$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa File: 91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa (raw, json) Hash identifier: rde8YVPsqKayDdDezyLkQX8RvrSy9e/fC1Z7tSgDso4= Subject key identifier: 21:29:10:32:66:41:DC:E6:7D:DA:F2:44:5F:C9:7E:F5:99:93:35:14 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584797E14249EAB3B90D4928AA00 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa Signing time: Sat 19 Oct 2024 13:00:42 +0000 ROA not before: Sat 19 Oct 2024 13:00:42 +0000 ROA not after: Fri 17 Jan 2025 14:00:42 +0000 asID: 33362 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:97:e1:42:49:ea:b3:b9:0d:49:28:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Oct 19 13:00:42 2024 GMT Not After : Jan 17 14:00:42 2025 GMT Subject: CN=9322f43d-075c-445d-81ed-0bf14aeac29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:fd:b1:86:75:ed:11:c4:95:6c:e2:0c:68: d3:71:70:b0:e5:df:84:28:01:89:cd:ec:98:b9:f2: 4b:23:19:f8:6f:51:89:1b:51:0c:82:a3:8d:b0:7c: a5:26:f9:3a:5c:99:15:65:bf:85:df:a7:ca:4a:ad: f4:54:da:39:e0:8b:40:d8:f7:8f:28:96:73:4a:a1: c5:4e:8a:8c:a8:dc:7f:7c:2a:b6:ca:cc:2e:65:b7: cc:41:3b:d1:ac:48:e5:0d:46:82:8d:d2:65:5e:40: 67:22:ca:f5:ac:37:c4:b3:5d:5c:4e:b8:65:43:b1: de:0b:ed:7e:af:07:39:e0:0d:f6:83:ac:99:1a:ec: 79:e7:ac:44:34:b2:f5:47:6c:d9:24:c7:76:52:f6: 12:72:f5:6c:28:da:45:b6:ab:cf:ee:c5:dc:9c:80: 83:51:6c:a5:ce:44:ba:9d:15:a4:25:c9:66:4d:33: 8c:aa:f4:d4:e5:59:08:55:01:30:25:d8:1b:cc:fb: d8:b5:ef:2e:41:3c:23:59:b5:92:97:ef:4b:7a:3a: 47:1f:06:18:40:02:98:46:24:9a:d8:10:ce:39:ee: e9:65:66:a5:9e:d2:58:fe:26:e7:6d:4f:f1:5c:4a: da:3c:b4:7b:d7:ce:86:0b:02:8d:4d:ca:db:2d:92: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:10:32:66:41:DC:E6:7D:DA:F2:44:5F:C9:7E:F5:99:93:35:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8d:6c:97:fa:9c:19:9c:2f:53:5d:e2:f0:62:55:b6:8b:6f: 4c:a4:20:b9:6d:7e:aa:46:a1:b3:28:0c:52:b2:9f:23:7f:55: 65:d2:c4:03:47:98:33:f0:5f:c9:1d:a9:49:7e:4a:20:de:41: 13:15:9c:0f:03:d5:62:7b:cd:49:d1:19:60:d3:6d:ae:9d:b2: 8c:71:1c:ac:58:69:e1:bd:eb:bd:73:03:c1:59:13:11:50:ba: 3a:c1:88:24:aa:31:41:38:4f:5a:de:52:61:3a:2f:41:f7:57: 0d:13:d9:36:28:e4:7f:d1:cb:53:42:f3:64:9b:07:aa:f7:be: 03:0a:70:5d:63:75:ce:55:25:2f:6a:39:96:d7:1f:19:7f:04: 9e:7f:a5:d4:10:56:55:b0:45:17:34:d9:06:1f:f0:8d:e3:a7: 8d:17:7c:c9:14:c7:fd:36:cf:65:93:85:9b:05:75:3d:16:9e: 73:90:42:ad:52:9e:85:88:a9:81:19:35:bf:0d:93:8c:39:f8: 61:32:03:42:4c:7d:4a:55:44:68:86:67:90:2e:6d:27:fe:25: 6e:a5:d3:c3:c1:65:65:d1:c5:b6:0c:d6:a7:03:49:86:02:91: ad:a2:8e:73:78:ff:1d:a8:ee:7b:2a:29:e1:9e:6f:80:50:d2: 7e:46:9c:82 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEeX4UJJ6rO5DUkoqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk OTMyMmY0M2QtMDc1Yy00NDVkLTgxZWQtMGJmMTRhZWFjMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDH9sYZ17RHElWziDGjTcXCw5d+EKAGJzeyY ufJLIxn4b1GJG1EMgqONsHylJvk6XJkVZb+F36fKSq30VNo54ItA2PePKJZzSqHF ToqMqNx/fCq2yswuZbfMQTvRrEjlDUaCjdJlXkBnIsr1rDfEs11cTrhlQ7HeC+1+ rwc54A32g6yZGux556xENLL1R2zZJMd2UvYScvVsKNpFtqvP7sXcnICDUWylzkS6 nRWkJclmTTOMqvTU5VkIVQEwJdgbzPvYte8uQTwjWbWSl+9LejpHHwYYQAKYRiSa 2BDOOe7pZWalntJY/ibnbU/xXEraPLR7186GCwKNTcrbLZJszQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFCEpEDJmQdzmfdryRF/JfvWZkzUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvOTFmYTNmN2YtOWYyOC0z ODM1LWEyYTctNDVkZjUyMjE3Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQo1sl/qcGZwvU13i8GJVtotvTKQguW1+qkahsygMUrKf I39VZdLEA0eYM/BfyR2pSX5KIN5BExWcDwPVYnvNSdEZYNNtrp2yjHEcrFhp4b3r vXMDwVkTEVC6OsGIJKoxQThPWt5SYTovQfdXDRPZNijkf9HLU0LzZJsHqve+Awpw XWN1zlUlL2o5ltcfGX8Enn+l1BBWVbBFFzTZBh/wjeOnjRd8yRTH/TbPZZOFmwV1 PRaec5BCrVKehYipgRk1vw2TjDn4YTIDQkx9SlVEaIZnkC5tJ/4lbqXTw8FlZdHF tgzWpwNJhgKRraKOc3j/Hajueyop4Z5vgFDSfkacgg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:01 2024 by rpki-client on console-ams.rpki-client.org