$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa File: 28f16384-eb96-3fc5-961a-187be7f3b5a2.roa (raw, json) Hash identifier: gPMWLOLe5t3f104ESa71UIi0UsORAxZUurfNxR528MI= Subject key identifier: BC:C4:26:C6:62:48:F9:A5:F5:D5:96:89:2F:2C:01:B8:BE:F7:6E:68 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858472C65DE3131DE36C509BF1580 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 22781 IP address blocks: 216.131.64.0/22 maxlen: 22 216.131.69.0/24 maxlen: 24 216.131.70.0/23 maxlen: 23 216.131.90.0/23 maxlen: 23 216.131.92.0/22 maxlen: 22 216.131.96.0/21 maxlen: 21 216.131.113.0/24 maxlen: 24 216.131.115.0/24 maxlen: 24 216.131.119.0/24 maxlen: 24 216.131.122.0/23 maxlen: 23 216.131.124.0/22 maxlen: 22 216.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:de:31:31:de:36:c5:09:bf:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=0b6364fa-806c-4a5e-a6bb-dd14695f62af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:a3:90:1b:05:95:f4:02:3e:54:28:01:8e: 58:76:3d:b1:67:66:b3:c3:c4:b4:f5:4b:12:7f:f9: 12:1b:a0:40:e2:17:81:fd:6d:a6:d6:1c:64:94:14: 7a:29:91:0a:f4:d9:a4:88:50:a1:68:82:20:bb:6c: 09:49:19:a3:9b:b9:4e:53:47:11:21:a1:38:15:8b: 1f:bc:69:2b:e7:1e:15:94:2e:d2:37:16:8e:89:5a: fd:9a:18:72:65:66:ca:07:3b:80:28:45:be:48:18: bf:e5:46:3d:87:c9:37:0c:e0:9a:a2:1b:5f:a8:9a: ea:f2:51:e3:3a:7b:d0:45:f7:ef:b7:5b:cf:eb:d1: e2:a6:1e:fb:f7:99:7c:61:d5:03:f8:8f:80:b9:0a: 43:af:d0:ff:d7:45:da:43:38:bb:a1:98:51:eb:7b: 05:91:49:9b:48:dd:c0:bf:01:44:74:96:ef:61:c3: 11:c8:01:21:0a:25:46:13:c8:27:c5:d8:e6:e6:da: f9:15:41:34:35:ac:07:ab:af:b3:50:35:0c:d8:18: fa:31:5c:14:2b:65:7c:d8:d2:b2:a4:08:b3:86:cc: f1:6e:a9:07:2c:c7:59:24:57:a3:81:34:3a:83:8f: 59:a0:e4:b0:65:f1:98:bc:6d:dd:7d:10:59:8d:23: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C4:26:C6:62:48:F9:A5:F5:D5:96:89:2F:2C:01:B8:BE:F7:6E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.64.0/22 216.131.69.0-216.131.71.255 216.131.90.0-216.131.103.255 216.131.113.0/24 216.131.115.0/24 216.131.119.0/24 216.131.122.0-216.131.127.255 216.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:86:8d:0d:36:bf:5c:05:1c:0e:8b:92:b6:12:b8:18:8e:50: 9c:71:ca:5c:56:6f:5f:28:9b:c7:64:e6:2e:ee:fa:ab:e9:c6: a8:9d:c2:a5:1c:8d:29:18:4c:e3:c7:a0:ae:a3:cf:f1:64:43: 3e:75:26:ca:56:1e:e4:14:2e:f1:0e:b1:42:86:12:2f:17:b5: 34:fb:79:32:c1:82:c7:ba:67:b4:47:c7:5e:78:36:69:49:0c: ea:7d:53:4b:fc:51:d2:c9:7d:d1:ec:47:5d:45:3b:14:f6:34: 1f:ef:5e:0a:d8:f8:d0:39:eb:1f:2a:11:ee:e2:f1:27:60:9c: e3:35:45:6b:2d:67:1e:2c:9f:4d:fb:d4:be:2d:e5:3f:dc:93: 1e:6b:38:b5:de:72:40:61:62:7d:9a:78:26:5a:c8:b3:b5:a6: 7c:a7:cc:1a:89:b6:91:f9:fb:e5:c6:e3:16:60:73:ac:aa:8e: ec:57:25:ba:ad:82:dd:4c:01:4b:f9:fd:fa:5a:2b:e9:e4:8e: c4:1e:25:ad:9b:ae:d4:f0:9b:5f:46:7d:ac:0a:fb:ef:c9:73: b5:b6:c5:b9:77:7e:e8:6e:49:e9:dc:cb:f6:46:bc:a4:27:21: 4e:bc:47:cf:6a:5b:9b:21:8a:8c:b9:45:97:19:a4:ca:04:02: 0c:46:9c:24 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEcsZd4xMd42xQm/FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MGI2MzY0ZmEtODA2Yy00YTVlLWE2YmItZGQxNDY5NWY2MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaujkBsFlfQCPlQoAY5Ydj2xZ2azw8S09UsS f/kSG6BA4heB/W2m1hxklBR6KZEK9NmkiFChaIIgu2wJSRmjm7lOU0cRIaE4FYsf vGkr5x4VlC7SNxaOiVr9mhhyZWbKBzuAKEW+SBi/5UY9h8k3DOCaohtfqJrq8lHj OnvQRffvt1vP69Hiph7795l8YdUD+I+AuQpDr9D/10XaQzi7oZhR63sFkUmbSN3A vwFEdJbvYcMRyAEhCiVGE8gnxdjm5tr5FUE0NawHq6+zUDUM2Bj6MVwUK2V82NKy pAizhszxbqkHLMdZJFejgTQ6g49ZoOSwZfGYvG3dfRBZjSOxVwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFLzEJsZiSPml9dWWiS8sAbi+925oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjhmMTYzODQtZWI5Ni0z ZmM1LTk2MWEtMTg3YmU3ZjNiNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQC2INAMAwD BADYg0UDBAPYg0AwDAMEAdiDWgMEA9iDYAMEANiDcQMEANiDcwMEANiDdzAMAwQB 2IN6AwQH2IMAAwQC2KmAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHCGjQ02v1wFHA6LkrYSuBiOUJxxylxW b18om8dk5i7u+qvpxqidwqUcjSkYTOPHoK6jz/FkQz51JspWHuQULvEOsUKGEi8X tTT7eTLBgse6Z7RHx154NmlJDOp9U0v8UdLJfdHsR11FOxT2NB/vXgrY+NA56x8q Ee7i8SdgnOM1RWstZx4sn0371L4t5T/ckx5rOLXeckBhYn2aeCZayLO1pnynzBqJ tpH5++XG4xZgc6yqjuxXJbqtgt1MAUv5/fpaK+nkjsQeJa2brtTwm19GfawK++/J c7W2xbl3fuhuSency/ZGvKQnIU68R89qW5shioy5RZcZpMoEAgxGnCQ= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org