$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa File: da29dd16-44c5-3bb1-af0e-adfb48371078.roa (raw, json) Hash identifier: U8r2CI81rKRu/aTeXuyKabkou4SocA/mhLBdY9jXTEw= Subject key identifier: FC:61:41:7E:8C:9A:CE:1E:DB:90:89:73:B3:34:AE:67:0F:E7:BE:74 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F43285847A2FD53CFC4F0AC2180B8F580 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa Signing time: Wed 23 Oct 2024 12:31:20 +0000 ROA not before: Wed 23 Oct 2024 12:31:20 +0000 ROA not after: Tue 21 Jan 2025 13:31:20 +0000 asID: 7150 IP address blocks: 148.137.0.0/16 maxlen: 20 151.161.0.0/16 maxlen: 20 157.62.0.0/16 maxlen: 20 192.149.243.0/24 maxlen: 24 204.108.180.0/23 maxlen: 24 204.108.184.0/23 maxlen: 24 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a2:fd:53:cf:c4:f0:ac:21:80:b8:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Oct 23 12:31:20 2024 GMT Not After : Jan 21 13:31:20 2025 GMT Subject: CN=d0967c99-4dc4-4efc-9030-643e3fe66c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:2d:b3:4c:ca:ad:69:03:ad:e6:bd:c0:46: 4c:1c:9e:cd:35:ce:2d:7c:fd:d6:59:6d:6f:a0:51: ca:fd:5c:f1:db:1c:8e:07:a9:57:65:b0:8b:38:d3: 26:46:cb:f1:7f:5f:08:e2:e1:fd:fe:2b:86:b5:f8: 4a:ac:6d:81:63:a5:05:76:ae:ac:85:84:57:eb:1c: 1a:59:e7:49:41:fe:56:0d:c2:17:8c:e6:25:5b:7a: f5:03:ce:f4:4d:48:50:93:7c:1d:b8:c0:53:64:1d: 37:57:28:e9:1f:18:3d:e5:fa:36:a2:9d:58:32:66: ae:4a:52:cc:d5:f0:a8:1c:3d:a5:fe:8c:20:50:0d: 7e:7b:0f:40:23:7f:27:ae:82:3d:20:cc:f0:7d:7d: ad:63:44:e8:87:e3:86:65:19:de:29:be:ae:ec:b8: 46:3f:25:f8:84:18:a5:bd:c1:e7:88:18:0f:12:da: f0:5f:9a:3a:30:2f:79:2e:00:91:56:39:2c:01:b7: 8d:88:2a:be:96:92:0b:e0:ab:63:5d:50:39:d4:9d: dd:fd:83:0f:23:a9:62:b7:79:27:d6:ec:92:83:40: c6:59:f2:7a:62:23:e0:ca:9a:04:e0:21:30:25:77: 34:a5:fe:ed:20:0a:23:4e:18:ca:1e:b5:7e:96:31: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:61:41:7E:8C:9A:CE:1E:DB:90:89:73:B3:34:AE:67:0F:E7:BE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/da29dd16-44c5-3bb1-af0e-adfb48371078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 148.137.0.0/16 151.161.0.0/16 157.62.0.0/16 192.149.243.0/24 204.108.180.0/23 204.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:58:7d:b9:38:c9:de:83:37:2b:e5:70:c1:85:6e:d5:32:08: f7:b5:ce:83:b2:87:c3:c5:d1:0a:9b:88:07:f1:91:c0:46:25: cd:5c:63:ad:72:a9:cc:c8:0c:f5:1e:87:85:84:28:6a:09:6d: b1:a8:8a:ab:2a:50:0a:6b:f1:93:cd:ff:61:42:e7:9f:1e:38: 0f:5d:d5:b3:53:94:8f:c6:67:70:8a:2c:bd:f3:ec:26:41:c3: 85:c8:f7:c2:b9:25:fb:df:94:3e:b2:fa:fa:63:38:81:11:59: 97:e0:15:53:f8:12:9f:9e:53:ba:09:40:a9:f9:0a:75:e1:40: b5:29:f3:dc:56:d5:3e:90:02:cd:34:1a:38:2b:a3:e5:f6:60: 60:f2:1e:cf:3d:21:a6:df:75:a1:1f:44:a0:ab:0f:76:be:e0: 0b:04:25:3f:2e:cd:25:f9:a6:a9:a1:a0:77:80:bd:19:f1:c9: 06:a6:51:a1:53:70:2a:c3:6d:5c:c1:71:e9:c4:bf:7b:fd:dc: f5:23:da:2d:75:bc:3f:2e:de:3d:96:f5:00:04:81:ce:b0:39: e8:30:68:3f:dc:5a:70:86:ee:1b:b9:b9:a0:94:a7:f1:94:fb: b1:a0:fc:a6:68:19:a2:8d:76:e9:90:14:1e:f3:17:64:b6:35: 73:da:7a:13 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEei/VPPxPCsIYC49YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI0MTAyMzEyMzEyMFoXDTI1MDEyMTEzMzEyMFowLzEtMCsGA1UEAxMk ZDA5NjdjOTktNGRjNC00ZWZjLTkwMzAtNjQzZTNmZTY2YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzMts0zKrWkDrea9wEZMHJ7NNc4tfP3WWW1v oFHK/Vzx2xyOB6lXZbCLONMmRsvxf18I4uH9/iuGtfhKrG2BY6UFdq6shYRX6xwa WedJQf5WDcIXjOYlW3r1A870TUhQk3wduMBTZB03VyjpHxg95fo2op1YMmauSlLM 1fCoHD2l/owgUA1+ew9AI38nroI9IMzwfX2tY0Toh+OGZRneKb6u7LhGPyX4hBil vcHniBgPEtrwX5o6MC95LgCRVjksAbeNiCq+lpIL4KtjXVA51J3d/YMPI6lit3kn 1uySg0DGWfJ6YiPgypoE4CEwJXc0pf7tIAojThjKHrV+ljHroQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFPxhQX6Mms4e25CJc7M0rmcP5750MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZGEyOWRkMTYtNDRjNS0z YmIxLWFmMGUtYWRmYjQ4MzcxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAlIkDAwCX oQMDAJ0+AwQAwJXzAwQBzGy0AwQCzGy4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI9Yfbk4yd6DNyvlcMGF btUyCPe1zoOyh8PF0QqbiAfxkcBGJc1cY61yqczIDPUeh4WEKGoJbbGoiqsqUApr 8ZPN/2FC558eOA9d1bNTlI/GZ3CKLL3z7CZBw4XI98K5JfvflD6y+vpjOIERWZfg FVP4Ep+eU7oJQKn5CnXhQLUp89xW1T6QAs00Gjgro+X2YGDyHs89IabfdaEfRKCr D3a+4AsEJT8uzSX5pqmhoHeAvRnxyQamUaFTcCrDbVzBcenEv3v93PUj2i11vD8u 3j2W9QAEgc6wOegwaD/cWnCG7hu5uaCUp/GU+7Gg/KZoGaKNdumQFB7zF2S2NXPa ehM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:10 2024 by rpki-client on console-fra.rpki-client.org