$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: LwF+/x/ay9g7YOKr0k0tyUTEbe+lEwu+QVgogyYPCco= Subject key identifier: 71:89:C0:AE:AF:23:A3:8D:04:28:9F:FA:2E:F1:0B:A3:8F:99:3B:5F Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584770CB9B5B4D35B7E36017C040 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:9b:5b:4d:35:b7:e3:60:17:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=be58ad6f-e0c8-4466-8324-bf925143950d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:d0:46:03:97:50:bc:5a:24:b0:d8:4c:91: ba:e7:15:7a:80:52:11:5b:3c:b4:ad:84:b5:2d:c3: 7d:49:ef:dc:28:36:8f:20:80:ab:15:ed:fb:6a:aa: 8c:2b:47:6f:76:4b:ba:25:7d:53:de:92:7e:bc:8d: 48:30:da:ec:94:55:69:b7:79:d2:be:d7:85:68:01: c7:be:aa:34:07:73:65:d9:96:c7:95:65:91:bc:4c: 3a:44:bc:70:a2:07:ed:c6:d6:ef:cb:10:aa:96:22: d5:92:23:8b:68:15:90:de:b9:49:a1:a5:75:c3:00: ab:f1:6f:ee:1d:ca:7d:15:24:fd:c1:87:43:cd:2a: 26:44:fc:a6:9c:30:1e:c8:83:86:e2:30:ff:b2:88: a2:c9:ff:27:55:c2:5f:98:2a:99:38:58:db:82:47: d0:59:58:e5:40:02:67:46:55:ee:8c:71:f8:46:60: d0:0e:71:4c:fa:89:ca:8e:c7:d3:a6:c4:d6:63:39: 8e:15:a3:d0:5b:09:56:e5:aa:5d:6b:e5:03:a8:fa: ba:7d:c5:d0:db:e1:21:27:0a:8c:6f:69:e1:a5:da: d5:49:39:96:9a:01:83:20:c2:2c:29:4b:2c:ea:84: eb:0a:7f:9f:b8:ab:35:91:f2:8a:18:d5:cf:e4:07: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:C0:AE:AF:23:A3:8D:04:28:9F:FA:2E:F1:0B:A3:8F:99:3B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0f:3e:54:f1:f3:4a:80:aa:38:b5:37:8e:67:b8:8e:67:48: f3:e9:bf:01:4c:fe:c8:cb:8c:ae:e4:ba:09:a7:7d:39:4b:ef: 15:92:15:28:b3:b2:d8:da:5a:41:42:0e:d1:8f:c8:eb:c7:18: 4c:c9:02:98:20:6f:8a:a2:1b:83:91:a7:45:43:af:79:3a:df: c1:ed:54:cc:73:d4:92:f9:fb:98:31:20:41:1c:ef:fb:2b:96: cc:47:f2:ea:d1:f5:ae:1a:82:98:e7:b9:fc:69:46:dc:9c:ed: 90:cc:93:d1:a2:5b:0a:b3:55:26:42:40:18:79:70:40:ba:c7: 7a:70:4c:a9:e2:38:b2:b2:11:d9:31:ff:17:0e:b8:5f:b5:ec: c5:f5:38:b5:f9:4e:9b:7c:af:1d:cd:6b:dc:39:75:f8:50:2c: 4f:8f:fe:81:95:2c:ab:b6:8c:9b:dc:06:f8:bc:00:1f:82:de: 5c:1e:0d:d7:f2:37:c4:db:c9:30:bb:ba:b2:a2:43:7b:de:c3: b1:c1:9b:55:61:b0:6c:8d:a8:14:ae:24:88:7c:ae:fc:9d:63: 53:4c:e2:c6:f4:6e:2c:de:32:72:c2:0a:6e:6a:ea:74:06:1a: 34:09:a0:0b:bf:55:f4:34:13:02:d6:3f:d6:f0:da:b1:3c:cb: 61:75:0b:23 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEdwy5tbTTW342AXwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk YmU1OGFkNmYtZTBjOC00NDY2LTgzMjQtYmY5MjUxNDM5NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj7QRgOXULxaJLDYTJG65xV6gFIRWzy0rYS1 LcN9Se/cKDaPIICrFe37aqqMK0dvdku6JX1T3pJ+vI1IMNrslFVpt3nSvteFaAHH vqo0B3Nl2ZbHlWWRvEw6RLxwogftxtbvyxCqliLVkiOLaBWQ3rlJoaV1wwCr8W/u Hcp9FST9wYdDzSomRPymnDAeyIOG4jD/soiiyf8nVcJfmCqZOFjbgkfQWVjlQAJn RlXujHH4RmDQDnFM+onKjsfTpsTWYzmOFaPQWwlW5apda+UDqPq6fcXQ2+EhJwqM b2nhpdrVSTmWmgGDIMIsKUss6oTrCn+fuKs1kfKKGNXP5AfjtQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHGJwK6vI6ONBCif+i7xC6OPmTtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABw8+VPHzSoCqOLU3jme4jmdI8+m/ AUz+yMuMruS6Cad9OUvvFZIVKLOy2NpaQUIO0Y/I68cYTMkCmCBviqIbg5GnRUOv eTrfwe1UzHPUkvn7mDEgQRzv+yuWzEfy6tH1rhqCmOe5/GlG3JztkMyT0aJbCrNV JkJAGHlwQLrHenBMqeI4srIR2TH/Fw64X7XsxfU4tflOm3yvHc1r3Dl1+FAsT4/+ gZUsq7aMm9wG+LwAH4LeXB4N1/I3xNvJMLu6sqJDe97DscGbVWGwbI2oFK4kiHyu /J1jU0zixvRuLN4ycsIKbmrqdAYaNAmgC79V9DQTAtY/1vDasTzLYXULIw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org