$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/3b65e538-7eac-399f-a285-565152afd8f6.roa File: 3b65e538-7eac-399f-a285-565152afd8f6.roa (raw, json) Hash identifier: a5EoyRP+ms0FLN+nxf+PhwQAlXAPaKBohRBANcvyPhc= Subject key identifier: E8:CE:B4:68:57:32:A4:B0:9E:4E:7D:EC:2A:56:30:07:0E:57:34:04 Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Certificate serial: 010D0C9F43285847D29F5B44D2D2C15444FBD180 Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/3b65e538-7eac-399f-a285-565152afd8f6.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 33234 IP address blocks: 64.77.213.0/24 maxlen: 24 64.77.216.0/23 maxlen: 24 64.77.218.0/24 maxlen: 24 72.14.97.0/24 maxlen: 24 72.14.119.0/24 maxlen: 24 72.14.126.0/24 maxlen: 24 97.75.255.0/24 maxlen: 24 208.101.227.0/24 maxlen: 24 208.101.234.0/23 maxlen: 24 208.101.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:5b:44:d2:d2:c1:54:44:fb:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=af0d2b7c-e281-4e19-80cc-c949ee0d1230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:b6:13:18:aa:dc:d2:4a:ef:5c:cc:c0:ca: 98:a9:e0:8e:6a:cd:2f:1b:6c:62:bc:34:76:9e:c6: 62:d8:a3:a0:03:04:e0:fe:51:bd:ac:f9:17:7a:f0: 5d:4f:c2:85:bd:59:40:cb:38:57:69:48:94:5a:cf: 6a:76:20:0a:d7:2d:a8:25:57:d5:af:a6:69:05:4b: 49:8b:dd:43:73:3f:39:7d:12:e7:b4:43:77:ad:9b: 0c:96:16:e2:99:e7:7b:5b:7a:d5:cc:c3:2f:04:b9: fc:d4:3a:fa:b6:83:ba:5d:0e:7f:75:73:d4:95:1e: fa:16:d3:23:1f:f6:5f:69:4d:77:0a:ff:fc:c3:20: 59:bc:54:68:62:c6:71:65:5a:11:a3:9b:f2:da:37: 62:b4:dd:47:31:5a:df:bd:e7:91:c9:66:89:7d:dd: b9:1d:03:20:c4:20:d3:01:1f:ea:ff:42:1c:b7:12: c2:01:d6:e3:9c:78:0d:68:71:21:9a:5c:d1:15:f5: c6:7b:d5:fb:bf:b4:68:08:81:34:3e:da:f0:d8:36: 86:aa:94:e5:f0:4a:03:9b:fc:db:d2:a7:b4:94:4c: e3:95:02:1c:70:4a:5f:b4:19:57:b3:5e:ef:af:c6: 63:1f:db:4a:13:bc:23:bd:ac:be:df:d5:96:4d:b4: c7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CE:B4:68:57:32:A4:B0:9E:4E:7D:EC:2A:56:30:07:0E:57:34:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/3b65e538-7eac-399f-a285-565152afd8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl X509v3 Authority Key Identifier: keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer sbgp-ipAddrBlock: critical IPv4: 64.77.213.0/24 64.77.216.0-64.77.218.255 72.14.97.0/24 72.14.119.0/24 72.14.126.0/24 97.75.255.0/24 208.101.227.0/24 208.101.234.0-208.101.236.