$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa File: 67b4856a-f739-32f4-856a-6c24584e5917.roa (raw, json) Hash identifier: TN3qV51Lf2XiJzwHPlaTi1T+Lvrm+vQvl49eMjJJe9Y= Subject key identifier: 34:A9:E4:6D:8C:38:68:51:93:43:69:D6:B0:21:8E:40:38:5D:E7:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845A9C6BE6438EDA91A0B9DE0E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa Signing time: Thu 25 Apr 2024 13:18:08 +0000 ROA not before: Thu 25 Apr 2024 13:18:08 +0000 ROA not after: Wed 24 Jul 2024 13:18:08 +0000 asID: 16625 IP address blocks: 104.77.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:c6:be:64:38:ed:a9:1a:0b:9d:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 25 13:18:08 2024 GMT Not After : Jul 24 13:18:08 2024 GMT Subject: CN=9e924367-3a78-4e4e-be23-0f9fd8455d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:69:f4:34:18:ce:48:c5:a6:c1:c2:7c:e2: 09:65:3e:c1:4b:98:d5:44:b6:a1:84:c5:f4:ac:39: 09:a4:36:aa:08:5c:98:95:49:83:dc:76:a2:25:e0: 4b:87:c8:db:53:9a:a1:2f:9d:a6:07:f3:3e:68:e5: 58:99:2c:c8:05:0b:62:be:d1:37:4f:a9:82:01:74: 2c:49:20:f8:7b:67:f2:fa:7f:44:7b:c9:1e:52:37: f2:df:01:1a:de:95:70:50:44:ed:3b:4e:ba:7d:19: 14:73:7d:9f:1d:2e:e5:c9:92:d0:22:f3:28:03:f4: f1:6a:6c:85:ea:25:ad:09:da:23:15:aa:a4:5f:fb: de:78:9c:d4:0f:36:b2:4d:7d:c7:a3:76:f9:64:12: 48:48:29:42:a5:08:51:a1:90:38:30:f7:df:fb:93: 4b:84:6c:57:f8:5c:a9:95:62:21:db:3d:10:4a:c2: 1c:eb:5a:51:1b:96:8d:fa:15:bf:27:4f:40:cb:40: 8b:c8:11:eb:7e:22:f6:30:e9:15:6c:1f:3f:cf:8f: b9:24:9b:cb:a3:75:2c:54:0a:92:89:ff:dd:d3:50: f9:14:f5:65:35:c6:50:b9:1e:e3:ae:38:75:19:16: 0d:b0:04:f8:56:38:be:7b:2e:a3:1a:44:4d:6a:72: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A9:E4:6D:8C:38:68:51:93:43:69:D6:B0:21:8E:40:38:5D:E7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67b4856a-f739-32f4-856a-6c24584e5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b5:7e:f8:17:fe:3d:3b:cb:36:60:57:57:7c:3e:13:a3:62: 59:58:1a:2c:a3:74:11:a5:5d:cb:71:3d:4a:c2:19:f6:c6:6c: 6f:1a:24:f2:0c:d0:0a:ec:3a:c7:39:31:0d:54:17:dd:2e:9d: 4b:99:60:d8:d3:e3:86:5b:59:01:ce:f4:af:e6:f9:35:88:40: 13:f4:7f:cc:d4:28:01:9b:49:77:f3:5d:6f:09:2c:a3:99:46: 0b:86:8f:5c:6a:f5:82:f6:3c:41:c4:12:1f:c8:bd:f5:c5:92: 9d:cc:e2:86:57:06:c2:7e:ad:a2:42:ba:5f:5a:59:e2:9c:e4: 76:85:8e:a7:4b:72:5e:5c:9f:1b:06:4a:5e:f2:9d:4e:e8:45: 6e:77:2d:6e:7a:ff:56:5c:56:0e:2c:20:22:9e:de:d9:b4:6c: 65:f5:91:8f:67:8a:bd:4b:6c:28:b1:e9:1f:da:2d:e9:b1:4c: 7d:a6:f7:5e:0f:00:5c:6c:cd:c0:67:5f:3d:2f:d7:72:51:f0: 95:29:f4:9a:b2:46:ef:d5:aa:73:a2:78:ac:9c:b0:63:ca:f2: 4f:21:4b:21:5d:af:94:f6:4c:e5:91:53:8d:7c:9e:fd:c4:90: f7:3a:23:51:a7:db:cc:77:f4:e6:f1:51:f0:8f:83:43:aa:cc: 9b:d2:8e:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpxr5kOO2pGgud4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQyNTEzMTgwOFoXDTI0MDcyNDEzMTgwOFowLzEtMCsGA1UEAxMk OWU5MjQzNjctM2E3OC00ZTRlLWJlMjMtMGY5ZmQ4NDU1ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Jp9DQYzkjFpsHCfOIJZT7BS5jVRLahhMX0 rDkJpDaqCFyYlUmD3HaiJeBLh8jbU5qhL52mB/M+aOVYmSzIBQtivtE3T6mCAXQs SSD4e2fy+n9Ee8keUjfy3wEa3pVwUETtO066fRkUc32fHS7lyZLQIvMoA/TxamyF 6iWtCdojFaqkX/veeJzUDzayTX3Ho3b5ZBJISClCpQhRoZA4MPff+5NLhGxX+Fyp lWIh2z0QSsIc61pRG5aN+hW/J09Ay0CLyBHrfiL2MOkVbB8/z4+5JJvLo3UsVAqS if/d01D5FPVlNcZQuR7jrjh1GRYNsAT4Vji+ey6jGkRNanLxMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSp5G2MOGhRk0Np1rAhjkA4XedSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjdiNDg1NmEtZjczOS0z MmY0LTg1NmEtNmMyNDU4NGU1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaE0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe1fvgX/j07yzZgV1d8PhOjYllYGiyjdBGlXctxPUrCGfbGbG8aJPIM 0ArsOsc5MQ1UF90unUuZYNjT44ZbWQHO9K/m+TWIQBP0f8zUKAGbSXfzXW8JLKOZ RguGj1xq9YL2PEHEEh/IvfXFkp3M4oZXBsJ+raJCul9aWeKc5HaFjqdLcl5cnxsG Sl7ynU7oRW53LW56/1ZcVg4sICKe3tm0bGX1kY9nir1LbCix6R/aLemxTH2m914P AFxszcBnXz0v13JR8JUp9JqyRu/VqnOieKycsGPK8k8hSyFdr5T2TOWRU418nv3E kPc6I1Gn28x39ObxUfCPg0OqzJvSjhU= -----END CERTIFICATE-----Generated at Fri May 17 14:10:48 2024 by rpki-client on console-fra.rpki-client.org