$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa File: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (raw, json) Hash identifier: pPUKLmTSRqav8vLxVupoZe7v4VehEuyZ9EZb7mqe7eM= Subject key identifier: 8D:4F:D6:C2:47:0A:F5:A1:04:58:48:4A:3E:3B:A1:C4:36:2A:7D:C6 Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F43285847823255180E39EAEFBC06E280 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa Signing time: Fri 11 Oct 2024 18:36:27 +0000 ROA not before: Fri 11 Oct 2024 18:36:27 +0000 ROA not after: Thu 09 Jan 2025 19:36:27 +0000 asID: 5009 IP address blocks: 64.56.0.0/19 maxlen: 24 64.237.64.0/19 maxlen: 24 66.186.224.0/19 maxlen: 24 108.179.160.0/19 maxlen: 24 160.223.208.0/20 maxlen: 24 205.233.40.0/22 maxlen: 24 206.124.192.0/19 maxlen: 24 206.204.112.0/20 maxlen: 24 208.97.32.0/20 maxlen: 24 209.62.192.0/19 maxlen: 24 209.124.192.0/19 maxlen: 24 209.124.224.0/19 maxlen: 24 216.115.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:82:32:55:18:0e:39:ea:ef:bc:06:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Oct 11 18:36:27 2024 GMT Not After : Jan 9 19:36:27 2025 GMT Subject: CN=7a947b4e-59b5-459b-a144-a4628f8df89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:b9:f7:1f:5c:21:9b:17:4d:37:6d:d3:46: 0b:cb:fd:10:09:ae:67:b6:1b:cf:ed:dc:1f:14:62: d0:cc:72:4b:56:8c:54:be:9b:cc:ba:3c:fb:54:1f: e1:49:1d:a8:41:d5:b7:64:a8:66:13:02:59:e6:21: 09:92:f1:fa:23:80:0f:9d:af:49:44:06:ad:49:b4: 33:0a:ab:f7:b5:b7:9c:16:d6:d3:dc:0b:f7:da:07: 0b:f3:1f:c5:a4:ec:34:78:1c:f7:3f:37:63:a7:f1: 67:8b:05:b2:8d:7b:ef:2d:d8:99:f4:1d:06:da:8b: 0a:e7:5b:af:ed:93:ef:22:10:ab:40:cb:25:88:5e: e2:2b:1a:6a:67:17:e7:3f:91:09:30:6c:3e:c2:b2: a9:73:53:0d:37:dc:8b:60:22:d5:c3:c9:2c:63:61: 34:7d:a2:d0:47:35:02:96:83:69:59:b0:0e:a5:0e: 84:88:0a:69:7c:6f:a2:c1:53:bb:cc:77:bd:1e:ef: 38:fa:1a:3a:4a:3b:3e:ad:1b:8e:76:07:7e:96:44: 2f:ad:ee:f3:80:20:c7:e9:68:50:1f:fa:e7:97:dd: 3c:c9:fe:5d:e4:6d:28:ac:e7:59:8e:c2:8c:5e:b5: 40:d0:25:98:8a:0b:c0:0b:4b:37:b3:22:a7:fa:cb: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:D6:C2:47:0A:F5:A1:04:58:48:4A:3E:3B:A1:C4:36:2A:7D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 64.56.0.0/19 64.237.64.0/19 66.186.224.0/19 108.179.160.0/19 160.223.208.0/20 205.233.40.0/22 206.124.192.0/19 206.204.112.0/20 208.97.32.0/20 209.62.192.0/19 209.124.192.0/18 216.115.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f8:e3:46:42:b2:69:e0:29:64:a6:c2:f2:0c:0f:95:52:9a: a2:a9:02:84:9f:16:a2:4d:ea:84:6a:c2:7c:72:60:14:cd:5e: 86:02:1f:e9:65:3e:e3:63:99:d3:df:4f:19:81:48:06:81:5f: 0d:45:8f:e8:e6:cb:2d:d5:a2:f3:1a:d9:a5:12:ad:73:04:06: df:08:f3:95:71:e5:c2:a0:13:62:79:b1:3a:ed:3f:a3:9b:28: dc:18:83:20:e5:6d:6c:77:3e:b4:9d:d3:5f:11:74:82:b8:16: ea:4a:9b:41:f0:75:85:d9:d5:45:62:4c:6b:74:17:e1:1e:29: a6:03:ba:6d:23:bc:36:20:94:9e:73:1b:c8:ee:62:66:36:8c: 6d:1b:d5:f6:f7:55:b4:ea:c0:40:95:a3:48:fb:cc:f1:5c:7c: 11:79:94:4b:36:49:12:89:07:0c:c6:0d:ad:2c:00:0d:a8:1a: 6c:47:fe:72:b4:4b:6e:dc:27:b4:06:1a:e0:9d:db:26:07:a9: aa:27:fe:27:65:92:96:bc:52:4b:03:be:f3:aa:ae:64:d4:42: 2c:ea:90:0f:08:b7:c9:02:0d:c4:41:4f:59:f7:4f:a0:3f:44: 09:66:54:53:c9:c3:0b:45:60:d3:5b:28:85:7d:04:d5:e5:90: 47:7d:43:76 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWEeCMlUYDjnq77wG4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI0MTAxMTE4MzYyN1oXDTI1MDEwOTE5MzYyN1owLzEtMCsGA1UEAxMk N2E5NDdiNGUtNTliNS00NTliLWExNDQtYTQ2MjhmOGRmODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt+59x9cIZsXTTdt00YLy/0QCa5nthvP7dwf FGLQzHJLVoxUvpvMujz7VB/hSR2oQdW3ZKhmEwJZ5iEJkvH6I4APna9JRAatSbQz Cqv3tbecFtbT3Av32gcL8x/FpOw0eBz3Pzdjp/FniwWyjXvvLdiZ9B0G2osK51uv 7ZPvIhCrQMsliF7iKxpqZxfnP5EJMGw+wrKpc1MNN9yLYCLVw8ksY2E0faLQRzUC loNpWbAOpQ6EiAppfG+iwVO7zHe9Hu84+ho6Sjs+rRuOdgd+lkQvre7zgCDH6WhQ H/rnl908yf5d5G0orOdZjsKMXrVA0CWYigvAC0s3syKn+stiaQIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFI1P1sJHCvWhBFhISj47ocQ2Kn3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvYzVjMWFiOWEtZjk5ZC0z Yjc1LWI3ZjQtOThmYmVmMzE1ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQFQDgAAwQF QO1AAwQFQrrgAwQFbLOgAwQEoN/QAwQCzekoAwQFznzAAwQEzsxwAwQE0GEgAwQF 0T7AAwQG0XzAAwQF2HOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABX440ZCsmngKWSmwvIMD5VSmqKpAoSf FqJN6oRqwnxyYBTNXoYCH+llPuNjmdPfTxmBSAaBXw1Fj+jmyy3VovMa2aUSrXME Bt8I85Vx5cKgE2J5sTrtP6ObKNwYgyDlbWx3PrSd018RdIK4FupKm0HwdYXZ1UVi TGt0F+EeKaYDum0jvDYglJ5zG8juYmY2jG0b1fb3VbTqwECVo0j7zPFcfBF5lEs2 SRKJBwzGDa0sAA2oGmxH/nK0S27cJ7QGGuCd2yYHqaon/idlkpa8UksDvvOqrmTU QizqkA8It8kCDcRBT1n3T6A/RAlmVFPJwwtFYNNbKIV9BNXlkEd9Q3Y= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:16 2024 by rpki-client on console-fra.rpki-client.org