$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/e8d2685d-ff8d-3975-9fa8-23528876c5d5.roa File: e8d2685d-ff8d-3975-9fa8-23528876c5d5.roa (raw, json) Hash identifier: K+awZ9VTsjrK8ZrMalf4j2OIdAFwWwU6WOK7x3424jU= Subject key identifier: 7A:55:93:48:AB:42:FE:A0:22:F8:D3:64:93:41:79:35:8E:F1:BA:59 Certificate issuer: /CN=5fb6f799-d584-48a1-9c74-50e91497918a Certificate serial: 010D0C9F43285847ED24B9A9831A2EC651228FC0 Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/e8d2685d-ff8d-3975-9fa8-23528876c5d5.roa Signing time: Tue 19 Nov 2024 02:00:27 +0000 ROA not before: Tue 19 Nov 2024 02:00:27 +0000 ROA not after: Mon 17 Feb 2025 02:00:27 +0000 asID: 7018 IP address blocks: 23.112.0.0/12 maxlen: 12 45.16.0.0/12 maxlen: 12 99.32.0.0/12 maxlen: 12 99.112.0.0/12 maxlen: 12 104.0.0.0/12 maxlen: 12 104.48.0.0/12 maxlen: 12 104.176.0.0/12 maxlen: 12 107.128.0.0/12 maxlen: 12 107.192.0.0/12 maxlen: 12 107.208.0.0/12 maxlen: 12 162.224.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ed:24:b9:a9:83:1a:2e:c6:51:22:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a Validity Not Before: Nov 19 02:00:27 2024 GMT Not After : Feb 17 02:00:27 2025 GMT Subject: CN=e8237b75-2815-41f4-a4fb-4e5f8bc6d3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:79:aa:4e:04:67:43:33:98:64:fd:30:a1:3d: 73:c0:17:69:e1:e4:76:d2:d1:c6:d8:45:1f:0d:c8: b8:38:2b:19:9c:74:e2:ba:2b:58:ea:c2:69:51:9c: 3e:9e:d4:1c:58:af:1d:84:2e:bd:de:eb:4d:9e:d9: 58:cc:37:07:83:94:3e:ba:55:d8:5d:9b:50:ab:c1: f7:b9:ab:51:80:d2:70:0f:c6:ff:64:85:4e:f4:a3: 20:9e:a6:69:f4:80:be:ab:a6:cc:0c:04:98:e1:41: f1:fb:eb:8b:4c:0b:6f:3b:32:ea:4e:58:9e:df:8f: 52:80:54:9f:b9:8a:3e:d9:df:f9:28:73:90:91:ba: 57:bb:a8:22:f5:93:11:7a:78:64:88:34:93:ff:2b: 03:da:7f:1d:48:81:11:db:13:9e:44:65:9b:ab:ee: cc:db:6f:b9:9f:4f:74:f3:e1:24:c6:71:78:fb:25: 2b:4b:e6:43:87:bb:ff:00:4c:ff:a0:46:cf:24:fe: 2a:b6:56:fd:24:91:f5:13:25:0f:0f:ce:a3:91:dd: 3b:8b:a1:f2:b8:99:a6:25:2e:a0:2d:38:8e:ff:2b: 22:f4:34:c9:c9:d1:70:6b:e7:d6:b7:13:47:e3:1c: 11:0d:7c:e2:4e:88:71:a8:d9:d8:40:d2:80:4b:17: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:93:48:AB:42:FE:A0:22:F8:D3:64:93:41:79:35:8E:F1:BA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/e8d2685d-ff8d-3975-9fa8-23528876c5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl X509v3 Authority Key Identifier: keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer sbgp-ipAddrBlock: critical IPv4: 23.112.0.0/12 45.16.0.0/12 99.32.0.0/12 99.112.0.0/12 104.0.0.0/12 104.48.0.0/12 104.176.0.0/12 107.128.0.0/12 107.192.0.0/11 162.224.