$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa File: 856e770f-696e-3e92-989e-4ad87cdfde06.roa (raw, json) Hash identifier: 0cmlgWBkBNM3ZqZD1Qp+5DDUTmzDQotsrzwrohEjSQE= Subject key identifier: 93:03:39:DF:55:99:73:98:AB:15:27:A4:80:55:4C:47:44:CC:8D:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477396740FFD09426B57385FF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa Signing time: Sun 06 Oct 2024 13:00:41 +0000 ROA not before: Sun 06 Oct 2024 13:00:41 +0000 ROA not after: Sat 04 Jan 2025 14:00:41 +0000 asID: 16625 IP address blocks: 104.77.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:73:96:74:0f:fd:09:42:6b:57:38:5f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 6 13:00:41 2024 GMT Not After : Jan 4 14:00:41 2025 GMT Subject: CN=94c9c2bb-81ce-4233-b270-567b5170142c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:76:23:18:94:cd:2e:a2:06:12:13:ff:8b:18: 9d:56:88:9e:1b:d3:dd:00:80:b9:6e:79:37:38:eb: 11:ec:bd:2b:a6:eb:9d:61:d7:27:6b:33:81:8d:62: 8e:b6:15:c5:bf:d5:9f:b4:d4:93:b5:5a:35:be:86: 80:6d:03:30:90:d4:06:7b:ac:28:3f:51:43:d3:59: a0:44:fe:9f:75:69:b4:fe:72:49:97:42:44:63:29: a2:e6:83:bf:b8:3e:bf:24:7a:11:1c:13:01:10:14: 66:8a:bf:f8:a6:33:a6:f3:20:03:0a:a3:e8:19:9e: 07:ee:43:70:ad:7d:36:fb:9c:be:3e:67:e4:a8:41: f5:dd:5f:35:d1:68:5b:79:94:94:b5:22:87:6e:42: f4:7c:36:3a:2b:1c:7f:2e:4e:79:7b:c3:67:47:c6: 66:59:6b:53:5a:ba:5c:72:8c:b4:d0:30:b9:9c:84: 84:3c:24:64:13:bf:55:17:61:6b:a7:3e:68:fa:0a: c2:f2:15:ae:59:bd:81:42:80:c8:ba:1a:52:6e:df: d1:9b:5f:ef:82:8a:82:53:19:69:96:07:ef:ce:98: 5a:df:9c:25:a3:cc:bd:48:4d:9f:aa:ac:07:84:c0: 00:aa:f2:1f:bd:d5:c8:13:6d:6c:ee:fa:21:9f:9a: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:03:39:DF:55:99:73:98:AB:15:27:A4:80:55:4C:47:44:CC:8D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f9:c4:5e:8f:a6:37:98:50:ca:93:b8:cb:41:a0:a9:0d:2e: bc:68:37:ec:29:01:d4:d2:9e:1f:46:71:4a:32:86:2e:d9:b7: 92:c5:3e:c2:f9:10:8b:f9:70:3f:cf:67:ef:07:ae:97:35:4f: 0c:f7:64:17:a7:4c:cc:3b:2e:5c:05:1a:a5:48:e8:52:5f:97: e9:20:01:ba:54:11:78:c8:3f:44:17:b1:46:bb:f8:0a:64:fb: 1e:7a:ca:1b:c8:01:e8:fb:85:45:a3:69:0b:2d:86:23:d5:a8: 26:ef:d7:0d:ac:5f:a4:b1:8c:cd:67:89:de:99:76:02:30:49: 56:5a:15:46:fd:0c:be:be:ff:f9:75:18:c1:16:98:1d:30:39: 96:40:bb:96:7e:9f:6a:43:56:d2:3b:b3:13:b9:d9:c3:2e:05: 01:2a:1c:fe:57:79:b5:8b:d2:bd:dd:ed:eb:77:cc:68:1c:c2: fd:38:98:1d:f6:46:9e:25:f4:4b:8a:0e:0b:f5:2b:7d:d0:a3: ab:04:8a:b8:72:f6:1a:92:4a:f8:aa:71:2f:92:9a:b0:31:16: da:c1:35:a2:03:5e:9b:56:22:37:c7:c0:f1:e6:9c:85:ee:db: e4:ef:3f:2d:91:d3:fa:b1:3c:4f:6e:9a:4c:e4:e1:a6:c0:75: 29:33:a6:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdzlnQP/QlCa1c4X/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNjEzMDA0MVoXDTI1MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk OTRjOWMyYmItODFjZS00MjMzLWIyNzAtNTY3YjUxNzAxNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXYjGJTNLqIGEhP/ixidVoieG9PdAIC5bnk3 OOsR7L0rpuudYdcnazOBjWKOthXFv9WftNSTtVo1voaAbQMwkNQGe6woP1FD01mg RP6fdWm0/nJJl0JEYymi5oO/uD6/JHoRHBMBEBRmir/4pjOm8yADCqPoGZ4H7kNw rX02+5y+PmfkqEH13V810WhbeZSUtSKHbkL0fDY6Kxx/Lk55e8NnR8ZmWWtTWrpc coy00DC5nISEPCRkE79VF2Frpz5o+grC8hWuWb2BQoDIuhpSbt/Rm1/vgoqCUxlp lgfvzpha35wlo8y9SE2fqqwHhMAAqvIfvdXIE21s7vohn5pahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMDOd9VmXOYqxUnpIBVTEdEzI0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU2ZTc3MGYtNjk2ZS0z ZTkyLTk4OWUtNGFkODdjZGZkZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH5xF6PpjeYUMqTuMtBoKkNLrxoN+wpAdTSnh9GcUoyhi7Zt5LFPsL5 EIv5cD/PZ+8Hrpc1Twz3ZBenTMw7LlwFGqVI6FJfl+kgAbpUEXjIP0QXsUa7+Apk +x56yhvIAej7hUWjaQsthiPVqCbv1w2sX6SxjM1nid6ZdgIwSVZaFUb9DL6+//l1 GMEWmB0wOZZAu5Z+n2pDVtI7sxO52cMuBQEqHP5XebWL0r3d7et3zGgcwv04mB32 Rp4l9EuKDgv1K33Qo6sEirhy9hqSSviqcS+SmrAxFtrBNaIDXptWIjfHwPHmnIXu 2+TvPy2R0/qxPE9umkzk4abAdSkzphY= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:24 2024 by rpki-client on console-ams.rpki-client.org