$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa File: 161d2218-a9be-3c8e-b719-b8cb4143902d.roa (raw, json) Hash identifier: aaHS4dlIhX3sMrCPOZZS04mlS1qvTaYK9JpHZbZ9h0g= Subject key identifier: 41:5A:5F:68:4E:AF:11:54:72:9C:46:81:AB:36:10:D2:1D:57:56:1A Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F43285847AB6C19EAFF3C53594BAAB000 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 237 IP address blocks: 35.38.192.0/18 maxlen: 18 35.39.0.0/19 maxlen: 19 35.39.32.0/19 maxlen: 19 35.39.64.0/19 maxlen: 19 35.39.128.0/19 maxlen: 19 35.39.160.0/19 maxlen: 19 35.39.192.0/19 maxlen: 19 35.39.224.0/19 maxlen: 19 35.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:19:ea:ff:3c:53:59:4b:aa:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=97977a92-ec98-4432-87e5-894ae279e901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:ab:01:00:d6:5d:5f:f0:0a:41:06:cf:15: 63:a1:18:7d:7d:07:e2:5c:bf:1a:0e:99:9e:84:a3: 75:a2:d8:41:06:5f:23:90:d6:9b:06:c2:84:4d:b0: de:ed:9d:e5:fd:c8:44:0f:b7:9a:c2:8b:cd:38:10: 59:1c:e8:b6:d6:95:1b:42:9f:69:d4:19:21:fa:f4: e3:3d:c4:b0:fd:00:a1:00:88:dc:e1:bf:3f:03:8d: cc:2a:d2:1f:77:92:0a:7f:4e:2e:de:99:f1:bc:0d: 9a:86:cb:f8:9a:69:b2:d7:15:65:29:1e:a8:bc:93: a4:b7:18:8d:bb:72:8c:a3:a1:bf:65:62:b6:25:c3: d6:53:c3:cd:43:b4:88:1c:cd:c5:f0:7c:18:d6:c6: 50:db:8c:51:24:0d:2d:fb:0e:c3:cf:70:05:19:35: db:a9:ab:43:46:61:a4:02:a7:5d:a3:29:21:e4:1c: ac:fb:6f:a1:1f:78:58:0e:50:b5:eb:2c:4b:b0:45: d8:8f:f8:4f:cb:49:c7:7c:6a:ea:a7:f3:7a:99:86: ab:9a:7e:43:5b:38:f9:72:d3:5a:0f:3a:6e:2d:be: 6a:b6:d1:d5:f0:a4:5b:d7:d1:53:fb:a5:7e:b4:39: 70:6d:36:ef:26:82:af:89:31:a0:1d:75:bb:2b:90: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5A:5F:68:4E:AF:11:54:72:9C:46:81:AB:36:10:D2:1D:57:56:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/161d2218-a9be-3c8e-b719-b8cb4143902d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.38.192.0-35.39.95.255 35.39.128.0-35.40.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:44:eb:34:d5:26:30:bd:8d:21:1e:9d:35:06:9c:72:1f:53: df:94:84:19:68:56:65:c6:9d:a7:a8:3b:87:51:21:74:a3:86: ae:78:72:35:55:9d:44:5f:01:d0:00:42:1d:22:17:2b:8e:e6: 6c:c2:b2:1b:7b:82:4e:09:1c:96:cf:52:e8:15:4c:78:a5:30: 44:21:fa:11:f1:09:c0:21:03:12:f1:76:86:d5:9d:56:f3:e5: a2:fa:7f:78:6f:c4:72:2a:8c:4f:cf:b2:ec:53:b0:c8:94:2a: 2d:c6:14:50:e6:74:76:33:38:3d:f0:96:94:dd:78:b1:b1:c4: 7f:5d:a1:0c:cb:fa:95:e9:81:df:b9:31:5c:b9:3f:2e:1e:fa: d8:4c:d3:5a:ba:b0:91:1e:11:56:65:be:4e:b7:07:36:a4:80: e0:88:e1:5b:17:72:47:dd:f4:a9:4b:84:53:13:f7:91:d8:33: 68:fe:e2:26:fc:06:0a:ff:5d:1b:fd:23:a2:92:6d:3b:87:db: 2a:2e:f9:2b:fb:4f:c3:a1:52:fa:07:a2:fa:23:78:e3:b1:53: 7d:0a:ca:fd:81:32:5f:36:10:6f:5b:99:ea:da:9f:df:52:0b: 0b:a1:e6:82:71:45:74:b0:3d:38:df:87:3d:cf:71:b5:b6:34: 07:22:bc:3a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEerbBnq/zxTWUuqsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk OTc5NzdhOTItZWM5OC00NDMyLTg3ZTUtODk0YWUyNzllOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yWrAQDWXV/wCkEGzxVjoRh9fQfiXL8aDpme hKN1othBBl8jkNabBsKETbDe7Z3l/chED7eawovNOBBZHOi21pUbQp9p1Bkh+vTj PcSw/QChAIjc4b8/A43MKtIfd5IKf04u3pnxvA2ahsv4mmmy1xVlKR6ovJOktxiN u3KMo6G/ZWK2JcPWU8PNQ7SIHM3F8HwY1sZQ24xRJA0t+w7Dz3AFGTXbqatDRmGk Aqddoykh5Bys+2+hH3hYDlC16yxLsEXYj/hPy0nHfGrqp/N6mYarmn5DWzj5ctNa DzpuLb5qttHV8KRb19FT+6V+tDlwbTbvJoKviTGgHXW7K5DkXQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFEFaX2hOrxFUcpxGgas2ENIdV1YaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvMTYxZDIyMTgtYTliZS0z YzhlLWI3MTktYjhjYjQxNDM5MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAwDBAYjJsAD BAUjJ0AwCwMEByMngAMDACMoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC1E6zTVJjC9jSEenTUGnHIfU9+U hBloVmXGnaeoO4dRIXSjhq54cjVVnURfAdAAQh0iFyuO5mzCsht7gk4JHJbPUugV THilMEQh+hHxCcAhAxLxdobVnVbz5aL6f3hvxHIqjE/PsuxTsMiUKi3GFFDmdHYz OD3wlpTdeLGxxH9doQzL+pXpgd+5MVy5Py4e+thM01q6sJEeEVZlvk63BzakgOCI 4VsXckfd9KlLhFMT95HYM2j+4ib8Bgr/XRv9I6KSbTuH2you+Sv7T8OhUvoHovoj eOOxU30Kyv2BMl82EG9bmeran99SCwuh5oJxRXSwPTjfhz3PcbW2NAcivDo= -----END CERTIFICATE-----Generated at Thu Nov 21 15:28:49 2024 by rpki-client on console-fra.rpki-client.org