$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa File: 3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa (raw, json) Hash identifier: qGqZ+3DvX7f2ysR0GcUYB9DKyFtt+aOd3WE0Dndpv/A= Subject key identifier: BA:B8:A4:89:1C:46:EB:AB:E1:1E:88:C6:2E:04:5C:17:81:95:C3:B6 Certificate issuer: /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Certificate serial: 010D0C9F43285847B96169EAD8BD4553E5410300 Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 27580 IP address blocks: 104.153.152.0/24 maxlen: 24 104.153.153.0/24 maxlen: 24 104.153.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:69:ea:d8:bd:45:53:e5:41:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=351a562e-5981-48d8-b107-eba9a53e1afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:b2:cd:9d:80:2b:23:81:08:7a:52:4c:f0: 9a:1e:ac:52:55:25:35:d1:e4:38:97:25:04:66:07: 21:e4:b0:15:91:cb:ec:c3:0f:a2:7a:7c:db:dd:52: 5d:77:ca:c1:f1:81:54:29:13:c4:76:0a:85:27:50: 9b:3f:cb:1f:05:6e:f3:47:9f:51:f8:e3:b1:6f:09: 29:1f:85:0d:a4:62:80:bb:f5:51:06:96:c6:96:6b: 17:15:b7:a4:52:17:15:a3:11:d7:68:70:45:8f:96: 80:c5:75:2d:28:f7:29:c3:88:a9:ee:2f:57:d0:bf: cd:f0:78:e5:19:8b:e0:b3:d4:aa:5e:ed:72:18:bc: e5:d2:4a:62:36:08:22:6a:6a:bd:af:9d:7d:43:92: eb:5e:cf:c5:2e:98:17:41:c8:51:82:4e:48:72:02: 32:b5:f4:0a:dd:a2:ef:36:3c:e5:85:d4:14:4c:9f: 4c:9b:c8:b5:4f:68:42:81:d6:84:ae:3e:24:b2:ec: 33:3c:f2:4d:3d:c8:3d:53:59:1a:71:98:4d:11:d3: d5:72:e1:99:34:2c:e6:ba:d8:67:5d:b8:ef:e0:ab: d6:1d:0c:82:46:77:39:b2:41:eb:81:58:23:5a:f7: 30:6b:29:13:6f:bc:ea:34:74:f7:97:48:5c:1a:73: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B8:A4:89:1C:46:EB:AB:E1:1E:88:C6:2E:04:5C:17:81:95:C3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/3eb628f1-1ff5-3145-a0e3-63d7e607cfda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl X509v3 Authority Key Identifier: keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer sbgp-ipAddrBlock: critical IPv4: 104.153.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:87:b6:5f:65:f6:ef:1f:46:ac:a1:0b:15:6c:f2:04:be:13: 9f:1f:48:19:a9:46:c8:ea:4a:a3:4e:5a:58:5c:fb:70:9c:80: 03:79:14:19:e2:74:37:1b:a7:b9:ce:6c:ec:45:b9:c6:44:63: 99:ba:19:6c:45:b8:db:c8:e1:3e:1c:ee:db:30:33:ad:f5:20: e9:56:f1:81:93:cb:d6:65:ca:6f:63:86:dc:61:99:19:f2:45: 37:9e:7e:fe:6f:3d:87:89:03:9e:b3:f9:3a:9d:69:df:0d:6f: e1:47:10:26:2a:55:f5:d6:c5:39:b4:5d:37:41:ff:6c:a8:d6: 96:bb:14:cd:9d:cd:60:7c:56:b9:a3:ed:1f:db:42:fc:97:ab: 65:dc:d2:6f:50:a5:0e:79:cc:26:08:1c:d3:8f:a8:fc:5c:e0: 07:aa:bb:f7:e0:e0:a2:f2:48:51:77:99:75:b9:a9:81:8f:2a: ec:89:ac:d8:54:d4:d4:d5:9d:aa:35:2b:c9:1d:6b:50:f6:4f: ef:90:6c:ca:63:98:09:86:38:4c:f5:cc:7b:8f:85:42:51:30: 82:4b:80:46:93:cb:a6:f5:c4:bf:21:0e:5b:99:52:b0:22:af: cc:ee:1c:b5:25:d0:df:31:15:de:e9:7e:bc:04:e7:ac:cb:ae: af:cf:2e:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YWnq2L1FU+VBAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YzgzZmEtZmZjYi00YzE0LTllM2ItYzNmYTQwNTYx YWQ5MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk MzUxYTU2MmUtNTk4MS00OGQ4LWIxMDctZWJhOWE1M2UxYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8uyzZ2AKyOBCHpSTPCaHqxSVSU10eQ4lyUE Zgch5LAVkcvsww+ienzb3VJdd8rB8YFUKRPEdgqFJ1CbP8sfBW7zR59R+OOxbwkp H4UNpGKAu/VRBpbGlmsXFbekUhcVoxHXaHBFj5aAxXUtKPcpw4ip7i9X0L/N8Hjl GYvgs9SqXu1yGLzl0kpiNggiamq9r519Q5LrXs/FLpgXQchRgk5IcgIytfQK3aLv NjzlhdQUTJ9Mm8i1T2hCgdaErj4ksuwzPPJNPcg9U1kacZhNEdPVcuGZNCzmuthn Xbjv4KvWHQyCRnc5skHrgVgjWvcwaykTb7zqNHT3l0hcGnOLFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq4pIkcRuur4R6Ixi4EXBeBlcO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YThj ODNmYS1mZmNiLTRjMTQtOWUzYi1jM2ZhNDA1NjFhZDkvM2ViNjI4ZjEtMWZmNS0z MTQ1LWEwZTMtNjNkN2U2MDdjZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGE4YzgzZmEtZmZjYi00YzE0LTll M2ItYzNmYTQwNTYxYWQ5LzhhOGM4M2ZhLWZmY2ItNGMxNC05ZTNiLWMzZmE0MDU2 MWFkOS5jcmwwHwYDVR0jBBgwFoAUjccdmxK7+UZwIdMaRkD1JyDt1ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YThjODNmYS1mZmNiLTRjMTQtOWUzYi1jM2Zh NDA1NjFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImHtl9l9u8fRqyhCxVs8gS+E58fSBmpRsjqSqNOWlhc+3CcgAN5FBni dDcbp7nObOxFucZEY5m6GWxFuNvI4T4c7tswM631IOlW8YGTy9Zlym9jhtxhmRny RTeefv5vPYeJA56z+Tqdad8Nb+FHECYqVfXWxTm0XTdB/2yo1pa7FM2dzWB8Vrmj 7R/bQvyXq2Xc0m9QpQ55zCYIHNOPqPxc4Aequ/fg4KLySFF3mXW5qYGPKuyJrNhU 1NTVnao1K8kda1D2T++QbMpjmAmGOEz1zHuPhUJRMIJLgEaTy6b1xL8hDluZUrAi r8zuHLUl0N8xFd7pfrwE56zLrq/PLsQ= -----END CERTIFICATE-----Generated at Fri Nov 22 08:05:45 2024 by rpki-client on console-ams.rpki-client.org