$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa File: 72e795f5-60df-3423-9f93-1780d7ce2d6c.roa (raw, json) Hash identifier: CAWsLVbFsPekOnp6yronHd84H7V6ThGEX7zpNdQIFus= Subject key identifier: 14:82:AC:04:0E:49:E8:EA:86:36:26:5B:C2:75:5F:D4:9C:37:44:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847686B957A446D488D0B2ED380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa Signing time: Wed 02 Oct 2024 13:00:42 +0000 ROA not before: Wed 02 Oct 2024 13:00:42 +0000 ROA not after: Tue 31 Dec 2024 14:00:42 +0000 asID: 20940 IP address blocks: 104.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:68:6b:95:7a:44:6d:48:8d:0b:2e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:42 2024 GMT Not After : Dec 31 14:00:42 2024 GMT Subject: CN=6d6d3a16-d518-4f24-b593-088af6af72d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:99:92:65:a4:2a:df:67:9d:af:33:77:ed: 70:86:a2:aa:4c:bf:1e:8d:98:81:66:8d:7a:79:1e: a6:0c:cb:e5:ab:2d:fc:59:a0:58:bd:1f:63:16:20: 0f:02:74:77:9a:dd:0c:c7:bf:89:b3:84:5d:97:38: 3f:5e:9b:2d:3e:81:0b:a8:53:16:10:d6:2a:04:56: 58:a8:79:53:7a:eb:e1:b9:a8:9c:55:ad:9f:cb:a2: 16:bd:62:14:b9:3c:44:e6:c6:6e:b3:c1:14:fd:3f: 82:ae:31:59:d2:1b:90:6c:13:a3:d9:8c:6f:53:dc: 90:05:e9:54:4a:3e:06:68:01:ea:6d:f9:30:2b:47: 5d:1e:cb:01:cb:e9:a6:53:ae:41:84:01:4f:97:d0: 13:40:8f:92:a0:98:f2:f4:f8:4f:e6:de:67:15:27: fe:7a:c3:5f:38:92:95:b3:b3:b7:6a:88:cc:05:48: 3e:61:1e:7e:34:dc:c2:38:bd:08:98:fd:73:b6:94: 04:b0:31:13:47:44:e2:cb:af:08:8e:c4:1f:83:32: 42:db:c2:09:c5:5c:f1:8e:29:a0:64:6c:eb:81:83: ef:e9:04:55:97:5d:a3:8b:d3:f0:13:45:52:59:d7: a1:4a:84:6c:05:31:5f:e0:5f:f0:17:d0:61:cb:1d: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:AC:04:0E:49:E8:EA:86:36:26:5B:C2:75:5F:D4:9C:37:44:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72e795f5-60df-3423-9f93-1780d7ce2d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:46:22:af:fc:52:e1:b9:01:bd:60:91:84:a5:d0:b7:02:4b: fd:da:23:78:33:23:9d:3e:4b:2d:bb:24:1f:38:1d:99:61:c8: 16:48:d9:e7:8e:17:12:f0:cf:71:a8:ff:84:a3:a0:a6:d5:fd: b9:ee:57:b3:eb:27:27:93:d7:2b:dc:42:e3:b4:9b:94:0d:9f: f2:eb:59:43:49:bc:57:bd:dc:f3:c5:2d:a0:0c:50:c3:e9:5d: e1:d7:4d:8f:cf:92:6b:d8:be:23:73:67:c9:41:16:b1:4f:ec: c7:a9:49:33:4b:bf:74:4a:0a:4c:56:0f:ea:5e:cb:cc:f0:26: 1e:88:5c:fd:a8:e5:9c:2a:66:b3:d6:eb:85:05:f2:96:b4:cd: 52:12:b0:d1:76:c7:59:eb:48:40:08:5a:74:cf:47:dc:a0:21: 67:e4:25:5b:58:62:3b:28:99:19:a4:24:a5:2a:1a:d3:19:48: 15:3b:9e:fc:98:3a:3c:ff:23:69:ec:af:51:5a:77:ed:05:c2: 28:fc:da:d0:4f:da:be:33:3f:02:ba:fe:0f:c1:c7:b0:5f:fa: c6:17:e7:77:cc:ef:e2:e4:fe:fb:72:fb:41:d2:bc:61:47:ea: 0d:4b:e3:80:cc:23:9d:6b:25:de:61:29:8d:73:83:16:b1:4f: a2:a0:10:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdoa5V6RG1IjQsu04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk NmQ2ZDNhMTYtZDUxOC00ZjI0LWI1OTMtMDg4YWY2YWY3MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuKZkmWkKt9nna8zd+1whqKqTL8ejZiBZo16 eR6mDMvlqy38WaBYvR9jFiAPAnR3mt0Mx7+Js4Rdlzg/XpstPoELqFMWENYqBFZY qHlTeuvhuaicVa2fy6IWvWIUuTxE5sZus8EU/T+CrjFZ0huQbBOj2YxvU9yQBelU Sj4GaAHqbfkwK0ddHssBy+mmU65BhAFPl9ATQI+SoJjy9PhP5t5nFSf+esNfOJKV s7O3aojMBUg+YR5+NNzCOL0ImP1ztpQEsDETR0Tiy68IjsQfgzJC28IJxVzxjimg ZGzrgYPv6QRVl12ji9PwE0VSWdehSoRsBTFf4F/wF9Bhyx1HLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSCrAQOSejqhjYmW8J1X9ScN0RAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJlNzk1ZjUtNjBkZi0z NDIzLTlmOTMtMTc4MGQ3Y2UyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFGIq/8UuG5Ab1gkYSl0LcCS/3aI3gzI50+Sy27JB84HZlhyBZI2eeO FxLwz3Go/4SjoKbV/bnuV7PrJyeT1yvcQuO0m5QNn/LrWUNJvFe93PPFLaAMUMPp XeHXTY/PkmvYviNzZ8lBFrFP7MepSTNLv3RKCkxWD+pey8zwJh6IXP2o5ZwqZrPW 64UF8pa0zVISsNF2x1nrSEAIWnTPR9ygIWfkJVtYYjsomRmkJKUqGtMZSBU7nvyY Ojz/I2nsr1Fad+0Fwij82tBP2r4zPwK6/g/Bx7Bf+sYX53fM7+Lk/vty+0HSvGFH 6g1L44DMI51rJd5hKY1zgxaxT6KgEEQ= -----END CERTIFICATE-----Generated at Thu Nov 21 22:38:01 2024 by rpki-client on console-fra.rpki-client.org