:b7:f3: a1:18:87:87:54:a9:94:26:12:54:72:61:f9:c5:19:9e:1b:9a: 21:5d:c9:10:27:87:e9:46:cd:31:03:53:55:31:55:9d:a6:21: ca:b6:61:5b:a6:b8:07:bd:e6:14:ce:dd:14:4a:da:ab:19:98: b3:b3:d0:32:cb:09:52:46:89:24:67:90:43:3e:e4:3b:39:20: a8:be:6a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0OUs6+8NqDVvK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk YThmZTgzYzktN2JiMS00MjY3LWFmMjMtYzliMzc1N2Q3MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPZkDlKZGIpS0+x+d9iAzZ42xGq3IM1EACvd l4jxM8VPEaWxQlEDcVDxoYsYZthQpjtT/gJzxnTyiCprY+1zeNAc4VZh+9JjC8T6 K3/1KClh1UVqw2dM5NYpxqUGzHHIFWJfxhKrocAxjoJJHIGSzYHU8YlYO2HjwbQ7 dkTO1YEIjBUGDm7xlRFZLT6vB3CQ3ZK2P70VazTYovrGkWYFeYO0/mx8N9SliqD2 s7DhLPFlYjbrRy6aZY8cBPhkJkRnPYbag/oMgzpVbHU4q/N+VmHy2d3RymlEDwzu W274M8Y8zeJw4QLganQiy2W+3QIoQ2UPz1YVyGbYxjsWVBljDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuKIK1KWoi9/0obJNbD4hLdhDxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjM5NDFkZjQtOWY5YS0z ZDM3LWE2ZjEtMWI5NDg5YjZiOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB93/vXRVk2umB0TVDBdpAHogqSfU//VDbsRJ2IRRHY+2XGJpH35bJG r2tdxOLbwaXAuZKGjp9C9TZlZXVNpf/d8Ij5p9InqXwwWn+xpNoPUgUIhghYETx8 KYTV1wKHTOUO0dXNzi3i9XTaQ3ayrq1zusf75R8NdZIibezqnls8d3hwPWtZ/Mhe HxCMFygt2rs9Ou1g9tyN68gFR7PZagqFsv9bO+D2STHkDxexJ98kTZ6386EYh4dU qZQmElRyYfnFGZ4bmiFdyRAnh+lGzTEDU1UxVZ2mIcq2YVumuAe95hTO3RRK2qsZ mLOz0DLLCVJGiSRnkEM+5Ds5IKi+apk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:29:49 2024 by rpki-client on console-fra.rpki-client.org