$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b82305-6378-37d0-b95e-0de990b2bf8b.roa File: f8b82305-6378-37d0-b95e-0de990b2bf8b.roa (raw, json) Hash identifier: 4harR6Vfnq+gIYmQPdvgMr5xNnr2cZFdlnIobdf6Sgk= Subject key identifier: A8:66:75:79:3A:5A:2E:CD:63:FD:22:E6:3C:C9:E3:2D:38:00:B6:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584776611573F51B67C00AC29B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b82305-6378-37d0-b95e-0de990b2bf8b.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.102.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:15:73:f5:1b:67:c0:0a:c2:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=ff10638e-fe77-4874-ba86-795a89cba253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:52:8b:ae:94:84:a2:60:1f:35:23:48:2c: 7b:a3:b3:54:68:ca:96:1a:88:60:fc:83:52:0b:e6: e9:f5:06:11:2b:13:7d:91:8e:c4:34:97:83:4d:15: 4f:ff:70:4d:13:8c:7c:eb:81:6a:1b:41:f9:f0:36: a5:21:e3:26:7b:26:67:a9:75:a3:3e:6a:4f:3b:01: 09:25:5a:08:8b:0c:72:ea:ab:33:0e:de:e0:76:0d: 66:d6:d1:f6:36:e6:77:0c:4f:50:46:ee:ef:5d:bd: 4f:54:d6:c6:8c:96:b1:02:40:f7:6c:ac:bf:f5:3e: 1d:3d:f5:46:c5:0c:b4:ec:db:ac:17:c3:5d:32:f0: 52:fd:f7:7f:51:6d:28:11:e9:cc:73:db:1c:ec:6c: b8:8d:8d:43:2a:c8:68:af:c8:e8:a2:d5:27:c0:9e: 67:99:3d:94:15:44:50:c0:4a:69:b6:d5:e1:ac:5f: 08:fa:a8:8b:af:88:65:5e:f5:75:8b:01:a6:57:13: b8:2e:97:e8:58:d6:ac:c9:70:aa:d0:b9:69:f3:88: e8:e7:19:19:16:07:67:ab:2a:a5:0c:d4:aa:fb:ca: 0b:81:d6:46:0d:85:2c:30:6e:58:19:8a:1c:d5:d0: 9b:17:12:b6:90:5c:90:a3:db:a0:36:e8:7f:a1:65: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:75:79:3A:5A:2E:CD:63:FD:22:E6:3C:C9:E3:2D:38:00:B6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8b82305-6378-37d0-b95e-0de990b2bf8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.102.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:22:b9:f7:3b:8f:9b:47:c1:e0:b3:8e:83:e8:67:12:cf:20: 29:32:77:eb:5b:01:f4:ae:2e:4d:63:76:db:9e:45:a2:15:73: 38:81:59:18:b0:10:8e:18:53:c4:03:13:91:52:0e:16:bc:b9: 6f:34:45:34:58:67:b5:5c:b3:0f:7e:77:a0:00:57:3f:23:3c: 4d:cb:79:ca:11:a2:a4:ee:6e:42:bb:b2:77:70:c2:1b:3a:de: e5:cd:75:54:27:75:66:18:a5:c5:a9:86:4e:57:49:f3:2b:e8: 04:11:c2:ed:e4:2d:e9:37:85:56:8a:0b:46:36:0c:f3:1d:ee: d0:44:37:33:70:4d:29:9f:78:12:5b:87:99:4a:41:18:8c:9b: b0:01:21:92:0f:40:39:89:4e:b4:8f:49:d0:f9:75:1c:20:88: 7a:e5:bf:99:80:3a:61:a5:38:71:93:f6:f3:a1:57:8e:a0:bb: ae:f0:57:04:ea:a6:ac:09:62:0b:5b:8d:65:84:61:e4:3b:ca: 93:d3:88:61:3b:e5:a1:34:8b:64:ef:a0:30:d9:fa:53:22:77: b1:8d:7c:9a:28:98:a7:cb:d0:e3:ec:54:e1:dd:16:71:35:72: 57:89:62:f7:2c:d6:14:58:6d:a8:9a:6b:0e:74:ab:78:82:b3: a6:78:5e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YRVz9RtnwArCmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZmYxMDYzOGUtZmU3Ny00ODc0LWJhODYtNzk1YTg5Y2JhMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMxSi66UhKJgHzUjSCx7o7NUaMqWGohg/INS C+bp9QYRKxN9kY7ENJeDTRVP/3BNE4x864FqG0H58DalIeMmeyZnqXWjPmpPOwEJ JVoIiwxy6qszDt7gdg1m1tH2NuZ3DE9QRu7vXb1PVNbGjJaxAkD3bKy/9T4dPfVG xQy07NusF8NdMvBS/fd/UW0oEenMc9sc7Gy4jY1DKshor8jootUnwJ5nmT2UFURQ wEppttXhrF8I+qiLr4hlXvV1iwGmVxO4LpfoWNasyXCq0Llp84jo5xkZFgdnqyql DNSq+8oLgdZGDYUsMG5YGYoc1dCbFxK2kFyQo9ugNuh/oWVaWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhmdXk6Wi7NY/0i5jzJ4y04ALY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhiODIzMDUtNjM3OC0z N2QwLWI5NWUtMGRlOTkwYjJiZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAiufc7j5tHweCzjoPoZxLPICkyd+tbAfSuLk1jdtueRaIVcziBWRiw EI4YU8QDE5FSDha8uW80RTRYZ7Vcsw9+d6AAVz8jPE3LecoRoqTubkK7sndwwhs6 3uXNdVQndWYYpcWphk5XSfMr6AQRwu3kLek3hVaKC0Y2DPMd7tBENzNwTSmfeBJb h5lKQRiMm7ABIZIPQDmJTrSPSdD5dRwgiHrlv5mAOmGlOHGT9vOhV46gu67wVwTq pqwJYgtbjWWEYeQ7ypPTiGE75aE0i2TvoDDZ+lMid7GNfJoomKfL0OPsVOHdFnE1 cleJYvcs1hRYbaiaaw50q3iCs6Z4Xgs= -----END CERTIFICATE-----Generated at Mon Nov 25 20:21:57 2024 by rpki-client on console-fra.rpki-client.org