$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa File: 3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa (raw, json) Hash identifier: 9ZhtDEMr+AnpQAphNcc2C3Wnji8Tpij0JQPC2qg3iPE= Subject key identifier: 47:C0:3D:87:F3:7D:21:D3:7C:DE:C4:88:06:04:D8:27:42:8A:11:E5 Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Certificate serial: 010D0C9F432858451A1589A545D9A0A78E6C2DE0 Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa Signing time: Tue 05 Mar 2024 02:00:26 +0000 ROA not before: Tue 05 Mar 2024 02:00:26 +0000 ROA not after: Mon 03 Jun 2024 01:00:26 +0000 asID: 27580 IP address blocks: 104.153.154.0/23 maxlen: 24 104.153.153.0/24 maxlen: 24 104.153.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1a:15:89:a5:45:d9:a0:a7:8e:6c:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Validity Not Before: Mar 5 02:00:26 2024 GMT Not After : Jun 3 01:00:26 2024 GMT Subject: CN=286b9542-558d-44b1-94b0-1350ab28b61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:7d:18:e0:40:bc:76:2f:39:41:4a:33:6b: aa:92:83:4e:43:f2:48:e7:02:cd:01:c5:44:f1:89: 7b:35:0f:ad:21:e5:fa:27:84:d7:41:98:86:f9:ab: b1:c2:3d:c6:6b:6e:2f:d1:84:aa:39:6a:cf:aa:20: 2f:05:19:e0:05:3f:d3:dc:17:11:66:ff:58:d0:32: 2e:ef:cf:51:5d:e3:99:e2:d1:6e:b4:c5:76:5b:2e: b1:cf:59:26:d1:5a:a5:e5:fa:8e:4a:2c:cf:4f:07: 90:70:29:b4:e8:07:3e:8e:9b:9c:f4:01:9f:91:f3: b2:28:85:dd:8e:f2:a5:cb:07:a2:e7:21:84:ef:be: 5e:5f:20:1a:78:14:ff:d4:ae:4e:60:c7:81:ac:6c: 04:67:04:1f:63:d3:d9:d5:d6:b3:f3:4c:e4:9c:9b: 7d:8e:98:36:81:4c:62:c5:54:c9:43:93:8d:43:49: 6d:48:f3:b0:61:63:9d:8c:f6:07:52:54:f4:47:c9: b8:5d:1d:52:62:a7:9f:b3:59:d0:46:3e:9e:14:d9: 6d:fd:20:29:6f:12:3f:74:d1:39:53:b8:1d:c5:b0: 49:66:05:a7:74:45:7b:62:fa:76:ef:64:a0:46:ae: 14:38:e9:24:51:97:52:c8:08:3b:38:59:6a:ed:cb: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:3D:87:F3:7D:21:D3:7C:DE:C4:88:06:04:D8:27:42:8A:11:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl X509v3 Authority Key Identifier: keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer sbgp-ipAddrBlock: critical IPv4: 104.153.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d5:b6:85:26:1e:52:7a:a2:62:42:81:04:3e:5a:d4:b7:df: 33:70:2d:da:50:06:41:60:bb:91:1a:90:ab:82:47:c6:b3:60: fc:ef:17:d3:33:6f:0e:27:bf:74:1b:cd:5d:67:d3:71:88:df: 3a:93:0b:22:af:d2:6c:46:02:d4:c8:41:34:2a:ef:f0:a1:57: 10:c8:e3:17:64:98:4d:aa:3f:73:9f:02:0c:f3:32:f2:21:22: 9f:2c:7c:e4:6d:9e:ba:57:36:1c:df:e4:56:92:4c:df:50:f7: 0c:c1:28:79:8a:ef:eb:b3:92:a5:1a:71:d3:d0:72:32:28:f6: 8b:7f:27:3c:a0:54:5f:2c:68:76:39:ac:72:f5:73:11:33:e8: fe:bf:44:4e:53:ff:d5:16:83:64:51:c4:9a:82:80:38:01:28: 63:47:9a:bb:d7:7e:0f:36:30:88:b0:e7:43:77:ba:9f:7b:92: 0d:91:10:c0:db:0b:4e:0d:65:18:ef:a3:55:1a:39:a0:a8:4c: d7:bc:f9:b9:24:24:02:d4:28:53:fd:ef:55:d3:f2:52:61:69: 76:e9:6c:20:fd:08:0e:7c:0f:54:22:f3:45:0b:aa:a4:9c:41: 79:20:4d:fa:4d:80:04:ef:db:bb:0f:ba:8f:50:1a:54:8d:38: 6e:2a:2b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFYmlRdmgp45sLeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx YWQ5MB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk Mjg2Yjk1NDItNTU4ZC00NGIxLTk0YjAtMTM1MGFiMjhiNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAR9GOBAvHYvOUFKM2uqkoNOQ/JI5wLNAcVE 8Yl7NQ+tIeX6J4TXQZiG+auxwj3Ga24v0YSqOWrPqiAvBRngBT/T3BcRZv9Y0DIu 789RXeOZ4tFutMV2Wy6xz1km0Vql5fqOSizPTweQcCm06Ac+jpuc9AGfkfOyKIXd jvKlywei5yGE775eXyAaeBT/1K5OYMeBrGwEZwQfY9PZ1daz80zknJt9jpg2gUxi xVTJQ5ONQ0ltSPOwYWOdjPYHUlT0R8m4XR1SYqefs1nQRj6eFNlt/SApbxI/dNE5 U7gdxbBJZgWndEV7Yvp272SgRq4UOOkkUZdSyAg7OFlq7csGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfAPYfzfSHTfN7EiAYE2CdCihHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvM2ViNjI4ZjEtMWZmNS0z MTQ1LWEwZTMtNjNkN2U2MDdjZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2 MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh NDA1NjFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDVtoUmHlJ6omJCgQQ+WtS33zNwLdpQBkFgu5EakKuCR8azYPzvF9Mz bw4nv3QbzV1n03GI3zqTCyKv0mxGAtTIQTQq7/ChVxDI4xdkmE2qP3OfAgzzMvIh Ip8sfORtnrpXNhzf5FaSTN9Q9wzBKHmK7+uzkqUacdPQcjIo9ot/JzygVF8saHY5 rHL1cxEz6P6/RE5T/9UWg2RRxJqCgDgBKGNHmrvXfg82MIiw50N3up97kg2REMDb C04NZRjvo1UaOaCoTNe8+bkkJALUKFP971XT8lJhaXbpbCD9CA58D1Qi80ULqqSc QXkgTfpNgATv27sPuo9QGlSNOG4qKxM= -----END CERTIFICATE-----Generated at Sun May 19 03:00:33 2024 by rpki-client on console-ams.rpki-client.org