$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa File: 58132a11-8e2a-354a-b569-5f5fc420c67f.roa (raw, json) Hash identifier: 0EGjDwXDuw9kPv/k7E5RxkfcRyr2tf++2ZG3JKXj7q4= Subject key identifier: 21:0C:6E:ED:BB:DD:DF:B4:9D:AB:14:26:2F:58:DE:E2:63:71:CB:3F Certificate issuer: /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766 Certificate serial: 010D0C9F4328584413A92C4709B364AF681ED088 Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa Signing time: Sat 02 Dec 2023 02:00:16 +0000 ROA not before: Sat 02 Dec 2023 02:00:16 +0000 ROA not after: Fri 01 Mar 2024 02:00:16 +0000 asID: 399628 IP address blocks: 64.94.156.0/24 maxlen: 24 64.7.197.0/24 maxlen: 24 64.94.153.0/24 maxlen: 24 64.95.14.0/24 maxlen: 24 64.95.9.0/24 maxlen: 24 64.94.159.0/24 maxlen: 24 2620:96:a006::/48 maxlen: 48 2620:96:a005::/48 maxlen: 48 2620:96:a004::/48 maxlen: 48 2620:96:a003::/48 maxlen: 48 2620:96:a002::/48 maxlen: 48 2620:96:a007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Dec 2023 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:13:a9:2c:47:09:b3:64:af:68:1e:d0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766 Validity Not Before: Dec 2 02:00:16 2023 GMT Not After : Mar 1 02:00:16 2024 GMT Subject: CN=9b8ff4b0-069d-4f5e-bbc7-8dae35620c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:cf:f1:2f:9e:6b:80:35:8a:09:ad:ab:e4: 55:76:e7:c1:c3:0d:bf:f9:88:8d:78:44:f9:8c:9d: cd:2c:40:10:cd:6e:b9:a0:ba:0f:ef:4a:c8:4e:8d: c1:19:fd:63:1d:0a:7b:51:cd:01:4a:cb:2a:f8:36: 49:2a:4f:36:4b:7d:a3:c3:71:59:96:e0:5e:ab:d0: ad:0c:7f:3f:df:99:d2:1e:09:a1:4a:c6:09:ad:a1: b3:7a:e6:a1:20:0a:05:a3:c9:0e:c3:c6:90:64:e4: ad:b5:f8:8f:9f:9d:0b:5d:e9:32:43:70:fe:fd:71: b0:51:26:2c:45:37:89:c1:fb:ac:f9:09:39:ce:e3: 6a:8d:a0:69:da:96:ac:8d:ec:b8:ff:3b:26:8a:1c: 3f:af:a9:6d:3f:9e:d7:86:93:0e:70:5a:c2:36:f6: 42:03:81:9b:c7:c8:b1:e5:d3:b6:4c:f2:80:eb:88: fd:0b:76:cf:90:18:5b:13:98:07:52:b5:16:3a:a4: 52:f7:cb:e1:7e:b4:1a:b2:08:66:0a:8f:40:65:10: 36:0a:7a:cf:4e:7d:f6:d1:13:2d:a9:45:9b:12:62: f4:d9:8a:c3:fe:b1:a6:9a:eb:9a:1e:b7:1f:53:8f: 88:4c:b0:c1:8b:68:88:44:0b:c0:fd:9e:13:bd:95: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0C:6E:ED:BB:DD:DF:B4:9D:AB:14:26:2F:58:DE:E2:63:71:CB:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/58132a11-8e2a-354a-b569-5f5fc420c67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl X509v3 Authority Key Identifier: keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer sbgp-ipAddrBlock: critical IPv4: 64.7.197.0/24 64.94.153.0/24 