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e9:a4:9a:ee:70:34:f4:0e:c3:04:04:ac:eb:fb:42:c7:4c: a0:79:ee:3a:98:a8:a4:00:9a:53:9a:6d:be:20:c6:6d:14:db: 16:73:bd:a2:37:4f:cd:ad:d6:8e:ef:f4:71:bd:c8:b8:34:7a: db:09:99:dc:e8:19:62:d1:90:25:f0:63:10:60:c1:ad:1d:45: 29:44:e2:f7:9a:28:98:b8:dd:16:17:4a:6f:2f:cc:a6:25:76: d5:44:45:fc:b8:16:54:ee:88:2b:8e:14:76:62:8b:59:4a:d5: 94:14:8d:30:c4:52:51:40:b0:a4:c6:70:b0:4a:07:47:a2:1f: b6:45:b2:e7:94:96:4b:52:8b:3c:79:47:7a:82:ed:02:6a:f5: 23:74:26:3d:c8:d6:34:03:e3:b0:1f:f2:f2:97:b2:88:a0:53: 5a:91:8e:bf:1b:71:63:73:d6:7c:4a:28:6a:5e:b3:d3:d4:b4: 58:9b:33:03:3f:06:96:cd:d8:dc:9b:31:fd:92:6a:ad:25:27: 7f:04:ca:1a:5b:c9:62:9a:9e:20:87:49:18:22:08:60:f7:38: 82:d0:31:d6:7a:54:fe:7a:f1:2d:09:44:bb:78:3f:d0:44:2c: af:96:22:3c:41:6a:3d:62:d8:5f:ac:3b:1b:0c:74:bb:ae:1f: 72:12:fe:31 -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEftJLmpgxouxlEij8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZiNmY3OTktZDU4NC00OGExLTljNzQtNTBlOTE0OTc5 MThhMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk ZTgyMzdiNzUtMjgxNS00MWY0LWE0ZmItNGU1ZjhiYzZkM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXmqTgRnQzOYZP0woT1zwBdp4eR20tHG2EUf Dci4OCsZnHTiuitY6sJpUZw+ntQcWK8dhC693utNntlYzDcHg5Q+ulXYXZtQq8H3 uatRgNJwD8b/ZIVO9KMgnqZp9IC+q6bMDASY4UHx++uLTAtvOzLqTlie349SgFSf uYo+2d/5KHOQkbpXu6gi9ZMRenhkiDST/ysD2n8dSIER2xOeRGWbq+7M22+5n090 8+EkxnF4+yUrS+ZDh7v/AEz/oEbPJP4qtlb9JJH1EyUPD86jkd07i6HyuJmmJS6g LTiO/ysi9DTJydFwa+fWtxNH4xwRDXziTohxqNnYQNKASxcNFwIDAQABo4IDgTCC A30wHQYDVR0OBBYEFHpVk0irQv6gIvjTZJNBeTWO8bpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2 Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5MTQ5NzkxOGEvZThkMjY4NWQtZmY4ZC0z OTc1LTlmYTgtMjM1Mjg4NzZjNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZiNmY3OTktZDU4NC00OGExLTlj NzQtNTBlOTE0OTc5MThhLzVmYjZmNzk5LWQ1ODQtNDhhMS05Yzc0LTUwZTkxNDk3 OTE4YS5jcmwwHwYDVR0jBBgwFoAUtGY/zm+cZ0UESsNDkbc3qfziJlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmI2Zjc5OS1kNTg0LTQ4YTEtOWM3NC01MGU5 MTQ5NzkxOGEuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwMEF3ADAwQt EAMDBGMgAwMEY3ADAwRoAAMDBGgwAwMEaLADAwRrgAMDBWvAAwMEouAwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEApumkmu5wNPQOwwQErOv7QsdMoHnuOpiopACaU5ptviDGbRTbFnO9ojdPza3W ju/0cb3IuDR62wmZ3OgZYtGQJfBjEGDBrR1FKUTi95oomLjdFhdKby/MpiV21URF /LgWVO6IK44UdmKLWUrVlBSNMMRSUUCwpMZwsEoHR6IftkWy55SWS1KLPHlHeoLt Amr1I3QmPcjWNAPjsB/y8peyiKBTWpGOvxtxY3PWfEooal6z09S0WJszAz8Gls3Y 3Jsx/ZJqrSUnfwTKGlvJYpqeIIdJGCIIYPc4gtAx1npU/nrxLQlEu3g/0EQsr5Yi PEFqPWLYX6w7Gwx0u64fchL+MQ== -----END CERTIFICATE-----Generated at Thu Nov 21 16:14:06 2024 by rpki-client on console-ams.rpki-client.org