$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json) Hash identifier: eeNdQKxQf8vtnrSR/EZtUK/hZZmj7Y7o4yfGKzLVzBc= Subject key identifier: 93:99:47:28:59:2E:55:7B:B8:02:3F:F1:16:4C:0A:0F:C3:F8:16:00 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285847924BDC3EEEDDFCDE6D21E890 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa Signing time: Thu 17 Oct 2024 13:00:42 +0000 ROA not before: Thu 17 Oct 2024 13:00:42 +0000 ROA not after: Wed 15 Jan 2025 14:00:42 +0000 asID: 10397 IP address blocks: 162.244.96.0/24 maxlen: 24 162.244.97.0/24 maxlen: 24 162.244.98.0/24 maxlen: 24 162.244.99.0/24 maxlen: 24 162.244.100.0/24 maxlen: 24 162.244.101.0/24 maxlen: 24 204.16.48.0/24 maxlen: 24 208.67.12.0/24 maxlen: 24 208.67.13.0/24 maxlen: 24 208.67.14.0/24 maxlen: 24 208.67.15.0/24 maxlen: 24 208.85.128.0/24 maxlen: 24 208.85.133.0/24 maxlen: 24 208.85.134.0/24 maxlen: 24 208.85.135.0/24 maxlen: 24 209.42.166.0/24 maxlen: 24 209.42.191.0/24 maxlen: 24 209.209.128.0/21 maxlen: 21 209.209.139.0/24 maxlen: 24 209.209.140.0/22 maxlen: 22 209.209.141.0/24 maxlen: 24 209.209.144.0/20 maxlen: 20 209.209.160.0/20 maxlen: 20 209.209.163.0/24 maxlen: 24 209.209.167.0/24 maxlen: 24 209.209.176.0/22 maxlen: 22 209.209.180.0/23 maxlen: 23 209.209.181.0/24 maxlen: 24 209.209.183.0/24 maxlen: 24 209.209.184.0/24 maxlen: 24 209.209.186.0/23 maxlen: 23 209.209.189.0/24 maxlen: 24 209.209.190.0/23 maxlen: 23 209.250.32.0/19 maxlen: 19 2607:b600::/48 maxlen: 48 2607:b600:1::/48 maxlen: 48 2607:b600:2::/48 maxlen: 48 2607:b600:4::/48 maxlen: 48 2607:b600:5::/48 maxlen: 48 2607:b600:6::/48 maxlen: 48 2607:b600:8::/48 maxlen: 48 2607:b600:10::/48 maxlen: 48 2607:b600:12::/48 maxlen: 48 2607:b600:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:92:4b:dc:3e:ee:dd:fc:de:6d:21:e8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 17 13:00:42 2024 GMT Not After : Jan 15 14:00:42 2025 GMT Subject: CN=22232b90-50c4-4b7f-b3fb-0a1fe5123c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:82:b8:67:eb:d9:0c:90:01:74:44:3a:90: 94:6e:70:c2:ce:18:d9:57:5b:9c:6e:4e:c5:50:9b: 59:b4:c6:ec:09:22:f6:66:ad:58:4a:42:03:e1:be: b9:e7:f2:da:a5:99:66:b4:10:31:b6:6e:2e:e3:e0: 1c:01:40:c2:b2:17:24:3a:95:06:d4:61:23:1e:03: db:ce:29:0f:63:ed:54:5d:f8:2e:d6:5f:5f:94:93: d3:72:dd:51:21:b3:ab:66:8e:71:d7:94:71:6b:44: 88:1b:ed:3a:89:31:76:9f:3d:fb:45:d2:8d:91:cf: 61:69:02:c0:aa:a9:3c:30:31:1d:8b:0d:0c:44:33: df:3e:f7:0e:01:d1:16:26:63:39:2d:b3:49:70:bf: a5:6a:c5:0f:6a:98:5d:b0:ad:16:72:8a:07:6e:32: 9c:b3:e5:9a:d2:24:c7:1a:26:7b:d2:63:ac:8c:e9: 86:cd:64:dc:23:55:9a:39:d1:91:6f:7e:0e:d2:37: 88:4e:1b:37:88:92:de:be:63:cd:14:aa:af:f2:5b: 45:15:a6:95:70:8f:56:fc:23:ea:5f:f5:27:6a:7c: 7b:6f:e5:70:80:46:54:4b:12:9c:b4:e2:d3:e3:9c: 