$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa File: dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa (raw, json) Hash identifier: VTjBJ6xVBWuNU+YKfZ3IEreqGQ7iUQkdXyzjAbnlAAE= Subject key identifier: 4A:C0:29:38:A4:6F:E5:AD:82:3F:E0:EC:5C:92:05:17:C8:32:07:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584769D0E7D54123F8D6E3E7BCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa Signing time: Thu 03 Oct 2024 01:00:31 +0000 ROA not before: Thu 03 Oct 2024 01:00:31 +0000 ROA not after: Wed 01 Jan 2025 02:00:31 +0000 asID: 16625 IP address blocks: 104.99.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:d0:e7:d5:41:23:f8:d6:e3:e7:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 3 01:00:31 2024 GMT Not After : Jan 1 02:00:31 2025 GMT Subject: CN=ec2200af-fbc3-4de6-a461-289059cb987e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:a4:b7:9e:95:f8:d5:36:8c:6e:96:45:bb: 21:cf:bc:89:55:f2:de:05:98:88:20:b0:5f:26:69: 0e:a2:80:32:fc:c9:5a:88:a1:b9:2a:f7:37:ac:7a: a0:93:98:58:5c:5b:dc:77:c4:5f:a4:b5:29:e3:15: e2:54:27:25:95:5b:b5:2a:72:a9:72:f4:58:29:e7: 68:18:b8:36:de:3b:7f:9e:40:25:e8:bd:fb:5b:cc: bb:a2:de:46:8c:21:59:8d:34:31:81:99:59:31:c5: 76:d9:b6:7b:58:c9:e3:5d:f5:19:53:0f:72:09:ab: 8f:22:b9:1f:5b:47:bf:84:f1:6e:c5:b4:2a:21:cc: 4e:84:01:f7:77:2a:19:57:8e:19:31:a2:5c:9b:38: 29:7f:68:ff:7f:21:d5:c9:4c:18:be:35:01:19:28: 29:32:a4:26:3c:18:a9:ad:a5:8d:d6:bc:a7:5e:a1: 01:3b:b8:37:7e:3e:b3:f9:06:fa:47:8d:30:f3:b4: 96:7c:91:9a:c8:fc:03:17:cd:3f:00:fd:72:92:b9: 92:57:88:ed:f1:b6:29:bd:18:45:e7:42:6a:24:fc: 2d:f2:b9:10:cf:73:bb:a3:a1:a9:b0:58:c6:9f:4d: 0f:14:f3:5c:71:c6:c0:09:1b:bf:26:88:97:16:21: c6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C0:29:38:A4:6F:E5:AD:82:3F:E0:EC:5C:92:05:17:C8:32:07:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:81:88:84:3b:be:2c:29:b5:3a:39:33:c4:94:5a:d0:38:6b: 59:36:6e:11:88:f6:92:0a:47:b6:c6:db:ba:b4:e1:3c:8b:19: c3:42:ac:3e:8f:66:10:03:3c:f4:f8:3e:5f:f5:0f:3b:68:b7: 28:04:60:17:d7:6e:e6:a3:78:65:55:b2:b0:17:f6:e8:9e:e1: da:ac:fb:e0:9b:2b:36:cc:83:d0:19:cc:47:c3:df:fb:20:0f: f7:b9:7f:80:36:4a:b3:93:45:a6:1b:da:4e:22:08:e3:1d:aa: b0:38:e7:73:8f:2a:2e:8e:98:9d:b5:d4:d7:b0:90:f3:27:78: ab:7a:92:5e:73:cd:88:0b:d6:fc:05:4b:71:5c:44:53:c0:c5: d3:fa:4c:37:fa:27:cf:ef:57:fe:70:99:6b:8a:b7:86:b2:7c: 21:cb:5f:9c:06:b4:51:28:7a:2e:86:db:ed:db:87:fb:63:b0: b5:86:9e:7c:2e:08:9a:9c:af:a3:85:5b:0d:7d:7b:0d:24:75: 7e:b0:26:a2:29:86:ac:d9:91:f3:99:0b:89:d3:18:c1:de:a8: ad:04:0d:49:ec:ca:ce:7d:6d:0f:da:47:2f:66:12:cb:8c:ad: d0:08:9f:ee:40:44:6a:79:13:12:79:e5:06:f8:a6:ce:f4:d9: fa:76:07:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdp0OfVQSP41uPnvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwMzAxMDAzMVoXDTI1MDEwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWMyMjAwYWYtZmJjMy00ZGU2LWE0NjEtMjg5MDU5Y2I5ODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsmkt56V+NU2jG6WRbshz7yJVfLeBZiIILBf JmkOooAy/MlaiKG5Kvc3rHqgk5hYXFvcd8RfpLUp4xXiVCcllVu1KnKpcvRYKedo GLg23jt/nkAl6L37W8y7ot5GjCFZjTQxgZlZMcV22bZ7WMnjXfUZUw9yCauPIrkf W0e/hPFuxbQqIcxOhAH3dyoZV44ZMaJcmzgpf2j/fyHVyUwYvjUBGSgpMqQmPBip raWN1rynXqEBO7g3fj6z+Qb6R40w87SWfJGayPwDF80/AP1ykrmSV4jt8bYpvRhF 50JqJPwt8rkQz3O7o6GpsFjGn00PFPNcccbACRu/JoiXFiHGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErAKTikb+Wtgj/g7FySBRfIMgczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiOGI3ZWItY2ZiMi0z NmYxLTk1MGUtYTY2Yzk0ZTMyMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyBiIQ7viwptTo5M8SUWtA4a1k2bhGI9pIKR7bG27q04TyLGcNCrD6P ZhADPPT4Pl/1DztotygEYBfXbuajeGVVsrAX9uie4dqs++CbKzbMg9AZzEfD3/sg D/e5f4A2SrOTRaYb2k4iCOMdqrA453OPKi6OmJ211NewkPMneKt6kl5zzYgL1vwF S3FcRFPAxdP6TDf6J8/vV/5wmWuKt4ayfCHLX5wGtFEoei6G2+3bh/tjsLWGnnwu CJqcr6OFWw19ew0kdX6wJqIphqzZkfOZC4nTGMHeqK0EDUnsys59bQ/aRy9mEsuM rdAIn+5ARGp5ExJ55Qb4ps702fp2Byo= -----END CERTIFICATE-----Generated at Mon Nov 25 16:33:00 2024 by rpki-client on console-ams.rpki-client.org