$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa File: d8bcab89-deac-3d68-b72a-3a4a20a98221.roa (raw, json) Hash identifier: rV8M0DvEeia+RG2Bn0rlp73gcxbekzlJtwfjBsl6S2M= Subject key identifier: 51:54:9F:EF:D0:3A:07:02:B5:CA:E8:15:96:0F:42:CE:49:1A:F9:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584776611F00D987B454C210FD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 9443 IP address blocks: 104.99.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:1f:00:d9:87:b4:54:c2:10:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=98af85c8-5f96-44d3-b48c-a10a5f53c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:44:e2:b3:1b:ef:ae:8b:c2:42:23:35:0f: ca:e0:30:62:3b:42:b7:ed:4e:52:e3:09:65:ef:b9: db:0e:6d:05:de:3a:a5:5a:9d:32:89:56:07:d6:20: 17:3c:a4:8a:9c:ac:ae:83:36:4a:f8:56:2d:43:02: 35:43:57:6b:0e:c7:ec:24:cb:97:6b:bf:c4:c2:51: 44:35:ff:1a:cc:e0:d2:47:87:ac:cc:04:3f:6e:84: 0e:c4:a3:27:bc:b0:93:b0:5a:2a:27:c1:df:c5:6e: fe:b8:ab:81:85:73:94:52:35:ab:e2:08:b4:88:59: 4a:03:c1:bf:e5:16:bf:f2:33:c6:16:6d:06:a1:6e: 1c:b7:82:3c:27:98:cb:a9:7f:30:ad:6e:c0:c5:aa: 32:d0:8e:c1:dd:89:32:24:97:46:e7:4a:d3:b7:d1: 59:06:9a:c1:24:1c:bf:06:70:69:2a:27:51:7e:d6: 1a:4b:1f:7a:f4:bb:e0:be:b5:fc:51:25:54:08:d9: 66:8f:2f:bd:99:13:ac:87:97:dc:97:27:63:3c:74: bf:ae:bc:b7:d2:39:32:6b:a6:f5:da:57:a0:db:6d: a3:28:1a:da:cf:23:6a:12:5e:eb:2d:95:96:82:2e: e8:8c:68:01:77:45:80:96:6c:79:e7:28:eb:cb:7a: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:54:9F:EF:D0:3A:07:02:B5:CA:E8:15:96:0F:42:CE:49:1A:F9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:39:93:ad:65:83:e7:42:44:7e:23:1d:74:75:b3:57:27:a5: 4b:35:4b:1d:29:70:6e:69:37:56:6c:b8:18:31:62:b6:86:cd: c3:82:06:90:e1:30:a4:54:ce:31:b4:a6:a6:96:4a:5c:5e:4c: 19:e5:bf:da:21:7b:83:ca:1d:14:5c:90:a6:c8:11:f3:70:bf: e9:7c:a8:5e:e8:93:10:65:3e:aa:b1:8f:36:b5:0a:b3:2d:04: 3e:37:0b:7a:e2:27:dc:03:a0:2e:52:04:33:ff:87:0f:ed:d4: 64:85:37:e5:10:51:6f:54:f9:5b:5f:3c:a3:34:7a:e6:82:6f: 38:95:d3:b4:6f:34:51:9d:36:3a:f7:74:92:42:4b:b2:26:36: 96:87:b5:f6:d9:f1:03:fe:32:e8:fe:bb:12:ca:95:7c:41:48: 8f:cb:a1:31:2d:44:69:a3:a7:07:72:58:7c:1c:a1:e7:1f:ae: 7b:07:85:2f:84:17:cd:0d:82:96:02:e4:cb:04:1c:e7:6b:74: c8:09:80:5e:43:7c:8b:42:00:08:45:52:21:66:4e:20:de:8b: 74:ab:48:88:17:70:6e:f1:e9:b4:98:2f:ca:fa:90:5b:4d:0c: 0c:71:60:7c:2c:6b:8a:67:0e:47:fc:92:a6:77:c3:a4:04:67: 8d:7f:cf:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YR8A2Ye0VMIQ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk OThhZjg1YzgtNWY5Ni00NGQzLWI0OGMtYTEwYTVmNTNjODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiFE4rMb766LwkIjNQ/K4DBiO0K37U5S4wll 77nbDm0F3jqlWp0yiVYH1iAXPKSKnKyugzZK+FYtQwI1Q1drDsfsJMuXa7/EwlFE Nf8azODSR4eszAQ/boQOxKMnvLCTsFoqJ8HfxW7+uKuBhXOUUjWr4gi0iFlKA8G/ 5Ra/8jPGFm0GoW4ct4I8J5jLqX8wrW7Axaoy0I7B3YkyJJdG50rTt9FZBprBJBy/ BnBpKidRftYaSx969LvgvrX8USVUCNlmjy+9mROsh5fclydjPHS/rry30jkya6b1 2leg222jKBrazyNqEl7rLZWWgi7ojGgBd0WAlmx55yjry3qtMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFUn+/QOgcCtcroFZYPQs5JGvklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhiY2FiODktZGVhYy0z ZDY4LWI3MmEtM2E0YTIwYTk4MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE05k61lg+dCRH4jHXR1s1cnpUs1Sx0pcG5pN1ZsuBgxYraGzcOCBpDh MKRUzjG0pqaWSlxeTBnlv9ohe4PKHRRckKbIEfNwv+l8qF7okxBlPqqxjza1CrMt BD43C3riJ9wDoC5SBDP/hw/t1GSFN+UQUW9U+VtfPKM0euaCbziV07RvNFGdNjr3 dJJCS7ImNpaHtfbZ8QP+Muj+uxLKlXxBSI/LoTEtRGmjpwdyWHwcoecfrnsHhS+E F80NgpYC5MsEHOdrdMgJgF5DfItCAAhFUiFmTiDei3SrSIgXcG7x6bSYL8r6kFtN DAxxYHwsa4pnDkf8kqZ3w6QEZ41/z/Y= -----END CERTIFICATE-----Generated at Tue Nov 26 00:26:32 2024 by rpki-client on console-ams.rpki-client.org