$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4516b1a8-3cc6-31e8-8232-44ba18c93314.roa File: 4516b1a8-3cc6-31e8-8232-44ba18c93314.roa (raw, json) Hash identifier: 4Q3jyttDKZsBqPapm2pMA8rUm7Fg4RQGFg+Aj5AfTWQ= Subject key identifier: EE:73:76:CA:94:DE:0A:C8:73:53:E1:58:6C:6C:E2:FA:2B:92:96:12 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473AD481002CAE8F8B056F61F0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4516b1a8-3cc6-31e8-8232-44ba18c93314.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 172.70.84.0/24 maxlen: 24 172.70.85.0/24 maxlen: 24 172.70.86.0/24 maxlen: 24 172.70.88.0/24 maxlen: 24 172.70.89.0/24 maxlen: 24 172.70.90.0/24 maxlen: 24 172.70.91.0/24 maxlen: 24 172.70.157.0/24 maxlen: 24 172.70.160.0/24 maxlen: 24 172.70.161.0/24 maxlen: 24 172.70.162.0/24 maxlen: 24 172.70.163.0/24 maxlen: 24 172.71.26.0/24 maxlen: 24 172.71.176.0/24 maxlen: 24 172.71.177.0/24 maxlen: 24 172.71.178.0/24 maxlen: 24 172.71.179.0/24 maxlen: 24 172.71.240.0/24 maxlen: 24 172.71.241.0/24 maxlen: 24 172.71.242.0/24 maxlen: 24 172.71.243.0/24 maxlen: 24 198.41.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:d4:81:00:2c:ae:8f:8b:05:6f:61:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=c2e482f4-a5fc-4f6c-8930-4e0ad93c13eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:56:0c:0e:a2:cd:86:8b:c2:08:09:cd:c3:b0: 18:e3:15:13:81:ff:ec:a4:79:a9:32:9d:f8:50:02: ba:1d:08:05:b2:4a:9e:e0:16:f7:fb:ee:2a:e0:8e: 76:0f:09:31:59:ba:52:62:7f:30:4c:e3:a6:7b:aa: e9:99:68:bc:cc:47:2a:f0:80:44:30:28:2b:6a:03: 67:38:8a:ce:1d:b6:3e:8b:f7:27:00:f7:a0:1d:ff: f4:c9:ab:87:5f:0f:19:bd:07:9f:1c:12:4b:c7:02: cf:7d:33:b2:d1:a8:2b:dd:59:b7:6e:9c:a9:a6:c2: 17:ec:e5:e7:98:e9:10:85:3d:f3:84:92:0f:47:3d: e4:4f:d7:e7:04:72:27:46:5f:2a:90:8e:82:16:8e: 5a:53:6c:f3:ae:14:d2:5f:32:8c:cf:b1:0b:52:c3: 01:d7:8a:d7:76:e2:97:0e:42:1d:92:a1:dc:fd:ab: 30:c1:3e:7f:61:c1:84:db:bf:66:5e:ae:0b:da:df: 95:26:90:b9:07:50:72:0a:41:fd:a0:5c:ba:a8:a6: bc:cf:e2:71:99:27:71:94:4e:d8:dd:70:7e:b0:4f: b6:cb:11:16:09:32:fe:d5:a3:86:85:97:5e:57:b9: ca:da:79:75:83:dc:66:fb:46:54:e1:fb:b1:cd:a8: c4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:76:CA:94:DE:0A:C8:73:53:E1:58:6C:6C:E2:FA:2B:92:96:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4516b1a8-3cc6-31e8-8232-44ba18c93314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.84.0-172.70.86.255 172.70.88.0/22 172.70.157.0/24 172.70.160.0/22 172.71.26.0/24 172.71.176.0/22 172.71.240.0/22 198.41.