$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c108004a-6336-3752-85ca-1e97f3996de2.roa File: c108004a-6336-3752-85ca-1e97f3996de2.roa (raw, json) Hash identifier: hKc5vJ4/BcU4ZM0HG03cmmPc/0wK7FZRl43P9IjZdDw= Subject key identifier: 43:FC:85:66:A0:1E:B1:4B:4C:74:6C:C0:E8:F2:9A:13:3D:F3:A5:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845B4A92BC1EF34685DC8B65860 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c108004a-6336-3752-85ca-1e97f3996de2.roa Signing time: Mon 29 Apr 2024 10:52:26 +0000 ROA not before: Mon 29 Apr 2024 10:52:26 +0000 ROA not after: Sun 28 Jul 2024 10:52:26 +0000 asID: 16625 IP address blocks: 104.71.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b4:a9:2b:c1:ef:34:68:5d:c8:b6:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 29 10:52:26 2024 GMT Not After : Jul 28 10:52:26 2024 GMT Subject: CN=4259fcf7-85d8-4aee-9997-28140cbf1762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:20:83:06:8d:0b:39:cc:df:98:c1:e9:b5: 35:fd:e0:62:cd:dc:4a:52:d8:3e:8f:8d:f5:9f:b2: 1f:1d:1e:26:d7:9e:50:47:2f:c7:7c:a8:7d:57:66: f7:6f:d2:8a:2e:a3:38:76:b7:a8:b8:85:08:ac:6c: 96:70:77:bb:e4:18:4f:2d:b5:5c:1c:34:9c:d6:c7: 59:47:47:09:63:01:42:0a:77:4d:02:f3:4b:f3:60: 14:46:7e:b6:e7:ed:12:3a:64:f6:bd:f9:ff:5f:af: 04:45:c1:51:b7:d7:82:46:e5:5a:50:76:58:72:24: cc:cb:3c:1e:77:2b:ae:69:56:ce:cc:94:78:57:5d: 5d:e8:9d:81:dd:ba:1a:45:2f:c8:a0:18:ce:93:e7: 67:bd:8d:35:22:0b:3d:2b:a3:a5:6a:1d:50:59:56: f1:49:d8:b7:9e:21:85:72:e6:02:da:6e:ce:ca:3a: 37:47:2b:22:78:fe:e6:d4:b3:56:bc:2f:02:bc:8b: 4c:33:28:07:e7:77:9c:c7:6b:ad:45:f3:81:74:eb: 34:89:95:af:85:a1:5c:af:73:c8:bb:da:05:c6:93: 0e:c1:ff:f1:78:d5:d3:69:80:a5:13:b7:bf:f9:4e: fc:fd:2f:ce:ca:a1:35:1e:05:f6:e7:60:32:82:43: c9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FC:85:66:A0:1E:B1:4B:4C:74:6C:C0:E8:F2:9A:13:3D:F3:A5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c108004a-6336-3752-85ca-1e97f3996de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d6:ca:d4:1b:e9:ff:6c:00:1c:0d:2e:e9:5d:dc:e4:34:c4: 11:0f:43:89:dc:32:55:2d:5d:0a:bc:8f:f1:16:aa:f9:33:91: b9:75:66:0c:1c:4c:7e:63:c4:58:64:0a:58:c3:fe:a2:99:42: 55:99:70:3e:20:6b:8a:71:75:87:a9:a0:99:32:7e:c4:34:b9: b5:9b:4c:60:c0:49:1f:25:54:a7:c5:37:37:f9:04:e7:8d:8d: 85:da:c6:d1:e7:be:15:70:d4:94:79:0c:7c:5a:14:ad:bf:30: 19:d6:7a:c5:9c:07:6f:28:69:5f:c5:3a:89:7e:20:b8:e3:2c: 1b:d8:bf:3b:27:76:70:32:00:e4:a2:69:99:b7:47:f2:eb:85: 56:81:e2:0f:14:b1:95:86:33:5a:f5:12:3b:9e:e2:3b:78:67: 49:00:65:b8:a3:57:90:80:30:69:94:5c:b2:78:d8:1d:02:87: 28:36:92:64:76:c5:af:80:14:72:72:1a:f8:e4:c5:cb:62:97: c9:0c:7a:69:bb:3c:fe:1b:91:bd:4b:3a:20:1a:be:99:d2:4b: 67:dc:a5:57:15:ad:50:ab:47:fd:43:20:f1:af:85:d7:3b:4a: 98:f7:ea:66:a1:c4:44:fb:76:05:95:92:c4:f1:25:06:19:81: 13:fe:ac:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW0qSvB7zRoXci2WGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDQyOTEwNTIyNloXDTI0MDcyODEwNTIyNlowLzEtMCsGA1UEAxMk NDI1OWZjZjctODVkOC00YWVlLTk5OTctMjgxNDBjYmYxNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzMggwaNCznM35jB6bU1/eBizdxKUtg+j431 n7IfHR4m155QRy/HfKh9V2b3b9KKLqM4dreouIUIrGyWcHe75BhPLbVcHDSc1sdZ R0cJYwFCCndNAvNL82AURn625+0SOmT2vfn/X68ERcFRt9eCRuVaUHZYciTMyzwe dyuuaVbOzJR4V11d6J2B3boaRS/IoBjOk+dnvY01Igs9K6Olah1QWVbxSdi3niGF cuYC2m7Oyjo3RysieP7m1LNWvC8CvItMMygH53ecx2utRfOBdOs0iZWvhaFcr3PI u9oFxpMOwf/xeNXTaYClE7e/+U78/S/OyqE1HgX252AygkPJcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP8hWagHrFLTHRswOjymhM986UiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzEwODAwNGEtNjMzNi0z NzUyLTg1Y2EtMWU5N2YzOTk2ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3WytQb6f9sABwNLuld3OQ0xBEPQ4ncMlUtXQq8j/EWqvkzkbl1Zgwc TH5jxFhkCljD/qKZQlWZcD4ga4pxdYepoJkyfsQ0ubWbTGDASR8lVKfFNzf5BOeN jYXaxtHnvhVw1JR5DHxaFK2/MBnWesWcB28oaV/FOol+ILjjLBvYvzsndnAyAOSi aZm3R/LrhVaB4g8UsZWGM1r1Ejue4jt4Z0kAZbijV5CAMGmUXLJ42B0Chyg2kmR2 xa+AFHJyGvjkxctil8kMemm7PP4bkb1LOiAavpnSS2fcpVcVrVCrR/1DIPGvhdc7 Spj36mahxET7dgWVksTxJQYZgRP+rDk= -----END CERTIFICATE-----Generated at Fri May 17 02:15:38 2024 by rpki-client on console-ams.rpki-client.org