$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa File: afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa (raw, json) Hash identifier: 1endiPgD8LYw+oc4/et8TGYvgMLKENuw6PInhRv/+UA= Subject key identifier: 70:47:B4:1B:17:3F:80:1A:8B:D9:7A:C3:FC:CB:73:6A:EB:57:21:57 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F432858480BDA686CAE8D0064BDED2720 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 55992 IP address blocks: 104.192.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:68:6c:ae:8d:00:64:bd:ed:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=123bded7-4df3-4113-8800-f7a5769867e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:9b:7d:43:a0:71:b7:e6:6e:ec:13:cf:46: 02:d9:2f:19:25:7c:50:ad:2b:06:12:1c:08:03:58: 4c:1a:f4:16:ff:82:65:ac:c7:e6:fa:c7:92:93:e3: 67:53:2f:be:ff:2c:28:17:85:7c:93:8d:4f:3d:ed: d0:45:91:36:83:dd:7f:90:34:04:8e:63:41:db:33: 43:5c:26:f2:ea:2a:9e:d4:f7:f7:a5:b0:b6:a9:84: c4:05:cc:71:94:85:07:3d:2b:1f:b8:1e:8b:1f:a9: c7:bd:bd:54:16:79:e1:d3:0c:e7:39:16:23:77:50: 71:41:a5:1f:f9:68:5a:ef:bf:10:6c:39:23:52:5e: 13:df:4e:7f:9d:0c:78:a6:f7:34:db:e1:2b:c4:13: 13:09:67:be:1b:66:6d:ad:1d:bc:e2:f5:8f:30:7f: 45:78:ff:2c:94:f1:9b:51:01:b8:b2:5a:70:6e:f7: 91:57:eb:b1:8c:69:e1:d8:4e:27:d7:73:b7:b1:98: 44:ba:00:26:84:58:13:82:2a:85:84:70:4c:3a:a8: ce:b4:df:06:0a:14:c6:c7:cf:b4:06:a8:59:26:f7: 33:b5:33:b6:c4:32:b1:ce:f2:96:c9:55:b0:62:9e: 5f:03:50:5e:40:f8:ca:ca:6e:7d:eb:91:c7:2d:c4: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:B4:1B:17:3F:80:1A:8B:D9:7A:C3:FC:CB:73:6A:EB:57:21:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 104.192.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e9:b5:96:3c:bb:a3:1e:0e:07:36:f3:75:bc:0f:cb:45:be: 28:c2:90:2b:33:4e:5a:82:98:34:88:c9:f1:56:83:0a:c3:6e: 27:bf:03:8c:09:88:23:05:d2:09:5d:02:3c:2e:3e:43:01:55: 23:a9:82:7e:0a:73:af:d2:f3:e2:6c:65:02:c7:34:a8:25:ad: d9:69:e5:5d:a7:2b:36:4b:e1:cb:31:c7:66:a6:d0:3c:de:f8: b5:04:e0:41:eb:df:b4:71:37:35:fe:5f:2a:a9:40:f7:7b:9e: b4:b4:fc:43:28:fd:2e:88:4f:43:1a:5b:59:44:8e:63:20:5e: 89:f7:69:a9:b2:9e:79:8d:b6:ce:d7:3a:21:a8:8d:4f:c0:de: b8:9c:64:86:fd:19:58:ae:d4:d1:1c:0a:3a:de:75:9e:09:12: 00:60:2c:b0:e7:de:df:e2:b1:29:db:ae:82:b6:a4:3c:6c:07: da:cb:76:6a:a0:fd:eb:7b:31:70:b9:1a:19:01:65:e2:96:45: 51:68:49:0f:df:2d:c0:8b:31:e7:c6:d0:75:21:06:7b:1c:ea: eb:f6:17:02:93:ab:78:f0:9a:f0:b9:3a:0e:5d:12:b0:93:f9: 1b:86:e1:7f:d0:c9:2c:98:e4:12:7f:05:a0:35:dc:db:34:e7: 4d:06:0a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mhsro0AZL3tJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MTIzYmRlZDctNGRmMy00MTEzLTg4MDAtZjdhNTc2OTg2N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy2bfUOgcbfmbuwTz0YC2S8ZJXxQrSsGEhwI A1hMGvQW/4JlrMfm+seSk+NnUy++/ywoF4V8k41PPe3QRZE2g91/kDQEjmNB2zND XCby6iqe1Pf3pbC2qYTEBcxxlIUHPSsfuB6LH6nHvb1UFnnh0wznORYjd1BxQaUf +Wha778QbDkjUl4T305/nQx4pvc02+ErxBMTCWe+G2ZtrR284vWPMH9FeP8slPGb UQG4slpwbveRV+uxjGnh2E4n13O3sZhEugAmhFgTgiqFhHBMOqjOtN8GChTGx8+0 BqhZJvcztTO2xDKxzvKWyVWwYp5fA1BeQPjKym5965HHLcRekQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBHtBsXP4Aai9l6w/zLc2rrVyFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvYWZjNTk5ZjktY2FkYy0z NTY4LWExZWMtOTVjM2NkN2ViYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLptZY8u6MeDgc283W8D8tFvijCkCszTlqCmDSIyfFWgwrDbie/A4wJ iCMF0gldAjwuPkMBVSOpgn4Kc6/S8+JsZQLHNKglrdlp5V2nKzZL4csxx2am0Dze +LUE4EHr37RxNzX+XyqpQPd7nrS0/EMo/S6IT0MaW1lEjmMgXon3aamynnmNts7X OiGojU/A3ricZIb9GViu1NEcCjredZ4JEgBgLLDn3t/isSnbroK2pDxsB9rLdmqg /et7MXC5GhkBZeKWRVFoSQ/fLcCLMefG0HUhBnsc6uv2FwKTq3jwmvC5Og5dErCT +RuG4X/QySyY5BJ/BaA13Ns0500GCrA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:58 2025 by rpki-client