64.94.156.0/24 64.94.159.0/24 64.95.9.0/24 64.95.14.0/24 IPv6: 2620:96:a002::-2620:96:a007:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:53:bd:e4:38:07:fa:67:66:4f:9b:e9:7f:e4:b3:5a:f3:a7: f0:4f:30:1b:14:11:2a:c2:d7:ca:39:e5:d2:2c:39:f0:f5:49: 6e:9c:e1:60:4f:c2:0f:f5:a4:d9:bb:9e:cd:2b:9a:b5:0e:fc: 2a:35:d1:3a:0f:d0:2f:7c:5f:83:11:c1:d5:97:74:36:66:bb: 01:d5:f7:20:77:57:35:75:83:ab:db:b5:4d:15:a6:3e:67:b4: 05:27:2e:b5:7e:26:15:04:6b:e0:b4:6f:55:c4:1e:ca:bd:3b: 88:0b:41:8d:38:92:2f:75:cd:18:40:16:69:03:89:01:12:61: 7e:39:67:55:20:d1:28:5c:11:d8:76:23:49:b9:55:86:a1:3f: 35:2e:71:a9:4a:61:9a:3f:36:8d:d3:ec:2d:2d:33:b5:d3:9a: 04:89:50:bc:01:44:5b:6f:04:98:9c:f2:5a:6e:91:2d:13:96: 2a:c0:07:6b:f0:d0:80:e3:dc:f9:e2:65:45:bb:6f:5d:64:46: c4:3a:9d:6e:2c:10:c4:b1:64:0a:a1:d2:1d:1b:14:97:f4:c0: e5:ce:78:6c:ba:ec:2e:35:3f:38:d0:df:a1:b9:e7:a0:03:e2: 58:71:3e:81:af:9f:54:b4:8e:7c:34:72:ec:44:41:49:ec:d9: a0:ba:ab:33 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEQTqSxHCbNkr2ge0IgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl NzY2MB4XDTIzMTIwMjAyMDAxNloXDTI0MDMwMTAyMDAxNlowLzEtMCsGA1UEAxMk OWI4ZmY0YjAtMDY5ZC00ZjVlLWJiYzctOGRhZTM1NjIwYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonnP8S+ea4A1igmtq+RVdufBww2/+YiNeET5 jJ3NLEAQzW65oLoP70rITo3BGf1jHQp7Uc0BSssq+DZJKk82S32jw3FZluBeq9Ct DH8/35nSHgmhSsYJraGzeuahIAoFo8kOw8aQZOSttfiPn50LXekyQ3D+/XGwUSYs RTeJwfus+Qk5zuNqjaBp2pasjey4/zsmihw/r6ltP57XhpMOcFrCNvZCA4Gbx8ix 5dO2TPKA64j9C3bPkBhbE5gHUrUWOqRS98vhfrQasghmCo9AZRA2CnrPTn320RMt qUWbEmL02YrD/rGmmuuaHrcfU4+ITLDBi2iIRAvA/Z4TvZUw0wIDAQABo4IDjzCC A4swHQYDVR0OBBYEFCEMbu273d+0nasUJi9Y3uJjccs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvNTgxMzJhMTEtOGUyYS0z NTRhLWI1NjktNWY1ZmM0MjBjNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4 ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk ODBkOGU3NjYuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDAqBAIAATAkAwQAQAfFAwQA QF6ZAwQAQF6cAwQAQF6fAwQAQF8JAwQAQF8OMBoEAgACMBQwEgMHASYgAJagAgMH AyYgAJagADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQDIU73kOAf6Z2ZPm+l/5LNa86fwTzAbFBEqwtfKOeXS LDnw9UlunOFgT8IP9aTZu57NK5q1DvwqNdE6D9AvfF+DEcHVl3Q2ZrsB1fcgd1c1 dYOr27VNFaY+Z7QFJy61fiYVBGvgtG9VxB7KvTuIC0GNOJIvdc0YQBZpA4kBEmF+ OWdVINEoXBHYdiNJuVWGoT81LnGpSmGaPzaN0+wtLTO105oEiVC8AURbbwSYnPJa bpEtE5YqwAdr8NCA49z54mVFu29dZEbEOp1uLBDEsWQKodIdGxSX9MDlznhsuuwu NT840N+hueegA+JYcT6Br59UtI58NHLsREFJ7Nmguqsz -----END CERTIFICATE-----Generated at Sat Dec 2 02:31:37 2023 by rpki-client on console-ams.rpki-client.org