$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa File: 88874c79-a36a-334f-93cf-4dfb58395bd7.roa (raw, json) Hash identifier: I8w7THdyQsLTdGhKCsre4uPrI/VBbtfZzrnmv0sU3j8= Subject key identifier: 42:03:BD:F7:E3:F6:1F:49:39:82:9B:08:62:1C:B5:3C:7E:7F:09:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847686B94A286EA5C4D77E5C000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa Signing time: Wed 02 Oct 2024 13:00:42 +0000 ROA not before: Wed 02 Oct 2024 13:00:42 +0000 ROA not after: Tue 31 Dec 2024 14:00:42 +0000 asID: 16625 IP address blocks: 104.71.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:68:6b:94:a2:86:ea:5c:4d:77:e5:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:42 2024 GMT Not After : Dec 31 14:00:42 2024 GMT Subject: CN=631cc12c-a205-4b12-a7b1-6dfdd49cea45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:67:c1:07:a8:2e:6d:6f:2e:20:6d:aa:46: ea:7f:24:69:e5:7a:95:95:31:ef:bb:0e:7f:0d:a6: d7:db:61:39:0b:c4:7e:bf:f1:91:bc:c4:d3:17:8d: 42:0b:da:66:71:87:2c:92:bb:ac:fd:cf:c5:d1:ec: a2:ab:d0:b6:1a:62:55:86:52:60:63:f0:84:0c:8e: 91:4f:76:ed:38:55:e9:aa:b9:28:d2:44:ae:85:dd: ec:1b:9f:6f:5c:ca:28:94:59:81:a9:9d:88:26:66: a1:da:b8:44:89:b3:50:68:5e:01:bc:b2:11:66:85: 1d:14:e3:0d:27:c1:76:1d:d8:5a:d4:9d:0b:2c:fc: ac:8e:e9:71:ea:b1:d1:72:58:9b:02:d5:2e:f7:8d: e6:84:a8:3b:e7:a8:c2:a2:7c:6b:0d:cc:d0:25:c3: 68:6c:3e:f7:05:8d:7e:9c:b9:fb:c9:65:e5:9b:cd: 17:a2:2d:08:75:8a:8a:a7:e6:e3:45:07:42:87:05: d3:5d:3e:42:5b:9c:c1:3e:d2:81:ad:ac:72:56:9e: 22:c5:6f:1e:e5:ab:05:38:0d:2a:f9:e4:5c:d9:e7: cf:5a:fd:88:a4:4b:3f:55:ff:42:6f:35:c1:c5:ba: 71:a9:01:b0:7a:a0:e5:16:42:86:13:5f:0f:e1:1c: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:03:BD:F7:E3:F6:1F:49:39:82:9B:08:62:1C:B5:3C:7E:7F:09:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88874c79-a36a-334f-93cf-4dfb58395bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:48:d0:fd:5f:b3:95:97:b3:d7:a1:ea:a5:66:50:e8:84:a3: de:8e:9f:7b:80:a7:b7:93:26:5c:9c:13:38:24:88:02:7e:10: 44:a3:e9:24:73:7e:d5:b6:aa:0a:94:61:28:01:c2:56:e6:3b: 24:b2:69:dd:f9:8a:58:af:54:e3:2d:e3:6e:f7:57:f7:f8:f5: 67:60:6f:ea:b4:b2:fd:0c:bf:de:d9:98:f7:8b:dc:7a:1d:5e: 03:15:2b:57:42:8c:c4:ef:1d:d6:51:7b:f1:cf:5b:8a:67:dc: 23:5a:7c:57:8e:48:63:46:cc:af:00:22:ff:11:cc:29:bc:4a: 2c:c9:94:59:10:69:2e:7e:91:ae:b5:c6:68:0d:8b:d3:1e:29: 66:da:f4:2e:c8:de:1e:d8:6c:41:01:ec:7c:78:f5:4b:71:13: 02:f4:13:94:bb:ad:39:8d:cb:1d:4c:c6:79:cc:42:3d:62:58: 33:65:cd:83:62:20:a8:36:89:42:b5:6c:a0:ce:01:80:a4:c8: 31:8a:a3:14:ed:fb:ab:2a:ad:c5:d2:10:29:42:69:ff:2f:fb: 38:5f:b5:95:dc:f6:73:e2:02:a7:d1:23:9d:6d:fa:4f:0a:0f: 2f:ac:62:d3:85:25:c9:1d:62:d4:b0:01:30:9f:2e:2f:6f:a6: 6f:44:15:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdoa5SihupcTXflwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMjEzMDA0MloXDTI0MTIzMTE0MDA0MlowLzEtMCsGA1UEAxMk NjMxY2MxMmMtYTIwNS00YjEyLWE3YjEtNmRmZGQ0OWNlYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoJnwQeoLm1vLiBtqkbqfyRp5XqVlTHvuw5/ DabX22E5C8R+v/GRvMTTF41CC9pmcYcskrus/c/F0eyiq9C2GmJVhlJgY/CEDI6R T3btOFXpqrko0kSuhd3sG59vXMoolFmBqZ2IJmah2rhEibNQaF4BvLIRZoUdFOMN J8F2Hdha1J0LLPysjulx6rHRclibAtUu943mhKg756jConxrDczQJcNobD73BY1+ nLn7yWXlm80Xoi0IdYqKp+bjRQdChwXTXT5CW5zBPtKBraxyVp4ixW8e5asFOA0q +eRc2efPWv2IpEs/Vf9CbzXBxbpxqQGweqDlFkKGE18P4Rx5hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIDvffj9h9JOYKbCGIctTx+fwkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg4NzRjNzktYTM2YS0z MzRmLTkzY2YtNGRmYjU4Mzk1YmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaEeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJI0P1fs5WXs9eh6qVmUOiEo96On3uAp7eTJlycEzgkiAJ+EESj6SRz ftW2qgqUYSgBwlbmOySyad35ilivVOMt4273V/f49Wdgb+q0sv0Mv97ZmPeL3Hod XgMVK1dCjMTvHdZRe/HPW4pn3CNafFeOSGNGzK8AIv8RzCm8SizJlFkQaS5+ka61 xmgNi9MeKWba9C7I3h7YbEEB7Hx49UtxEwL0E5S7rTmNyx1MxnnMQj1iWDNlzYNi IKg2iUK1bKDOAYCkyDGKoxTt+6sqrcXSEClCaf8v+zhftZXc9nPiAqfRI51t+k8K Dy+sYtOFJckdYtSwATCfLi9vpm9EFXY= -----END CERTIFICATE-----Generated at Mon Nov 25 16:32:25 2024 by rpki-client on console-ams.rpki-client.org