$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa File: d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa (raw, json) Hash identifier: 7I/GAeVTimtsnbB3sVYzBnf7zbPePzQDSfJFt4PzdqQ= Subject key identifier: 5E:59:B5:33:C8:C1:1C:92:4C:24:42:04:B1:97:2E:3F:FC:B3:32:88 Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F432858473095E8D0F3633A4AFCDD0A80 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa Signing time: Thu 12 Sep 2024 13:00:41 +0000 ROA not before: Thu 12 Sep 2024 13:00:41 +0000 ROA not after: Wed 11 Dec 2024 14:00:41 +0000 asID: 394770 IP address blocks: 204.58.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:30:95:e8:d0:f3:63:3a:4a:fc:dd:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: Sep 12 13:00:41 2024 GMT Not After : Dec 11 14:00:41 2024 GMT Subject: CN=d1f28c3a-101f-4994-bbb5-b9ebd9b73cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:76:31:93:a4:f5:cc:ef:92:a4:c6:64:e1: 93:e2:69:ce:93:be:93:30:4f:a6:e7:b4:df:66:3a: ed:b3:d4:c2:46:ae:da:71:59:6d:ba:10:ed:54:e9: d1:dd:42:1b:42:50:26:70:fe:1f:df:64:0e:74:8c: 9c:6b:1a:4e:9b:a9:f4:78:02:d9:4d:d6:8c:9f:1e: d6:51:b6:91:f8:d3:aa:ea:78:cd:9f:02:2c:ca:bb: b6:9d:40:5a:92:81:e4:36:d2:81:cf:b4:3f:3b:44: 16:9d:70:53:1f:60:aa:c0:e8:cb:06:fd:bc:4c:17: 64:a8:fd:7e:d5:9f:7a:4f:28:1f:a9:d2:4a:21:70: b9:58:9c:22:b4:d2:37:b9:c7:d5:e6:5c:e6:f2:a8: 8a:16:14:dc:d4:62:d7:ca:94:58:05:7f:83:ab:11: 31:92:92:3f:2f:ec:6d:99:18:83:ac:2e:70:24:8c: c3:31:4a:70:e8:1a:2b:64:56:15:71:3e:c6:d7:15: f1:61:04:4e:23:45:46:4c:86:f4:49:f9:d5:53:11: 09:20:3c:1d:85:7d:99:28:6d:a1:d1:c9:cc:38:ee: 66:d2:63:33:bf:c0:72:d2:55:52:c2:dc:63:14:60: 4e:20:be:41:bd:62:14:b0:eb:b3:3e:c2:dd:b6:b2: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:59:B5:33:C8:C1:1C:92:4C:24:42:04:B1:97:2E:3F:FC:B3:32:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv4: 204.58.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b0:ca:10:45:f2:f5:40:b8:b7:cd:8d:19:aa:2b:5e:10:c4: 81:07:d6:1d:0d:de:93:51:0b:6a:fb:53:1b:ca:26:08:bd:21: 88:45:43:49:3b:68:a4:04:d9:b0:1b:eb:a9:94:74:f3:8f:5b: 60:2d:71:a4:59:95:9b:bd:12:d2:4f:6d:b3:4d:16:6b:8c:2e: d4:49:c0:dc:66:97:f5:63:ca:15:03:a7:c7:0e:d6:f0:0c:43: f8:05:7d:92:0e:5d:e1:4e:cc:bc:b6:37:3a:1f:b2:40:46:52: 43:33:5c:ff:11:84:9b:76:3e:a7:fe:1f:94:da:e8:4f:40:89: cb:87:f8:87:06:2d:dc:89:9f:e8:79:29:74:ab:1f:88:ec:f2: 40:98:89:96:36:eb:b2:8d:91:25:a6:df:18:6b:7b:f2:9f:ad: 54:b6:d6:2e:c6:18:ba:65:82:69:db:ec:cb:8c:94:d5:f1:82: 52:45:12:d4:4d:c9:e1:33:6c:44:9a:ec:c6:36:0a:83:b8:0e: a4:d1:d3:3c:6c:4d:52:57:2b:eb:64:40:c8:45:8e:4a:b6:27: 24:0a:27:36:26:dd:a6:07:8d:1c:01:db:ee:35:e0:4f:0a:c4: d0:2e:9d:96:93:67:1e:d2:a2:37:9e:d2:6e:ce:cc:03:a9:46: 2d:d8:2b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcwlejQ82M6SvzdCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI0MDkxMjEzMDA0MVoXDTI0MTIxMTE0MDA0MVowLzEtMCsGA1UEAxMk ZDFmMjhjM2EtMTAxZi00OTk0LWJiYjUtYjllYmQ5YjczY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vd2MZOk9czvkqTGZOGT4mnOk76TME+m57Tf Zjrts9TCRq7acVltuhDtVOnR3UIbQlAmcP4f32QOdIycaxpOm6n0eALZTdaMnx7W UbaR+NOq6njNnwIsyru2nUBakoHkNtKBz7Q/O0QWnXBTH2CqwOjLBv28TBdkqP1+ 1Z96TygfqdJKIXC5WJwitNI3ucfV5lzm8qiKFhTc1GLXypRYBX+DqxExkpI/L+xt mRiDrC5wJIzDMUpw6BorZFYVcT7G1xXxYQROI0VGTIb0SfnVUxEJIDwdhX2ZKG2h 0cnMOO5m0mMzv8By0lVSwtxjFGBOIL5BvWIUsOuzPsLdtrLK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5ZtTPIwRySTCRCBLGXLj/8szKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvZDdmZjQzMDctZGExOS0z YjhmLTgxYTEtNWExMGFiNzBkOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGwyhBF8vVAuLfNjRmqK14QxIEH1h0N3pNRC2r7UxvKJgi9IYhFQ0k7 aKQE2bAb66mUdPOPW2AtcaRZlZu9EtJPbbNNFmuMLtRJwNxml/VjyhUDp8cO1vAM Q/gFfZIOXeFOzLy2NzofskBGUkMzXP8RhJt2Pqf+H5Ta6E9AicuH+IcGLdyJn+h5 KXSrH4js8kCYiZY267KNkSWm3xhre/KfrVS21i7GGLplgmnb7MuMlNXxglJFEtRN yeEzbESa7MY2CoO4DqTR0zxsTVJXK+tkQMhFjkq2JyQKJzYm3aYHjRwB2+414E8K xNAunZaTZx7Sojee0m7OzAOpRi3YKxM= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:07 2024 by rpki-client on console-ams.rpki-client.org