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bc:27:f7:7c:7b:95:94:39:af:9f:0b:de:22:e9:a1:34:af: c8:71:d5:36:c7:b3:02:37:39:11:40:5d:66:88:b6:4d:97:9f: f6:83:3d:b4:b7:97:b9:b3:50:bf:bf:49:d7:58:ab:67:d2:2d: 69:ff:fb:ad:8a:95:24:50:31:43:43:78:e0:22:4f:38:b1:72: 2a:fe:d8:55:ab:ea:c0:29:c2:4f:62:fd:a6:c4:d9:b8:cd:1a: 81:36:43:8e:a2:9e:14:7a:52:c2:85:c7:2f:6d:be:6c:1d:e1: 10:b2:2c:19:a5:2d:7f:fb:d7:21:29:dc:ec:bf:08:1d:17:c9: 85:5b:35:0d:b5:d4:1b:ff:99:50:46:e8:b3:d7:80:73:80:2c: 19:66:ce:44:1e:e2:3b:b7:78:0a:cb:b9:3c:50:f2:54:3b:52: b8:9a:a4:49:b8:ae:46:3b:8c:e3:91:40:41:a3:7d:a8:7b:4d: 9d:85:a4:ce:39:08:29:6a:a9:14:97:ef:d4:ff:c6:45:9c:42: b9:59:2e:4b:24:6a:bd:34:b7:de:25:ad:7f:94:2b:ca:d3:e0: c6:45:12:ab:16:2d:4c:28:e4:77:3c:d3:83:4c:52:d8:de:d9: a4:97:24:67:26:be:84:ff:0e:90:24:73:e4:c4:43:13:d3:1b: 93:e3:29:d6 -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEc61IEALK6PiwVvYfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk YzJlNDgyZjQtYTVmYy00ZjZjLTg5MzAtNGUwYWQ5M2MxM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51YMDqLNhovCCAnNw7AY4xUTgf/spHmpMp34 UAK6HQgFskqe4Bb3++4q4I52DwkxWbpSYn8wTOOme6rpmWi8zEcq8IBEMCgragNn OIrOHbY+i/cnAPegHf/0yauHXw8ZvQefHBJLxwLPfTOy0agr3Vm3bpyppsIX7OXn mOkQhT3zhJIPRz3kT9fnBHInRl8qkI6CFo5aU2zzrhTSXzKMz7ELUsMB14rXduKX DkIdkqHc/aswwT5/YcGE279mXq4L2t+VJpC5B1ByCkH9oFy6qKa8z+JxmSdxlE7Y 3XB+sE+2yxEWCTL+1aOGhZdeV7nK2nl1g9xm+0ZU4fuxzajEzQIDAQABo4IDhzCC A4MwHQYDVR0OBBYEFO5zdsqU3grIc1PhWGxs4vorkpYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDUxNmIxYTgtM2NjNi0z MWU4LTgyMzItNDRiYTE4YzkzMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAKsRlQD BACsRlYDBAKsRlgDBACsRp0DBAKsRqADBACsRxoDBAKsR7ADBAKsR/ADBADGKeIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXrwn93x7lZQ5r58L3iLpoTSvyHHVNsezAjc5EUBdZoi2TZef9oM9 tLeXubNQv79J11irZ9Itaf/7rYqVJFAxQ0N44CJPOLFyKv7YVavqwCnCT2L9psTZ uM0agTZDjqKeFHpSwoXHL22+bB3hELIsGaUtf/vXISnc7L8IHRfJhVs1DbXUG/+Z UEbos9eAc4AsGWbORB7iO7d4Csu5PFDyVDtSuJqkSbiuRjuM45FAQaN9qHtNnYWk zjkIKWqpFJfv1P/GRZxCuVkuSyRqvTS33iWtf5QrytPgxkUSqxYtTCjkdzzTg0xS 2N7ZpJckZya+hP8OkCRz5MRDE9Mbk+Mp1g== -----END CERTIFICATE-----Generated at Fri Nov 22 02:01:03 2024 by rpki-client on console-ams.rpki-client.org