$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: 6kTl7lCNTBdrf2X4z31YNWxUtf5gCTdLlmgk1fw7c5k= Subject key identifier: A5:BE:2A:2A:2A:4B:30:5F:C1:31:79:F9:AC:E5:E0:7D:99:A0:68:77 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F432858476E01007A4D5853877EC0DEC0 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Fri 04 Oct 2024 13:00:42 +0000 ROA not before: Fri 04 Oct 2024 13:00:42 +0000 ROA not after: Thu 02 Jan 2025 14:00:42 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6e:01:00:7a:4d:58:53:87:7e:c0:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Oct 4 13:00:42 2024 GMT Not After : Jan 2 14:00:42 2025 GMT Subject: CN=a2004c89-b053-403b-8227-d4c6d5eca098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:17:06:c7:6c:76:6a:fe:e7:63:b1:bb:b8: 01:b7:36:50:be:18:b2:b5:b9:c3:91:81:9e:71:cd: 3c:01:75:3b:3c:46:e6:fa:d7:44:f3:9d:0b:b3:0c: 84:e4:17:e0:64:43:9c:40:47:4c:26:f8:c6:56:55: 68:f4:83:c8:99:48:dd:dc:4c:e5:37:f9:0f:39:a3: 48:9d:68:c6:1f:ba:97:19:68:1e:56:30:fe:e8:30: a4:b6:84:80:f0:81:d9:a2:1a:64:7c:ef:1b:79:7e: 4d:13:9e:fc:ff:6e:3e:cd:61:26:b4:0d:4f:fa:08: e9:00:59:e7:e3:d7:57:69:97:af:56:af:6c:da:d9: 38:3a:64:2f:84:02:a5:fe:3a:7d:b2:dc:be:aa:bc: f8:3d:5d:10:21:56:37:be:fe:16:a6:49:d4:34:fa: d5:f8:48:f3:34:d6:33:99:bc:9d:8e:bf:95:78:20: 64:44:d3:f0:06:37:2e:fe:de:63:e0:02:5c:52:a7: e3:a0:a4:3f:21:6e:3d:c4:3e:dd:73:f3:34:1a:80: 3e:07:ff:db:61:1f:a1:db:d8:c2:a6:57:89:2e:d8: 16:d6:88:cd:b5:59:d4:4d:b0:4e:aa:6c:ac:85:76: d2:a6:d2:df:dd:c3:9f:c2:4e:f1:59:4c:4d:07:18: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BE:2A:2A:2A:4B:30:5F:C1:31:79:F9:AC:E5:E0:7D:99:A0:68:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e6:ad:b8:af:a0:3d:73:56:ce:3b:bc:fc:e3:4f:d6:94:75: 1b:a5:10:91:2c:9b:a7:97:ab:ac:12:f2:47:d2:f7:b6:d1:78: 26:56:4a:f7:e2:1b:40:dd:8b:52:eb:e7:51:64:66:28:79:9a: 47:10:f9:71:3f:9c:44:18:57:f6:98:0b:54:a4:5c:1a:2a:ce: 8e:7f:67:76:12:16:ee:f8:95:ef:1c:09:1d:ce:31:38:23:cd: 2b:34:11:01:de:1f:38:cf:e5:31:97:db:bb:ac:a4:ea:16:bb: 0b:9b:78:bb:69:4b:42:ee:3b:4f:0c:fa:98:06:48:98:2f:87: 13:e0:b2:d4:33:43:09:2f:0d:19:c6:dc:69:b5:2d:07:e4:c3: 90:2f:da:5f:64:86:78:41:3e:d2:7c:56:2f:38:f1:38:11:98: b6:78:e8:ca:12:a4:a4:e4:48:37:34:4f:82:d3:2b:ef:c9:04: 49:fe:6a:5a:91:ac:97:f2:19:40:ef:7a:3b:64:2a:ab:78:80: 6a:b6:5c:10:aa:a5:11:84:77:c0:0d:6d:06:22:9a:8f:bb:ce: 77:48:84:d4:6a:2e:8a:f2:a8:e5:60:87:5e:ca:9c:f2:f1:18: 73:c8:04:77:34:9b:e7:64:65:e2:19:1c:75:25:72:61:cb:97: 71:ab:6b:93 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEduAQB6TVhTh37A3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk YTIwMDRjODktYjA1My00MDNiLTgyMjctZDRjNmQ1ZWNhMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4oXBsdsdmr+52Oxu7gBtzZQvhiytbnDkYGe cc08AXU7PEbm+tdE850LswyE5BfgZEOcQEdMJvjGVlVo9IPImUjd3EzlN/kPOaNI nWjGH7qXGWgeVjD+6DCktoSA8IHZohpkfO8beX5NE578/24+zWEmtA1P+gjpAFnn 49dXaZevVq9s2tk4OmQvhAKl/jp9sty+qrz4PV0QIVY3vv4WpknUNPrV+EjzNNYz mbydjr+VeCBkRNPwBjcu/t5j4AJcUqfjoKQ/IW49xD7dc/M0GoA+B//bYR+h29jC pleJLtgW1ojNtVnUTbBOqmyshXbSptLf3cOfwk7xWUxNBxiwxQIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFKW+KioqSzBfwTF5+azl4H2ZoGh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADnmrbivoD1zVs47vPzjT9aU dRulEJEsm6eXq6wS8kfS97bReCZWSvfiG0Ddi1Lr51FkZih5mkcQ+XE/nEQYV/aY C1SkXBoqzo5/Z3YSFu74le8cCR3OMTgjzSs0EQHeHzjP5TGX27uspOoWuwubeLtp S0LuO08M+pgGSJgvhxPgstQzQwkvDRnG3Gm1LQfkw5Av2l9khnhBPtJ8Vi848TgR mLZ46MoSpKTkSDc0T4LTK+/JBEn+alqRrJfyGUDvejtkKqt4gGq2XBCqpRGEd8AN bQYimo+7zndIhNRqLoryqOVgh17KnPLxGHPIBHc0m+dkZeIZHHUlcmHLl3Gra5M= -----END CERTIFICATE-----Generated at Mon Nov 25 16:23:44 2024 by rpki-client on console-ams.rpki-client.org