$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: XkQOnQJhZqc8BA1sd/7OUmZJ3qW3mAEEUiqp66JjoIY= Subject key identifier: 6A:DC:CE:9C:AA:B4:DD:19:C3:B4:74:B6:3D:EE:46:0C:BC:84:C6:A5 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F432858473ED47D56610D4DCAAFCD7A00 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Tue 17 Sep 2024 15:28:12 +0000 ROA not before: Tue 17 Sep 2024 15:28:12 +0000 ROA not after: Mon 16 Dec 2024 16:28:12 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3e:d4:7d:56:61:0d:4d:ca:af:cd:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Sep 17 15:28:12 2024 GMT Not After : Dec 16 16:28:12 2024 GMT Subject: CN=77bbb4d3-a903-4f04-a7e2-d69bfb842f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:35:e3:e4:34:f7:91:74:fe:19:04:94:64:42: 66:1b:e5:87:28:62:fd:a0:55:f3:d2:d5:e8:0d:28: 66:53:5a:4c:79:84:33:d1:2b:71:7f:7a:1a:9f:0c: a9:37:5e:e1:ab:5e:4e:0b:a9:60:c1:9e:6b:3d:e0: c1:60:e0:c9:87:53:97:ff:d1:a9:40:6f:f1:9c:94: 4a:46:5f:28:4c:30:94:73:68:44:4d:c1:ce:23:2f: 41:15:9c:e4:29:f7:e6:b7:fd:b0:b4:7c:ba:e6:4d: ca:dd:69:1f:ab:da:cd:16:52:06:0b:5e:db:2c:0f: fe:64:5e:81:c6:0f:5a:4a:ce:28:43:67:cd:d3:07: 02:8a:71:63:1e:db:a1:b5:8e:89:d1:0d:21:45:55: 4d:3e:d3:25:20:35:bb:d8:91:e2:10:94:7a:39:37: 20:2b:15:69:e9:b8:8f:99:a6:d7:56:10:d9:85:a0: 17:ab:b9:ad:40:0f:07:08:b5:5f:e7:9b:90:38:f8: 45:b9:5a:49:13:b9:38:8c:3f:d3:f6:36:41:b0:c5: 22:f7:ae:3f:a3:e9:e6:d5:48:93:33:b3:97:f6:82: eb:43:99:6f:ff:97:2d:46:47:11:4b:7b:4a:1f:6d: e0:35:ae:14:4b:91:49:41:eb:67:35:9b:af:df:63: 06:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DC:CE:9C:AA:B4:DD:19:C3:B4:74:B6:3D:EE:46:0C:BC:84:C6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:bf:2b:c8:26:a0:a1:14:2d:9a:61:da:4c:7c:f6:e7:44: 29:b8:bb:35:95:fa:48:64:92:23:91:84:77:5c:00:6b:ee:0f: ef:c8:b7:46:80:8d:8b:55:6e:1a:1e:9c:90:dc:e2:86:37:f7: 01:7a:38:a8:45:7f:2b:da:61:c3:dd:d1:73:35:13:49:9a:45: bd:11:49:51:16:a9:ed:45:88:94:af:6b:f4:c9:5f:a9:71:dd: cc:d2:ff:0d:3a:22:47:a7:b7:db:cf:ce:18:80:21:cb:59:25: 2a:37:3f:d1:70:49:00:08:ed:82:2a:c5:fb:8b:fb:f2:13:e9: 3f:75:ec:ea:04:0f:1a:90:b0:e3:af:e5:af:07:06:21:48:e9: 28:f8:c0:a6:65:be:80:e0:36:1a:e6:90:1f:90:a1:30:d2:54: 10:b0:f0:52:51:f1:4e:2f:7b:42:06:fa:8a:52:1d:54:80:6f: dd:9c:08:e7:59:d7:71:8d:9f:7b:3d:40:43:8c:5b:96:c4:79: 88:6a:a8:7c:f2:89:f0:d1:f9:ad:dc:c1:d3:b0:f2:e9:e5:28: 19:5f:ab:12:3e:09:bc:af:8c:41:99:66:0c:fb:3c:df:aa:fd: fa:27:df:ec:e7:52:86:1e:c5:66:1e:5e:8c:f1:c0:3b:35:af: 52:5b:2e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc+1H1WYQ1Nyq/NegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI0MDkxNzE1MjgxMloXDTI0MTIxNjE2MjgxMlowLzEtMCsGA1UEAxMk NzdiYmI0ZDMtYTkwMy00ZjA0LWE3ZTItZDY5YmZiODQyZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jXj5DT3kXT+GQSUZEJmG+WHKGL9oFXz0tXo DShmU1pMeYQz0Stxf3oanwypN17hq15OC6lgwZ5rPeDBYODJh1OX/9GpQG/xnJRK Rl8oTDCUc2hETcHOIy9BFZzkKffmt/2wtHy65k3K3Wkfq9rNFlIGC17bLA/+ZF6B xg9aSs4oQ2fN0wcCinFjHtuhtY6J0Q0hRVVNPtMlIDW72JHiEJR6OTcgKxVp6biP mabXVhDZhaAXq7mtQA8HCLVf55uQOPhFuVpJE7k4jD/T9jZBsMUi964/o+nm1UiT M7OX9oLrQ5lv/5ctRkcRS3tKH23gNa4US5FJQetnNZuv32MG3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrczpyqtN0Zw7R0tj3uRgy8hMalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuHvyvIJqChFC2aYdpMfPbnRCm4uzWV+khkkiORhHdcAGvuD+/It0aA jYtVbhoenJDc4oY39wF6OKhFfyvaYcPd0XM1E0maRb0RSVEWqe1FiJSva/TJX6lx 3czS/w06Ikent9vPzhiAIctZJSo3P9FwSQAI7YIqxfuL+/IT6T917OoEDxqQsOOv 5a8HBiFI6Sj4wKZlvoDgNhrmkB+QoTDSVBCw8FJR8U4ve0IG+opSHVSAb92cCOdZ 13GNn3s9QEOMW5bEeYhqqHzyifDR+a3cwdOw8unlKBlfqxI+CbyvjEGZZgz7PN+q /fon3+znUoYexWYeXozxwDs1r1JbLoA= -----END CERTIFICATE-----Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org