$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa File: 8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa (raw, json) Hash identifier: PwIh8VUiLs4a/ejUvW8dsAey0QlIoXdqedwa3mXFl+0= Subject key identifier: 35:29:B0:AF:40:C2:B0:06:B3:92:4C:9E:23:DC:B8:91:83:56:35:E8 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584770CB9B39234220A9E84A8E40 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 17378 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:9b:39:23:42:20:a9:e8:4a:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=53c3b9d6-78c2-4e58-a7a8-812fe1853dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:95:a7:54:a5:9c:46:f0:e4:91:7e:41:ac: b1:02:ea:d1:8d:e8:09:1c:47:14:e2:97:9b:f8:a4: c6:c4:27:3a:a9:15:3c:ee:82:df:31:e9:c4:12:4a: ba:79:07:fa:df:41:7a:c0:46:c9:bf:6b:d6:06:61: 88:f3:9e:68:52:1f:1f:36:77:0c:bd:bc:1a:4d:21: d4:fc:31:4a:0f:15:65:06:0a:b4:b6:6e:91:64:c6: e5:c9:d9:3a:ab:ae:9d:20:71:ce:74:e6:27:35:a7: 48:9f:fd:fa:7d:5f:22:b5:41:28:cb:f5:77:18:d5: 9c:24:7f:e8:19:5c:89:db:03:12:8e:c4:fd:97:6b: 67:95:ef:74:da:fb:ce:37:18:db:3b:61:bf:fe:44: 87:76:61:4b:04:44:22:91:17:a7:35:e4:ff:6b:39: 33:0b:11:2f:d4:ab:bd:a3:f3:48:d0:8d:bf:ac:37: c6:a2:46:9a:b8:0a:8e:8e:ef:89:93:ec:2b:7a:1c: 43:04:b6:9c:c5:b5:75:7c:87:4c:d4:5f:ea:22:8d: 61:71:fb:2a:c1:cd:c4:2f:22:ee:da:77:02:d2:94: 40:c2:61:2c:63:39:a6:46:3f:a3:60:03:be:c4:3f: fa:1b:92:11:37:31:89:50:03:65:c9:5d:9a:64:0b: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:29:B0:AF:40:C2:B0:06:B3:92:4C:9E:23:DC:B8:91:83:56:35:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/8a4779b2-744a-3450-a43d-bf2bf5dd7bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:86:e4:2f:06:8c:e9:da:bc:58:b3:d4:d9:37:de:92:e3:a5: ec:25:43:18:82:2a:17:4b:ab:20:33:c2:b1:e4:5f:8a:1a:f3: f2:36:4f:88:76:93:d5:8b:0b:c9:0b:f8:d8:49:87:f8:39:d4: 9d:2e:9e:b9:85:25:07:eb:6e:6e:57:a7:25:a4:84:2a:e4:b8: 9d:84:c4:7a:2f:38:83:59:31:73:1b:d3:54:58:2a:ff:f2:b2: 2d:bf:10:83:88:f3:64:0d:d9:d7:85:b2:79:29:90:53:45:b5: 93:36:3f:7c:53:97:97:99:4a:e4:d0:73:f1:ad:ca:29:17:d8: 8c:71:4c:01:db:43:bf:b0:6c:05:b0:84:59:3b:f6:bc:c3:d7: 0e:58:6f:b9:cc:48:b4:26:7e:ec:f6:ae:67:3f:4c:e4:db:d3: e3:db:a6:13:9e:22:e5:b0:07:80:09:b7:e5:32:c1:d2:aa:e8: 32:a3:f7:a4:e4:34:29:37:51:85:0f:2c:5b:c4:ff:46:74:25: 91:67:b7:d0:3e:dd:88:fa:d9:0d:45:d1:2d:cc:9b:14:2f:15: 5f:0a:f7:c8:ee:34:03:9c:63:27:3c:83:86:f1:a8:6c:e5:99: 7e:85:f3:7c:ff:0f:df:ff:53:10:f3:73:79:1b:96:f4:2b:e9: 6c:06:1d:49 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEdwy5s5I0IgqehKjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk NTNjM2I5ZDYtNzhjMi00ZTU4LWE3YTgtODEyZmUxODUzZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7uVp1SlnEbw5JF+QayxAurRjegJHEcU4peb +KTGxCc6qRU87oLfMenEEkq6eQf630F6wEbJv2vWBmGI855oUh8fNncMvbwaTSHU /DFKDxVlBgq0tm6RZMblydk6q66dIHHOdOYnNadIn/36fV8itUEoy/V3GNWcJH/o GVyJ2wMSjsT9l2tnle902vvONxjbO2G//kSHdmFLBEQikRenNeT/azkzCxEv1Ku9 o/NI0I2/rDfGokaauAqOju+Jk+wrehxDBLacxbV1fIdM1F/qIo1hcfsqwc3ELyLu 2ncC0pRAwmEsYzmmRj+jYAO+xD/6G5IRNzGJUANlyV2aZAsSmQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDUpsK9AwrAGs5JMniPcuJGDVjXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOGE0Nzc5YjItNzQ0YS0z NDUwLWE0M2QtYmYyYmY1ZGQ3YmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEobkLwaM6dq8WLPU2TfekuOl7CVD GIIqF0urIDPCseRfihrz8jZPiHaT1YsLyQv42EmH+DnUnS6euYUlB+tublenJaSE KuS4nYTEei84g1kxcxvTVFgq//KyLb8Qg4jzZA3Z14WyeSmQU0W1kzY/fFOXl5lK 5NBz8a3KKRfYjHFMAdtDv7BsBbCEWTv2vMPXDlhvucxItCZ+7PauZz9M5NvT49um E54i5bAHgAm35TLB0qroMqP3pOQ0KTdRhQ8sW8T/RnQlkWe30D7diPrZDUXRLcyb FC8VXwr3yO40A5xjJzyDhvGobOWZfoXzfP8P3/9TEPNzeRuW9CvpbAYdSQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:07:03 2024 by rpki-client on console-fra.rpki-client.org