$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/940764cb-9d10-3870-995d-a4932e71cf83.roa File: 940764cb-9d10-3870-995d-a4932e71cf83.roa (raw, json) Hash identifier: 9aWm6v05R1MxBrS8VQhhklYTPZ/6Gj3fuWqs6QfVnEg= Subject key identifier: E5:3D:3B:07:1B:28:26:C9:BA:63:DA:D1:C4:24:03:DE:C4:9F:DE:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285847766110E4D0FE201212DAB980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/940764cb-9d10-3870-995d-a4932e71cf83.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.91.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:10:e4:d0:fe:20:12:12:da:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=4170aef2-7dad-4a94-954a-2982198e42e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:0f:3a:19:e2:a7:63:c2:5c:c9:fb:da:bd: 34:ca:ec:11:2f:28:75:b7:02:10:ec:6f:05:d6:62: c9:b9:b5:7e:67:a2:5f:d0:eb:0c:86:59:38:f5:32: ae:80:ca:5c:af:ce:c2:77:67:d0:16:7a:17:45:d5: f8:e5:16:84:b5:6c:fa:60:04:d2:22:32:a4:a5:d3: 34:f0:f1:de:a4:2e:42:f6:2b:87:97:b2:63:2b:2f: 50:75:22:05:8f:15:1e:df:ba:db:77:1d:13:4c:b5: 9c:f3:2c:bd:da:a2:57:2d:2b:60:0d:ee:09:c5:1e: 75:ff:0d:76:d9:76:f9:d0:c7:58:ff:74:ce:d7:22: 03:f4:b1:9e:15:d4:b1:1e:21:05:78:47:d3:fd:ce: b5:ed:2e:87:55:fe:8a:15:ac:ed:74:eb:73:20:4e: 95:18:61:4d:86:d5:34:78:92:95:ad:87:94:04:36: e3:85:94:52:38:65:d1:2e:60:f0:f3:7d:6e:3c:73: c2:f7:6c:ed:35:92:a6:7b:02:5c:20:4a:c7:10:b9: 66:a4:b7:6a:5b:d3:97:5a:94:29:b4:44:45:63:87: 50:54:6c:8f:fe:86:b1:fa:2e:81:8d:e5:03:0e:40: 24:e6:5f:89:53:f3:b1:b1:a6:e8:d2:5a:d6:40:0b: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3D:3B:07:1B:28:26:C9:BA:63:DA:D1:C4:24:03:DE:C4:9F:DE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/940764cb-9d10-3870-995d-a4932e71cf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.91.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:97:3b:51:7c:98:61:5d:91:01:30:d2:a3:d6:7a:da:30:b2: dc:f2:ff:7c:81:4f:c9:66:3b:97:29:d4:de:6b:58:7f:7b:f6: cd:16:ae:5e:c0:2f:27:a2:56:72:38:a5:31:45:cf:56:bc:ed: 12:4e:4e:42:17:79:dd:9b:d3:cc:c5:9c:08:2f:74:65:01:2e: f5:77:55:df:41:8d:33:29:20:22:9a:50:95:cd:fd:9f:75:28: fd:b2:ee:14:30:51:2a:3f:29:60:b2:d5:93:7b:3e:a0:31:f9: 15:1e:4a:26:b3:2e:41:07:c7:12:60:87:da:1c:c0:50:0e:1b: 1d:ab:60:23:f0:d5:96:c4:e6:4b:ca:b3:e4:a1:a6:3f:84:c3: 4d:97:a2:ce:24:3c:f1:8a:39:a9:37:81:e0:5a:36:23:75:fc: 48:19:87:54:1e:5d:06:68:08:20:37:6f:b4:35:7f:2a:af:42: b7:d9:7e:b4:85:d9:ac:1a:08:b1:71:d1:ab:17:ec:d7:d4:40: 29:30:f1:e1:22:7e:11:43:89:d2:7b:a0:f7:11:63:e5:39:a9: 0d:1f:36:e1:e0:e0:e3:cb:eb:dd:c3:51:9d:f6:0b:2c:15:a1: 9e:42:ce:eb:1a:44:3f:d3:bf:66:08:18:da:fa:eb:4d:1b:3b: 57:f4:9c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRDk0P4gEhLauYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NDE3MGFlZjItN2RhZC00YTk0LTk1NGEtMjk4MjE5OGU0MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrkPOhnip2PCXMn72r00yuwRLyh1twIQ7G8F 1mLJubV+Z6Jf0OsMhlk49TKugMpcr87Cd2fQFnoXRdX45RaEtWz6YATSIjKkpdM0 8PHepC5C9iuHl7JjKy9QdSIFjxUe37rbdx0TTLWc8yy92qJXLStgDe4JxR51/w12 2Xb50MdY/3TO1yID9LGeFdSxHiEFeEfT/c617S6HVf6KFaztdOtzIE6VGGFNhtU0 eJKVrYeUBDbjhZRSOGXRLmDw831uPHPC92ztNZKmewJcIErHELlmpLdqW9OXWpQp tERFY4dQVGyP/oax+i6BjeUDDkAk5l+JU/Oxsabo0lrWQAtb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU9OwcbKCbJumPa0cQkA97En95JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQwNzY0Y2ItOWQxMC0z ODcwLTk5NWQtYTQ5MzJlNzFjZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWXO1F8mGFdkQEw0qPWetowstzy/3yBT8lmO5cp1N5rWH979s0Wrl7A LyeiVnI4pTFFz1a87RJOTkIXed2b08zFnAgvdGUBLvV3Vd9BjTMpICKaUJXN/Z91 KP2y7hQwUSo/KWCy1ZN7PqAx+RUeSiazLkEHxxJgh9ocwFAOGx2rYCPw1ZbE5kvK s+Shpj+Ew02Xos4kPPGKOak3geBaNiN1/EgZh1QeXQZoCCA3b7Q1fyqvQrfZfrSF 2awaCLFx0asX7NfUQCkw8eEifhFDidJ7oPcRY+U5qQ0fNuHg4OPL693DUZ32CywV oZ5CzusaRD/Tv2YIGNr6600bO1f0nEs= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:25 2024 by rpki-client on console-fra.rpki-client.org