$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa File: c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa (raw, json) Hash identifier: kNNH9qq11yvqVZ4QV6xdq7lTyPw0/rGkyO/bwrcWwOI= Subject key identifier: 46:A5:A4:A1:4A:A7:9D:6A:28:1E:46:86:DC:4C:85:B8:9A:44:96:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285845BA27FACB0977291763186740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa Signing time: Wed 01 May 2024 10:06:59 +0000 ROA not before: Wed 01 May 2024 10:06:59 +0000 ROA not after: Tue 30 Jul 2024 10:06:59 +0000 asID: 16625 IP address blocks: 104.125.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ba:27:fa:cb:09:77:29:17:63:18:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 10:06:59 2024 GMT Not After : Jul 30 10:06:59 2024 GMT Subject: CN=d6f501ef-04a1-4cb0-8943-0f9004f13586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:c9:5e:47:19:0d:ce:18:0d:ff:da:9f:20: b0:33:64:88:20:21:ae:c9:24:6d:04:ee:10:2a:7f: 60:21:27:b6:18:22:e4:ec:60:8d:8c:85:9e:3f:2e: 8e:65:34:d0:97:4e:7a:a7:d7:9c:bb:54:aa:c7:41: 69:dd:2c:15:76:3f:06:78:d2:29:0e:ae:20:14:c3: d8:cb:2e:79:9a:fc:1e:26:cb:7b:ac:41:81:a9:7c: 83:e8:1b:08:84:c7:ca:69:50:f0:9b:98:17:d7:c2: 78:61:94:78:48:54:a6:4b:7e:11:0f:2e:9e:3b:b1: b7:7c:db:80:d8:df:7a:c6:37:90:16:3b:27:3c:ba: b5:6c:e0:f3:2c:f8:d0:ba:13:e9:ac:20:26:7c:cb: fd:98:d7:f7:92:c4:ef:cb:4b:9b:ab:fa:e7:66:d0: 05:3a:23:41:6f:aa:ed:4b:3d:c1:7a:e6:36:f6:9c: 0b:01:51:2a:d3:5c:9d:c8:82:1d:5b:71:17:35:6e: 33:8f:fe:86:bc:ca:4c:69:fc:f2:ec:ca:58:cd:89: ea:a2:76:12:c6:13:b8:12:58:c6:8c:23:b2:e8:e9: e4:f4:e3:11:94:77:99:21:16:32:b7:39:c3:e5:c7: 4a:a5:a6:84:10:f0:15:d8:a7:0b:d1:f2:2c:63:2b: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A5:A4:A1:4A:A7:9D:6A:28:1E:46:86:DC:4C:85:B8:9A:44:96:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d7:7f:43:fd:ea:cd:09:fc:99:4e:9a:5e:9e:19:d2:04:33: 9d:a5:10:51:6f:03:15:95:82:ec:88:eb:53:60:3d:1c:09:13: 79:eb:84:af:45:ac:aa:07:64:5e:47:78:f1:b2:9c:67:9a:1c: b8:dd:92:7f:6b:31:41:44:64:d5:cd:fe:dd:a1:99:cc:ba:5b: db:19:f0:6e:29:82:2d:e3:cf:c9:ad:25:1f:fa:22:bf:3d:a2: 70:2a:29:2b:f6:8e:e2:a6:bd:1a:7f:3f:a0:ee:7d:de:e7:10: cd:ee:4c:1a:58:b5:13:c7:14:b7:94:6e:46:38:48:fe:94:91: 89:6e:49:eb:bc:eb:52:93:da:34:20:84:49:05:81:77:1c:37: e7:c6:e8:90:66:dc:00:54:64:aa:ed:90:35:a5:28:a7:bd:78: 1a:24:2d:30:d2:8b:1d:3c:54:71:18:a1:c2:50:b0:8d:c8:f1: b6:60:9b:78:4b:c1:f7:89:34:1e:65:e5:14:58:b6:d1:bc:2c: df:50:97:e5:69:31:0c:d8:fb:ed:f4:26:34:cf:26:a2:5b:40: d3:54:31:32:d0:d4:d2:31:3c:fe:c4:f6:c8:e2:cd:33:01:98: d8:bb:19:32:66:f0:fd:6e:6a:dc:77:a3:41:01:f3:45:a0:a6: f9:7d:cc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW6J/rLCXcpF2MYZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MDUwMTEwMDY1OVoXDTI0MDczMDEwMDY1OVowLzEtMCsGA1UEAxMk ZDZmNTAxZWYtMDRhMS00Y2IwLTg5NDMtMGY5MDA0ZjEzNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhTJXkcZDc4YDf/anyCwM2SIICGuySRtBO4Q Kn9gISe2GCLk7GCNjIWePy6OZTTQl056p9ecu1Sqx0Fp3SwVdj8GeNIpDq4gFMPY yy55mvweJst7rEGBqXyD6BsIhMfKaVDwm5gX18J4YZR4SFSmS34RDy6eO7G3fNuA 2N96xjeQFjsnPLq1bODzLPjQuhPprCAmfMv9mNf3ksTvy0ubq/rnZtAFOiNBb6rt Sz3BeuY29pwLAVEq01ydyIIdW3EXNW4zj/6GvMpMafzy7MpYzYnqonYSxhO4EljG jCOy6Onk9OMRlHeZIRYytznD5cdKpaaEEPAV2KcL0fIsYytVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEalpKFKp51qKB5GhtxMhbiaRJYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFhZWIyMGYtM2JmZi0z MDRhLTg4MTUtOTc5MmU3YzBkOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaH3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADXf0P96s0J/JlOml6eGdIEM52lEFFvAxWVguyI61NgPRwJE3nrhK9F rKoHZF5HePGynGeaHLjdkn9rMUFEZNXN/t2hmcy6W9sZ8G4pgi3jz8mtJR/6Ir89 onAqKSv2juKmvRp/P6Dufd7nEM3uTBpYtRPHFLeUbkY4SP6UkYluSeu861KT2jQg hEkFgXccN+fG6JBm3ABUZKrtkDWlKKe9eBokLTDSix08VHEYocJQsI3I8bZgm3hL wfeJNB5l5RRYttG8LN9Ql+VpMQzY++30JjTPJqJbQNNUMTLQ1NIxPP7E9sjizTMB mNi7GTJm8P1uatx3o0EB80Wgpvl9zPE= -----END CERTIFICATE-----Generated at Fri May 17 01:58:01 2024 by rpki-client on console-fra.rpki-client.org