$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/69b4e73f-fb6d-3c07-8392-de84d793cec3.roa File: 69b4e73f-fb6d-3c07-8392-de84d793cec3.roa (raw, json) Hash identifier: rol7bfL71Tupe1t5ITxcv74pORi3z0jZ43H4Pb8KEP0= Subject key identifier: 10:58:6F:0E:4F:5F:A7:16:36:C4:A9:02:DC:FD:74:11:07:49:F9:C3 Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Certificate serial: 010D0C9F43285847766101265164749C45A61F80 Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/69b4e73f-fb6d-3c07-8392-de84d793cec3.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 53698 IP address blocks: 23.174.128.0/24 maxlen: 24 23.174.129.0/24 maxlen: 24 23.175.16.0/24 maxlen: 24 165.140.128.0/22 maxlen: 24 192.33.139.0/24 maxlen: 24 209.209.4.0/22 maxlen: 24 2604:6040::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:01:26:51:64:74:9c:45:a6:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=c8a44871-ecc0-4307-9dbe-54e1fef195cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:d4:de:3c:d1:4e:0d:31:fd:48:22:9b:6a: 1a:79:bf:cf:2b:73:25:80:60:8f:1e:bd:d0:51:a7: c0:a6:19:3f:e7:0e:56:90:1c:56:83:15:ad:b1:b7: a6:0e:01:85:ae:cd:79:16:0a:f2:01:74:cd:ab:61: 2c:bd:c0:43:ce:f7:4a:ae:8e:54:fb:fe:1a:47:13: 11:1b:c9:47:9c:e9:62:17:0f:34:b5:14:7d:4f:85: 29:83:dc:20:5b:84:ac:ad:e4:2b:ee:0f:d1:7b:45: 33:1c:d7:71:d3:90:c6:6f:87:dd:97:84:31:03:ef: a8:38:5c:0e:cb:d5:84:17:e5:bb:70:01:50:01:93: 32:08:b4:91:86:24:a6:69:a2:cc:2b:ea:0f:33:91: 64:58:09:d2:85:cb:b0:0e:c9:cd:a4:6f:8e:56:a8: c2:3c:77:4f:1e:b5:6e:c0:34:43:77:b1:df:70:c6: b3:1a:32:99:86:72:44:ca:b4:bb:0c:cc:60:c6:d2: bd:2e:5b:80:eb:36:bd:ea:b1:b2:bb:e7:84:f6:e7: 87:2f:03:00:7f:d1:6f:9a:13:2d:b9:15:56:4d:b3: 43:b0:f6:e7:1b:87:ae:24:93:80:45:5e:4b:98:3e: ec:dc:63:8c:e6:20:87:03:31:bd:15:20:8a:5e:48: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:58:6F:0E:4F:5F:A7:16:36:C4:A9:02:DC:FD:74:11:07:49:F9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/69b4e73f-fb6d-3c07-8392-de84d793cec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl X509v3 Authority Key Identifier: keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer sbgp-ipAddrBlock: critical IPv4: 23.174.128.0/23 23.175.16.0/24 165.140.128.0/22 192.33.139.0/24 209.209.4.0/22 IPv6: 2604:6040::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a0:4b:d1:8b:10:4f:71:e8:47:3b:4b:1a:a6:3f:d7:cb:8e: eb:ef:c4:a9:d1:5b:59:fc:3a:ec:a8:f0:70:9c:b8:b3:b6:f2: 74:0d:b4:f3:03:fe:1c:13:1d:fd:6c:60:bd:69:e5:93:b0:9c: c1:59:b2:df:ba:29:fa:66:f8:a8:d7:4d:de:a5:32:fb:84:9a: 0c:b6:81:f3:c1:0b:5e:82:07:60:87:c0:03:58:d1:e3:12:0e: 2f:4e:89:f3:cb:f7:30:5e:ce:52:58:4a:27:f9:7d:d1:2f:db: 39:24:22:0f:14:26:78:16:70:5a:48:6d:57:01:e1:c1:92:bc: 17:72:0b:47:1e:19:96:3a:4b:f9:f2:53:a9:a8:5f:0f:8b:1d: a9:78:78:c8:f9:93:32:23:71:73:e7:7c:89:57:1b:3c:43:68: ee:ff:09:f1:d7:09:33:92:90:bc:3d:0a:17:e2:36:b8:53:33: 6f:bc:fe:92:2a:d4:6d:34:32:bf:c0:ce:40:31:1b:e8:5d:b6: 6b:39:82:80:e8:5f:07:62:5c:0c:5f:fd:82:88:95:38:94:f4: 62:b0:18:f5:b5:31:b1:28:a1:34:b9:5b:68:80:e7:60:85:4b: b6:78:a9:28:c2:91:c0:08:26:f7:74:20:37:4d:ff:ee:28:58: 95:bf:81:37 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEd2YQEmUWR0nEWmH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZTM1ZjktYmZlMS00YzY5LWJiMzItY2QyNTJjMTI1 YzY1MB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YzhhNDQ4NzEtZWNjMC00MzA3LTlkYmUtNTRlMWZlZjE5NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3vU3jzRTg0x/Ugim2oaeb/PK3MlgGCPHr3Q UafAphk/5w5WkBxWgxWtsbemDgGFrs15FgryAXTNq2EsvcBDzvdKro5U+/4aRxMR G8lHnOliFw80tRR9T4Upg9wgW4SsreQr7g/Re0UzHNdx05DGb4fdl4QxA++oOFwO y9WEF+W7cAFQAZMyCLSRhiSmaaLMK+oPM5FkWAnShcuwDsnNpG+OVqjCPHdPHrVu wDRDd7HfcMazGjKZhnJEyrS7DMxgxtK9LluA6za96rGyu+eE9ueHLwMAf9FvmhMt uRVWTbNDsPbnG4euJJOARV5LmD7s3GOM5iCHAzG9FSCKXkgD3QIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFBBYbw5PX6cWNsSpAtz9dBEHSfnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MTVl MzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMxMjVjNjUvNjliNGU3M2YtZmI2ZC0z YzA3LTgzOTItZGU4NGQ3OTNjZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjE1ZTM1ZjktYmZlMS00YzY5LWJi MzItY2QyNTJjMTI1YzY1LzYxNWUzNWY5LWJmZTEtNGM2OS1iYjMyLWNkMjUyYzEy NWM2NS5jcmwwHwYDVR0jBBgwFoAUfPNnR7JaJ7Vbv8yDaNxdsrhE0sIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1 MmMxMjVjNjUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF66AAwQA F68QAwQCpYyAAwQAwCGLAwQC0dEEMA4EAgACMAgDBgQmBGBAADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBM oEvRixBPcehHO0sapj/Xy47r78Sp0VtZ/DrsqPBwnLiztvJ0DbTzA/4cEx39bGC9 aeWTsJzBWbLfuin6Zvio103epTL7hJoMtoHzwQteggdgh8ADWNHjEg4vTonzy/cw Xs5SWEon+X3RL9s5JCIPFCZ4FnBaSG1XAeHBkrwXcgtHHhmWOkv58lOpqF8Pix2p eHjI+ZMyI3Fz53yJVxs8Q2ju/wnx1wkzkpC8PQoX4ja4UzNvvP6SKtRtNDK/wM5A MRvoXbZrOYKA6F8HYlwMX/2CiJU4lPRisBj1tTGxKKE0uVtogOdghUu2eKkowpHA CCb3dCA3Tf/uKFiVv4E3 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:36 2024 by rpki-client on console-ams.rpki-client.org