$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa File: 8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa (raw, json) Hash identifier: 80xiLqIEYZZNZIAIoYlw6u9X2GUBN+sYBkw2sqqeBKo= Subject key identifier: 8F:2D:59:D2:8F:5F:C9:D9:EA:A3:1F:01:63:02:AA:61:AC:33:BA:93 Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Certificate serial: 010D0C9F43285847C1DF4C4C65A512441707D200 Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa Signing time: Sun 03 Nov 2024 14:00:49 +0000 ROA not before: Sun 03 Nov 2024 14:00:49 +0000 ROA not after: Sat 01 Feb 2025 14:00:49 +0000 asID: 62715 IP address blocks: 64.207.222.0/23 maxlen: 24 67.222.252.0/22 maxlen: 24 68.65.192.0/21 maxlen: 24 103.8.239.0/24 maxlen: 24 162.222.40.0/21 maxlen: 24 216.9.196.0/23 maxlen: 24 216.9.198.0/24 maxlen: 24 2606:4a80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c1:df:4c:4c:65:a5:12:44:17:07:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5 Validity Not Before: Nov 3 14:00:49 2024 GMT Not After : Feb 1 14:00:49 2025 GMT Subject: CN=a5fd10b1-d3df-4bf6-b67d-ee76248be65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:38:84:0f:15:e7:92:be:de:1a:bb:88:1b: 42:17:ad:98:26:1f:f0:86:16:06:52:84:fa:a9:8d: 82:58:c2:14:13:69:fe:3b:b7:92:5e:1b:8f:bc:f3: 2d:05:e3:75:ed:65:45:2e:55:18:a5:5c:dd:38:23: 6a:66:48:77:ab:95:54:08:9f:e7:9a:77:1b:56:20: de:a6:7f:09:ae:17:79:dc:80:d2:ee:16:b6:a0:1c: 49:4a:5b:79:61:69:e9:64:36:31:cf:97:f8:83:17: db:70:58:8b:e9:9f:50:72:51:dc:37:8b:30:73:a6: a0:ae:05:43:77:53:65:52:41:77:9f:db:6a:c6:23: 6f:53:6a:31:15:98:68:fa:84:de:7e:c2:5f:a6:19: 4d:57:f8:f1:5b:e1:21:c2:0c:67:84:0c:b4:80:3c: 25:58:16:a2:51:ec:17:0f:5f:44:40:1b:2f:1d:69: 3f:13:30:36:5e:f6:83:90:d5:4e:41:78:8b:f5:d9: fa:32:5b:8a:ba:4a:e8:74:ad:3d:db:23:21:85:68: 85:ae:12:22:72:6e:81:2c:35:b8:0b:97:31:66:8b: bc:95:d2:bb:0f:e3:55:64:7c:aa:b7:9d:7a:89:98: aa:40:16:cd:9a:fd:59:c0:4e:c2:79:81:30:42:18: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:59:D2:8F:5F:C9:D9:EA:A3:1F:01:63:02:AA:61:AC:33:BA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/8042e5a5-cb9b-3d3d-ace3-2de1e2272c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl X509v3 Authority Key Identifier: keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer sbgp-ipAddrBlock: critical IPv4: 64.207.222.0/23 67.222.252.0/22 68.65.192.0/21 103.8.239.0/24 162.222.40.0/21 216.9.196.0-216.9.198.255 IPv6: 2606:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:40:de:c6:53:10:20:fb:2a:52:7b:c0:ca:cf:c8:9f:fa:43: 4a:77:e0:e2:a8:53:95:a4:c0:10:bc:4e:9b:13:ad:a6:34:4d: