$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa File: 3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa (raw, json) Hash identifier: otJW0OyqRiKUKFoJIi4zPawzp9g+D80DAL5IoLaxwZ0= Subject key identifier: 00:FF:B6:0B:24:8D:4B:0E:4C:7E:F6:EE:CF:60:77:9D:09:F8:17:FE Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Certificate serial: 010D0C9F43285845FAB3E0FF01D4ECBF1FA5BA80 Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa Signing time: Fri 24 May 2024 13:00:34 +0000 ROA not before: Fri 24 May 2024 13:00:34 +0000 ROA not after: Thu 22 Aug 2024 13:00:34 +0000 asID: 27580 IP address blocks: 104.153.154.0/23 maxlen: 24 104.153.153.0/24 maxlen: 24 104.153.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:fa:b3:e0:ff:01:d4:ec:bf:1f:a5:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Validity Not Before: May 24 13:00:34 2024 GMT Not After : Aug 22 13:00:34 2024 GMT Subject: CN=287e337f-6000-4f8b-87f4-a8d453382ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:94:eb:df:ab:0a:8b:4f:34:18:43:7c:85: 8e:22:1f:56:09:35:c4:20:6a:80:4e:99:75:21:5b: 50:75:80:60:32:15:75:45:72:cf:6e:86:02:da:94: 7a:7b:00:d2:da:f4:f3:e8:86:b4:7f:84:4a:8b:e1: f8:e9:2b:dc:90:fa:3b:b9:1c:61:9b:3c:ab:b7:12: 1c:ac:11:63:40:81:ae:ce:a5:31:f1:6a:bf:51:04: 86:20:ab:cf:11:13:7a:63:6b:14:f6:f3:cb:de:97: 23:3a:77:8f:b1:fa:cc:4c:11:0a:d4:2d:5b:89:bf: 58:79:7a:e5:ff:d3:a4:68:6d:3e:ae:6e:8d:05:19: 1a:79:c0:da:8e:3b:b5:a2:01:6d:f3:53:bd:9d:47: b7:2f:3b:8e:d9:6d:fb:6f:26:ed:fa:f3:9f:03:84: a0:46:77:bb:6a:e2:0e:52:ea:27:ee:3b:f3:ab:ae: 54:f1:fc:f5:b3:08:09:74:45:3c:90:ec:91:07:08: f0:b7:16:d5:ea:3f:ce:fd:3c:d5:0a:5c:e1:8e:a1: 73:c2:47:0b:8e:e9:0b:93:5b:b0:84:31:a5:e5:6f: 6e:d5:3f:5c:d2:c0:4e:1b:a6:0f:33:9d:02:5f:cf: c3:ce:aa:d6:31:6e:f3:aa:e2:5d:23:df:04:0f:cc: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FF:B6:0B:24:8D:4B:0E:4C:7E:F6:EE:CF:60:77:9D:09:F8:17:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl X509v3 Authority Key Identifier: keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer sbgp-ipAddrBlock: critical IPv4: 104.153.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b1:9e:62:29:a0:28:84:de:03:08:d1:6c:4a:73:0f:ec:39: 6a:b9:96:1f:d6:67:ff:02:af:41:14:02:40:1b:d0:d5:f5:5a: b1:40:1a:d3:27:b2:c5:8a:87:67:68:30:4f:1f:fa:52:3c:b6: d3:fa:1a:19:40:04:66:5b:f6:01:b3:ef:5f:05:e5:a0:53:86: 69:bd:38:82:2c:55:37:92:e0:d3:bf:3b:8b:7d:c6:8d:88:4c: ad:f8:a7:30:27:f5:0b:25:ed:d9:8e:3f:8e:60:53:05:45:df: 80:4c:1a:ed:52:ac:ed:b0:03:fa:2e:d4:e9:26:c7:ce:4f:87: 53:47:60:41:76:63:6f:e9:1f:47:c6:6b:6d:d9:4e:e4:b7:cf: 8d:d3:68:35:e1:d2:38:5d:f2:87:30:89:b1:0c:d6:b9:49:0b: 95:ab:28:02:4e:35:a9:fb:a1:c9:48:0b:f1:cd:38:04:fc:d0: db:77:c3:25:03:e1:a2:54:48:40:36:31:84:4a:4f:a0:0d:34: 14:ed:87:8f:14:f6:b5:98:a5:bf:1c:fc:c3:4c:c5:4a:7a:48: 32:9a:9d:1a:9a:cc:63:07:5c:d6:8d:4a:ab:0d:d8:f4:cf:27: 1f:cb:26:cd:47:07:7c:a5:f1:9b:1d:99:83:82:69:c1:18:14: 0e:27:8f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX6s+D/AdTsvx+luoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx YWQ5MB4XDTI0MDUyNDEzMDAzNFoXDTI0MDgyMjEzMDAzNFowLzEtMCsGA1UEAxMk Mjg3ZTMzN2YtNjAwMC00ZjhiLTg3ZjQtYThkNDUzMzgyYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTCU69+rCotPNBhDfIWOIh9WCTXEIGqATpl1 IVtQdYBgMhV1RXLPboYC2pR6ewDS2vTz6Ia0f4RKi+H46SvckPo7uRxhmzyrtxIc rBFjQIGuzqUx8Wq/UQSGIKvPERN6Y2sU9vPL3pcjOnePsfrMTBEK1C1bib9YeXrl /9OkaG0+rm6NBRkaecDajju1ogFt81O9nUe3LzuO2W37bybt+vOfA4SgRne7auIO Uuon7jvzq65U8fz1swgJdEU8kOyRBwjwtxbV6j/O/TzVClzhjqFzwkcLjukLk1uw hDGl5W9u1T9c0sBOG6YPM50CX8/DzqrWMW7zquJdI98ED8zouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD/tgskjUsOTH727s9gd50J+Bf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvM2ViNjI4ZjEtMWZmNS0z MTQ1LWEwZTMtNjNkN2U2MDdjZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2 MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh NDA1NjFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGxnmIpoCiE3gMI0WxKcw/sOWq5lh/WZ/8Cr0EUAkAb0NX1WrFAGtMn ssWKh2doME8f+lI8ttP6GhlABGZb9gGz718F5aBThmm9OIIsVTeS4NO/O4t9xo2I TK34pzAn9Qsl7dmOP45gUwVF34BMGu1SrO2wA/ou1Okmx85Ph1NHYEF2Y2/pH0fG a23ZTuS3z43TaDXh0jhd8ocwibEM1rlJC5WrKAJONan7oclIC/HNOAT80Nt3wyUD 4aJUSEA2MYRKT6ANNBTth48U9rWYpb8c/MNMxUp6SDKanRqazGMHXNaNSqsN2PTP Jx/LJs1HB3yl8ZsdmYOCacEYFA4nj6M= -----END CERTIFICATE-----Generated at Sun May 26 02:01:04 2024 by rpki-client on console-ams.rpki-client.org