$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2859e5d-4591-3069-9f2c-f3da6d755443.roa File: c2859e5d-4591-3069-9f2c-f3da6d755443.roa (raw, json) Hash identifier: V+w2vgcp1r44aZs5zFLZcsDVbwjeCKbIv8PbUKpwlzE= Subject key identifier: C2:D5:6B:82:F9:96:BA:0E:F4:5C:A2:C5:CD:BB:45:B4:BB:A2:06:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858477661202E45DE7858ED089780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2859e5d-4591-3069-9f2c-f3da6d755443.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.103.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:20:2e:45:de:78:58:ed:08:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=1f362172-b2a1-48d2-bd50-a15eb5d4873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:31:c0:25:8b:a4:99:eb:c8:fa:3f:c1:63: 70:90:89:94:f2:99:f7:b6:42:46:4f:ac:1a:cf:1c: 92:8f:d0:f1:f2:1b:39:5c:28:b5:2d:60:35:7d:d4: 33:80:21:0c:93:58:c7:28:94:bc:90:8c:d3:8a:bb: dd:56:5b:8c:42:79:94:30:ca:bc:7f:09:f9:29:b4: 6d:48:fa:02:ba:d2:06:ac:65:6c:5c:6f:72:da:b4: 7c:ca:5a:90:13:8c:97:29:a3:33:f6:2e:99:74:5c: ac:c0:c5:0b:5e:fe:a0:65:09:27:2d:d9:c0:23:61: bc:f8:77:df:ee:5d:9d:7d:c2:b3:d4:db:14:8d:fa: 93:c1:93:83:a2:7a:a5:e8:1f:47:72:a4:2f:4e:ec: b9:f8:9c:a3:b3:17:57:1e:c5:dc:bf:aa:80:52:c6: 9b:0d:57:5e:c3:4d:12:29:68:0d:96:36:4c:63:1f: be:26:23:a5:3e:8b:00:59:6a:dc:13:bc:f3:22:56: 14:8e:31:01:de:30:ab:3e:8b:8a:de:24:7e:86:5e: 76:70:53:f4:ca:92:2b:77:e1:e2:3c:f2:0f:36:79: 26:dc:eb:a0:1f:f5:e9:d1:68:b8:d9:2f:4a:d6:d5: 78:53:23:58:fa:cf:b8:d1:40:00:8a:7f:36:09:9d: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:6B:82:F9:96:BA:0E:F4:5C:A2:C5:CD:BB:45:B4:BB:A2:06:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2859e5d-4591-3069-9f2c-f3da6d755443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3b:d3:05:98:03:5e:9b:1d:04:51:b4:dd:a0:7b:c6:cd:b4: 7b:c2:04:5a:b2:a2:f3:0f:bd:90:6e:24:e9:72:ec:24:e3:fb: 41:5c:41:97:4b:59:ee:08:97:48:24:bc:7d:68:f7:3a:cf:7f: 2b:7e:bd:43:34:08:20:53:2f:9b:43:40:31:e3:ee:8b:7f:ff: 18:2d:1d:ce:de:a5:0b:04:6e:ff:fe:8f:a4:ea:1a:1f:67:00: 89:b1:43:bd:ea:3c:e4:d7:26:cb:b4:0c:ca:3c:32:c6:bf:66: 5e:9d:e9:a4:47:6b:28:c6:12:c2:7c:cc:5d:41:6a:71:c4:20: c3:08:b5:b6:c8:50:a7:bd:05:41:a3:7a:46:89:94:fc:18:25: 37:93:e1:c8:8c:3d:85:e4:62:9d:0c:a6:7b:eb:7e:42:ab:a1: 54:51:bf:b3:f2:aa:f2:77:a5:56:f0:59:fd:46:b7:43:f0:15: bd:7f:1d:4f:f8:b6:85:42:a0:23:46:f6:c0:d3:85:d4:a8:05: fc:d0:b9:f3:10:fc:4d:60:75:4e:a1:0f:35:81:ff:58:13:d1: 9d:6c:3e:32:5a:7b:aa:a0:9c:9b:42:00:22:70:49:2e:8f:37: 9d:ca:44:81:78:26:cb:c0:11:18:b1:78:c5:18:3c:72:c2:ee: 63:80:ab:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YSAuRd54WO0Il4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MWYzNjIxNzItYjJhMS00OGQyLWJkNTAtYTE1ZWI1ZDQ4NzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxMxwCWLpJnryPo/wWNwkImU8pn3tkJGT6wa zxySj9Dx8hs5XCi1LWA1fdQzgCEMk1jHKJS8kIzTirvdVluMQnmUMMq8fwn5KbRt SPoCutIGrGVsXG9y2rR8ylqQE4yXKaMz9i6ZdFyswMULXv6gZQknLdnAI2G8+Hff 7l2dfcKz1NsUjfqTwZODonql6B9HcqQvTuy5+JyjsxdXHsXcv6qAUsabDVdew00S KWgNljZMYx++JiOlPosAWWrcE7zzIlYUjjEB3jCrPouK3iR+hl52cFP0ypIrd+Hi PPIPNnkm3OugH/Xp0Wi42S9K1tV4UyNY+s+40UAAin82CZ0/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLVa4L5lroO9Fyixc27RbS7ogaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzI4NTllNWQtNDU5MS0z MDY5LTlmMmMtZjNkYTZkNzU1NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII70wWYA16bHQRRtN2ge8bNtHvCBFqyovMPvZBuJOly7CTj+0FcQZdL We4Il0gkvH1o9zrPfyt+vUM0CCBTL5tDQDHj7ot//xgtHc7epQsEbv/+j6TqGh9n AImxQ73qPOTXJsu0DMo8Msa/Zl6d6aRHayjGEsJ8zF1BanHEIMMItbbIUKe9BUGj ekaJlPwYJTeT4ciMPYXkYp0MpnvrfkKroVRRv7PyqvJ3pVbwWf1Gt0PwFb1/HU/4 toVCoCNG9sDThdSoBfzQufMQ/E1gdU6hDzWB/1gT0Z1sPjJae6qgnJtCACJwSS6P N53KRIF4JsvAERixeMUYPHLC7mOAqzI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:06:57 2024 by rpki-client on console-fra.rpki-client.org