63:2a:38:30:f9:21:c3:13:7a:57:15:4b:15:80:d5: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:99:47:28:59:2E:55:7B:B8:02:3F:F1:16:4C:0A:0F:C3:F8:16:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 162.244.96.0-162.244.101.255 204.16.48.0/24 208.67.12.0/22 208.85.128.0/24 208.85.133.0-208.85.135.255 209.42.166.0/24 209.42.191.0/24 209.209.128.0/21 209.209.139.0-209.209.181.255 209.209.183.0-209.209.184.255 209.209.186.0/23 209.209.189.0-209.209.191.255 209.250.32.0/19 IPv6: 2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff 2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff 2607:b600:8::/48 2607:b600:10::/48 2607:b600:12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:56:99:1f:c8:06:a8:0f:fe:51:ae:70:88:a6:ed:1e:00:7e: d2:2b:0b:bc:ec:be:01:ec:0a:a6:d2:2c:cf:f5:48:ef:ef:17: cf:21:e6:83:e7:ec:1d:f4:b1:1a:f9:e9:c9:44:30:12:34:82: 67:c0:10:f9:32:ce:6b:5a:85:3c:89:0d:4f:27:a5:76:70:4c: c5:db:cc:6b:c5:2b:f4:5d:a0:2b:67:97:f9:80:3d:2b:b6:29: e5:23:ee:0a:c5:1a:ea:7d:a5:6d:99:e6:18:4b:60:5a:c9:31: 00:43:e4:f1:ab:a1:ff:fa:ef:c7:ac:1e:71:88:78:0d:0f:f6: fa:8b:4e:72:5d:3a:ca:42:0a:2c:24:91:84:15:c5:00:c6:bb: 4e:d8:aa:09:9c:ce:38:ff:79:8f:5f:d6:2c:6d:4f:ed:2c:45: 6b:dd:bf:dd:86:14:58:b8:74:a8:e6:4a:25:93:3f:28:cd:c4: 1b:a2:22:db:96:39:68:e5:06:0d:16:25:50:63:26:74:5c:e2: e4:08:9e:b1:71:ed:9a:a1:2c:89:cb:98:f1:14:55:b1:29:fa: 38:91:12:8b:75:6f:da:31:57:45:91:51:b3:73:32:4b:01:9b: b9:90:b6:a0:16:57:41:e7:d5:af:9c:6b:46:56:e9:c7:db:bc: bf:a2:35:45 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEeSS9w+7t383m0h6JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI0MTAxNzEzMDA0MloXDTI1MDExNTE0MDA0MlowLzEtMCsGA1UEAxMk MjIyMzJiOTAtNTBjNC00YjdmLWIzZmItMGExZmU1MTIzYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq+CuGfr2QyQAXREOpCUbnDCzhjZV1ucbk7F UJtZtMbsCSL2Zq1YSkID4b655/LapZlmtBAxtm4u4+AcAUDCshckOpUG1GEjHgPb zikPY+1UXfgu1l9flJPTct1RIbOrZo5x15Rxa0SIG+06iTF2nz37RdKNkc9haQLA qqk8MDEdiw0MRDPfPvcOAdEWJmM5LbNJcL+lasUPaphdsK0WcooHbjKcs+Wa0iTH GiZ70mOsjOmGzWTcI1WaOdGRb34O0jeIThs3iJLevmPNFKqv8ltFFaaVcI9W/CPq X/Unanx7b+VwgEZUSxKctOLT45xjKjgw+SHDE3pXFUsVgNWqvwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFJOZRyhZLlV7uAI/8RZMCg/D+BYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi 9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBtVpkfyAaoD/5RrnCIpu0eAH7SKwu87L4B7Aqm0izP9Ujv7xfPIeaD5+wd9LEa +enJRDASNIJnwBD5Ms5rWoU8iQ1PJ6V2cEzF28xrxSv0XaArZ5f5gD0rtinlI+4K xRrqfaVtmeYYS2BayTEAQ+Txq6H/+u/HrB5xiHgND/b6i05yXTrKQgosJJGEFcUA xrtO2KoJnM44/3mPX9YsbU/tLEVr3b/dhhRYuHSo5kolkz8ozcQboiLbljlo5QYN FiVQYyZ0XOLkCJ6xce2aoSyJy5jxFFWxKfo4kRKLdW/aMVdFkVGzczJLAZu5kLag FldB59WvnGtGVunH27y/ojVF -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org