$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa File: b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa (raw, json) Hash identifier: NaC5a+vKXO6U6rbqBYSpc3O607rlM1uo/C01cY/zxJM= Subject key identifier: 52:03:86:E9:74:52:9B:0F:CA:D5:EA:9B:91:81:86:42:27:07:7C:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584777C6477E7749B889D2D2B840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa Signing time: Tue 08 Oct 2024 01:00:31 +0000 ROA not before: Tue 08 Oct 2024 01:00:31 +0000 ROA not after: Mon 06 Jan 2025 02:00:31 +0000 asID: 16625 IP address blocks: 104.107.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:c6:47:7e:77:49:b8:89:d2:d2:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 01:00:31 2024 GMT Not After : Jan 6 02:00:31 2025 GMT Subject: CN=27d1cd03-3be1-4876-aba5-321c996c7b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:a6:0b:43:fa:19:0a:a6:80:46:37:3a:43: 04:86:61:1f:73:e5:39:1d:4f:01:69:6a:36:ba:2e: d1:62:79:63:41:65:8a:ca:5f:1b:93:78:ec:42:04: e3:2f:36:a1:8b:f4:d1:25:43:8a:07:68:09:0c:22: a9:fd:ed:f5:65:02:a6:a0:2b:5e:a0:32:86:42:88: f5:b1:1e:9b:03:f6:1c:0a:01:d6:21:31:0b:57:0a: 33:3f:23:44:6a:91:72:2a:45:54:7b:dc:73:ac:d7: c6:e9:6f:2a:12:e3:21:ae:90:2b:7e:37:99:d0:38: df:ba:7c:35:20:de:22:13:cc:6d:dd:75:27:5d:71: 43:91:5c:8b:d5:99:42:f2:3b:a7:ed:da:3c:55:58: 95:6c:a0:34:03:61:c4:51:94:fc:c8:90:27:4e:a7: f9:fe:09:ed:8c:c2:45:07:18:28:28:8f:33:af:31: 00:cc:69:ce:9c:d4:94:97:21:07:5a:22:1b:ff:4c: 9e:c8:43:95:24:85:ea:68:c4:78:c3:fe:43:42:f5: 35:9e:73:7b:7b:97:53:43:35:15:da:c4:42:b1:34: 15:56:bd:3d:3b:3c:68:27:28:e3:42:12:36:8a:d0: 18:f5:3c:14:8b:b0:93:9f:b3:53:05:81:66:55:46: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:03:86:E9:74:52:9B:0F:CA:D5:EA:9B:91:81:86:42:27:07:7C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a0a7df-6b1f-3760-8ba2-c99f1b8a2109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.107.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:86:f5:b8:ec:29:ef:64:8d:1f:74:d3:21:64:3e:31:ba:c0: 62:27:92:fd:c5:6c:a0:51:40:cc:7b:eb:17:56:6d:27:ca:e7: 62:00:2c:cf:b0:8e:3a:5d:62:6a:91:4b:cb:51:31:18:a6:17: 6e:e6:92:e8:f3:a2:cc:7d:a8:0e:ed:c0:6a:8c:2d:47:03:32: b0:77:1c:dc:2b:43:9b:2c:7e:db:be:2e:75:f5:9d:89:d7:57: 86:9e:1c:db:0d:8f:33:86:d7:0a:4f:f5:87:d6:2a:a3:15:f9: 7c:d7:43:e5:fb:61:d1:83:8f:c2:20:6d:50:ae:93:3f:11:b4: f3:4a:b0:0d:1c:df:73:fe:9e:d2:28:68:c0:d9:4d:2e:62:c5: e3:02:eb:94:8b:15:8b:05:15:db:7a:35:37:d3:48:a5:7e:aa: 3b:38:97:8b:f4:b1:c4:03:cb:6a:4e:8d:e6:ec:3a:1f:40:bb: ff:23:5e:dc:77:54:17:40:53:0d:60:bc:37:3e:3b:dd:c4:50: a3:bd:cb:c6:53:ef:35:b8:b2:0d:fc:32:15:57:a1:0c:74:f5: 37:fd:21:ab:39:e5:a7:f1:dc:54:31:44:e6:98:a7:8c:de:5f: d4:b8:f4:ae:e3:32:b4:9c:fd:05:6f:96:38:31:14:40:48:e2: 6c:e1:06:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xkd+d0m4idLSuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk MjdkMWNkMDMtM2JlMS00ODc2LWFiYTUtMzIxYzk5NmM3YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU6mC0P6GQqmgEY3OkMEhmEfc+U5HU8BaWo2 ui7RYnljQWWKyl8bk3jsQgTjLzahi/TRJUOKB2gJDCKp/e31ZQKmoCteoDKGQoj1 sR6bA/YcCgHWITELVwozPyNEapFyKkVUe9xzrNfG6W8qEuMhrpArfjeZ0Djfunw1 IN4iE8xt3XUnXXFDkVyL1ZlC8jun7do8VViVbKA0A2HEUZT8yJAnTqf5/gntjMJF BxgoKI8zrzEAzGnOnNSUlyEHWiIb/0yeyEOVJIXqaMR4w/5DQvU1nnN7e5dTQzUV 2sRCsTQVVr09OzxoJyjjQhI2itAY9TwUi7CTn7NTBYFmVUaOLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIDhul0UpsPytXqm5GBhkInB3w9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFhMGE3ZGYtNmIxZi0z NzYwLThiYTItYzk5ZjFiOGEyMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeG9bjsKe9kjR900yFkPjG6wGInkv3FbKBRQMx76xdWbSfK52IALM+w jjpdYmqRS8tRMRimF27mkujzosx9qA7twGqMLUcDMrB3HNwrQ5ssftu+LnX1nYnX V4aeHNsNjzOG1wpP9YfWKqMV+XzXQ+X7YdGDj8IgbVCukz8RtPNKsA0c33P+ntIo aMDZTS5ixeMC65SLFYsFFdt6NTfTSKV+qjs4l4v0scQDy2pOjebsOh9Au/8jXtx3 VBdAUw1gvDc+O93EUKO9y8ZT7zW4sg38MhVXoQx09Tf9Ias55afx3FQxROaYp4ze X9S49K7jMrSc/QVvljgxFEBI4mzhBrM= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:34 2024 by rpki-client on console-fra.rpki-client.org