d0:5f:34:15:8a:9f:8c:3d:a6:b2:b6:f5:f8:d9:8f:83:f9:d6: 09:74:c5:19:3f:ec:4f:cd:b6:4d:ea:ff:51:3c:74:82:fc:9b: fe:95:a0:22:19:3d:14:ec:67:fc:ed:6b:68:d2:8b:4f:bd:04: 97:56:77:02:f8:d2:80:f5:92:7b:e8:e4:fe:87:36:0f:84:da: 52:21:e8:f7:81:ad:38:2c:c7:bc:95:29:e3:53:ee:b8:9b:1c: 67:16:b9:15:e2:29:5b:59:2a:50:bf:8d:e1:4b:a0:7e:cf:f4: 8c:e4:b3:89:78:48:03:1e:71:fb:a5:99:e7:1b:7d:75:00:b6: f9:af:a2:11:9c:87:1e:d8:7d:34:b9:db:06:e8:1f:bf:c4:fc: db:22:04:19:03:e1:7c:ed:10:51:03:6a:82:ad:1a:a8:23:19: 28:62:bb:08:cd:5f:20:5d:cb:5f:6e:57:da:45:64:18:bb:a8: e0:7b:7d:06:2d:4e:c1:b0:da:ef:42:b9:62:b1:b2:87:88:15: a1:d7:45:a2:f7:be:eb:d1:dc:db:ac:ef:be:81:bf:40:b1:df: 2f:88:30:d3 -----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWEfB30xMZaUSRBcH0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllM2NkZTEtOGFiMi00MzQzLWE1OTctMjRlNmRiNWM4 ZmU1MB4XDTI0MTEwMzE0MDA0OVoXDTI1MDIwMTE0MDA0OVowLzEtMCsGA1UEAxMk YTVmZDEwYjEtZDNkZi00YmY2LWI2N2QtZWU3NjI0OGJlNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQ4hA8V55K+3hq7iBtCF62YJh/whhYGUoT6 qY2CWMIUE2n+O7eSXhuPvPMtBeN17WVFLlUYpVzdOCNqZkh3q5VUCJ/nmncbViDe pn8Jrhd53IDS7ha2oBxJSlt5YWnpZDYxz5f4gxfbcFiL6Z9QclHcN4swc6agrgVD d1NlUkF3n9tqxiNvU2oxFZho+oTefsJfphlNV/jxW+EhwgxnhAy0gDwlWBaiUewX D19EQBsvHWk/EzA2XvaDkNVOQXiL9dn6MluKukrodK092yMhhWiFrhIicm6BLDW4 C5cxZou8ldK7D+NVZHyqt516iZiqQBbNmv1ZwE7CeYEwQhh12QIDAQABo4IDijCC A4YwHQYDVR0OBBYEFI8tWdKPX8nZ6qMfAWMCqmGsM7qTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUz Y2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2ZGI1YzhmZTUvODA0MmU1YTUtY2I5Yi0z ZDNkLWFjZTMtMmRlMWUyMjcyYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODllM2NkZTEtOGFiMi00MzQzLWE1 OTctMjRlNmRiNWM4ZmU1Lzg5ZTNjZGUxLThhYjItNDM0My1hNTk3LTI0ZTZkYjVj OGZlNS5jcmwwHwYDVR0jBBgwFoAUC3drIWzbMlwhsUiL5FVLiXcMGx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWUzY2RlMS04YWIyLTQzNDMtYTU5Ny0yNGU2 ZGI1YzhmZTUuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQBQM/eAwQC Q978AwQDREHAAwQAZwjvAwQDot4oMAwDBALYCcQDBADYCcYwDQQCAAIwBwMFACYG SoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALEDexlMQIPsqUnvAys/In/pDSnfg4qhTlaTAELxOmxOtpjRN 0F80FYqfjD2msrb1+NmPg/nWCXTFGT/sT822Ter/UTx0gvyb/pWgIhk9FOxn/O1r aNKLT70El1Z3AvjSgPWSe+jk/oc2D4TaUiHo94GtOCzHvJUp41PuuJscZxa5FeIp W1kqUL+N4Uugfs/0jOSziXhIAx5x+6WZ5xt9dQC2+a+iEZyHHth9NLnbBugfv8T8 2yIEGQPhfO0QUQNqgq0aqCMZKGK7CM1fIF3LX25X2kVkGLuo4Ht9Bi1OwbDa70K5 YrGyh4gVoddFove+69Hc26zvvoG/QLHfL4gw0w== -----END CERTIFICATE-----Generated at Mon Nov 25 19:15:58 2024 by rpki-client on console-ams.rpki-client.org