$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa File: 001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa (raw, json) Hash identifier: BSc10jJ/LdRbrxGqU+zYnBcoXvUH9vFJTnGI/ZZ3uoo= Subject key identifier: B8:E3:99:78:71:AB:54:29:E1:27:55:35:3C:52:DC:50:FA:C9:3C:18 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F43285847A73BDB271177757E0081BD00 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa Signing time: Fri 25 Oct 2024 01:00:31 +0000 ROA not before: Fri 25 Oct 2024 01:00:31 +0000 ROA not after: Thu 23 Jan 2025 02:00:31 +0000 asID: 46450 IP address blocks: 104.129.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a7:3b:db:27:11:77:75:7e:00:81:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Oct 25 01:00:31 2024 GMT Not After : Jan 23 02:00:31 2025 GMT Subject: CN=6702f544-9df1-4c34-9af9-c57df913477b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:5d:77:0c:bf:50:80:57:f9:7b:98:57:b0: 41:a6:98:15:a1:4d:16:de:a4:0d:ab:13:f5:5d:b5: 80:16:1c:0d:d4:fa:fd:f4:b8:d5:4e:5d:53:11:9b: dd:24:03:a6:68:64:e0:0f:27:9e:3c:d5:e2:21:96: c6:e8:97:d6:54:10:96:a3:c5:45:4f:47:5f:c5:15: a5:58:97:6e:8d:b3:f5:68:cb:5e:b9:ac:42:26:31: 27:26:bd:1a:27:cf:24:08:5b:ed:6f:c3:02:1d:3b: c0:60:a6:19:7a:cd:4f:82:8b:09:34:2b:02:b7:45: f6:c7:9a:24:ba:17:c6:0c:bc:b3:30:cf:8a:dd:06: b8:89:9a:83:05:db:83:5a:5c:9b:4a:9a:9c:b0:a1: ed:3a:44:61:ac:d0:5b:62:80:40:14:e9:69:b6:09: d5:e5:c7:cb:85:b7:33:60:55:6f:da:09:b5:d4:dd: 93:bb:eb:52:fb:2d:e6:ca:d3:d2:86:ac:06:68:72: c8:80:de:0e:ad:05:22:97:f8:18:f7:25:dc:e1:cc: 9b:be:d8:d1:20:d4:1b:f7:af:bf:70:ab:56:68:f4: 70:11:7b:a8:38:59:47:50:cc:46:99:dc:92:cd:9d: 5a:53:f5:ae:ef:2f:c0:20:da:98:69:ed:c0:18:c0: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:99:78:71:AB:54:29:E1:27:55:35:3C:52:DC:50:FA:C9:3C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 104.129.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:51:34:af:13:89:3b:57:af:76:6d:1d:71:fb:e0:8c:07:26: 8e:da:04:c4:18:2e:29:88:fb:c3:87:78:85:31:b3:64:a4:91: ac:41:36:c6:98:00:1c:ea:24:df:cd:13:dc:20:fd:0b:16:9b: f7:52:e0:27:68:85:e2:14:f3:02:d0:ca:dc:1c:71:f1:73:27: 99:10:34:35:0b:e9:9f:32:cc:dd:f7:9b:39:6c:a4:28:cb:9e: cb:40:9d:8d:09:50:60:05:a5:f6:96:09:a0:9f:5d:98:cf:5f: 97:17:f5:d1:63:fc:86:0f:80:98:ac:4f:f6:78:9b:dc:3c:0d: 81:8a:02:50:82:bf:bd:8e:da:c7:7f:f7:ea:0b:a3:51:56:82: 79:81:b6:a4:3f:5c:39:ab:fa:20:26:42:2a:06:59:ea:cf:32: 4c:d4:55:70:a8:87:da:0d:62:49:0b:49:af:12:68:70:27:d9: 32:7c:59:56:9a:f6:73:d9:7c:a0:27:1f:6c:c8:76:b0:ea:53: 23:a0:e9:71:3a:93:f2:e4:94:a3:66:24:e3:ae:00:99:9c:c4: e0:09:e0:1a:8e:2e:23:82:01:52:9a:eb:a0:c3:94:bd:1b:2b: 9b:69:d8:d2:34:88:9b:9a:d5:4d:80:37:c3:d8:5a:ae:bf:18: 50:e4:2d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEenO9snEXd1fgCBvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI0MTAyNTAxMDAzMVoXDTI1MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NjcwMmY1NDQtOWRmMS00YzM0LTlhZjktYzU3ZGY5MTM0NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvtddwy/UIBX+XuYV7BBppgVoU0W3qQNqxP1 XbWAFhwN1Pr99LjVTl1TEZvdJAOmaGTgDyeePNXiIZbG6JfWVBCWo8VFT0dfxRWl WJdujbP1aMteuaxCJjEnJr0aJ88kCFvtb8MCHTvAYKYZes1PgosJNCsCt0X2x5ok uhfGDLyzMM+K3Qa4iZqDBduDWlybSpqcsKHtOkRhrNBbYoBAFOlptgnV5cfLhbcz YFVv2gm11N2Tu+tS+y3mytPShqwGaHLIgN4OrQUil/gY9yXc4cybvtjRINQb96+/ cKtWaPRwEXuoOFlHUMxGmdySzZ1aU/Wu7y/AINqYae3AGMAzBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjjmXhxq1Qp4SdVNTxS3FD6yTwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMDAxYjI1Y2MtY2RmZC0z NWExLWI0NmEtOGNjMTliZGJlNzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChRNK8TiTtXr3ZtHXH74IwHJo7aBMQYLimI+8OHeIUxs2SkkaxBNsaY ABzqJN/NE9wg/QsWm/dS4CdoheIU8wLQytwccfFzJ5kQNDUL6Z8yzN33mzlspCjL nstAnY0JUGAFpfaWCaCfXZjPX5cX9dFj/IYPgJisT/Z4m9w8DYGKAlCCv72O2sd/ 9+oLo1FWgnmBtqQ/XDmr+iAmQioGWerPMkzUVXCoh9oNYkkLSa8SaHAn2TJ8WVaa 9nPZfKAnH2zIdrDqUyOg6XE6k/LklKNmJOOuAJmcxOAJ4BqOLiOCAVKa66DDlL0b K5tp2NI0iJua1U2AN8PYWq6/GFDkLbI= -----END CERTIFICATE-----Generated at Thu Nov 21 23:42:51 2024 by rpki-client on console-ams.rpki-client.org