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e0:24:47:98:66:b8:97:fc:0e:8b:29:bf:0a:9a:5a:d5:15: 1e:07:f8:01:70:89:83:93:80:6e:65:c7:a1:ad:95:7d:21:52: 3d:d9:ab:6a:17:ef:a2:d1:92:64:78:14:a1:39:73:d4:ed:a4: 26:a4:d8:02:a5:f1:5e:68:f5:db:4a:b4:99:ad:be:52:5e:d4: 1d:0a:d2:8f:cb:6a:09:93:ba:81:8a:a5:73:67:b2:80:70:30: 89:8c:8a:2a:e2:5c:86:4d:5a:fb:6b:29:6f:da:db:7a:be:5a: b2:68:b4:10:25:d4:de:5c:17:c3:65:3d:8f:0e:ab:d4:f4:7e: 61:df:c6:8b:28:0b:a1:89:0b:50:7a:58:23:b1:68:95:0e:f7: 4e:43:56:ca:6e:c2:41:bc:c8:63:b7:2d:1d:73:45:14:ae:dd: 7f:f4:b4:2a:ac:4c:8e:2e:8d:bb:b7:29:6f:1a:e9:6a:50:6c: bb:c8:9b:1f:75:08:2d:1b:ee:c6:b9:a6:29:44:d4:c6:56:2d: a5:20:32:da:82:8b:be:cc:43:cc:9e:3b:76:a3:37:f4:49:a8: 8c:e0:d3:de:cc:b1:e5:66:b6:b0:07:db:00:21:c0:05:bd:6e: 6d:df:86:5b:ee:be:34:c4:1c:95:48:b3:46:46:ca:30:b3:b5: c8:55:94:96 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEfSn1tE0tLBVET70YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MDc0YzItN2M4Zi00MWFjLTgzMDctNzRlY2U0NGE0 NjBjMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk YWYwZDJiN2MtZTI4MS00ZTE5LTgwY2MtYzk0OWVlMGQxMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX62Exiq3NJK71zMwMqYqeCOas0vG2xivDR2 nsZi2KOgAwTg/lG9rPkXevBdT8KFvVlAyzhXaUiUWs9qdiAK1y2oJVfVr6ZpBUtJ i91Dcz85fRLntEN3rZsMlhbimed7W3rVzMMvBLn81Dr6toO6XQ5/dXPUlR76FtMj H/ZfaU13Cv/8wyBZvFRoYsZxZVoRo5vy2jditN1HMVrfveeRyWaJfd25HQMgxCDT AR/q/0IctxLCAdbjnHgNaHEhmlzRFfXGe9X7v7RoCIE0Ptrw2DaGqpTl8EoDm/zb 0qe0lEzjlQIccEpftBlXs17vr8ZjH9tKE7wjvay+39WWTbTHFwIDAQABo4IDjzCC A4swHQYDVR0OBBYEFOjOtGhXMqSwnk597CpWMAcOVzQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjcw NzRjMi03YzhmLTQxYWMtODMwNy03NGVjZTQ0YTQ2MGMvM2I2NWU1MzgtN2VhYy0z OTlmLWEyODUtNTY1MTUyYWZkOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3MDc0YzItN2M4Zi00MWFjLTgz MDctNzRlY2U0NGE0NjBjLzhiNzA3NGMyLTdjOGYtNDFhYy04MzA3LTc0ZWNlNDRh NDYwYy5jcmwwHwYDVR0jBBgwFoAUwcyIvErACddhSMPRw7JSQGnVnwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YjcwNzRjMi03YzhmLTQxYWMtODMwNy03NGVj ZTQ0YTQ2MGMuY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAQE3VMAwD BANATdgDBABATdoDBABIDmEDBABIDncDBABIDn4DBABhS/8DBADQZeMwDAMEAdBl 6gMEANBl7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAu4CRHmGa4l/wOiym/Cppa1RUeB/gBcImDk4BuZceh rZV9IVI92atqF++i0ZJkeBShOXPU7aQmpNgCpfFeaPXbSrSZrb5SXtQdCtKPy2oJ k7qBiqVzZ7KAcDCJjIoq4lyGTVr7aylv2tt6vlqyaLQQJdTeXBfDZT2PDqvU9H5h 38aLKAuhiQtQelgjsWiVDvdOQ1bKbsJBvMhjty0dc0UUrt1/9LQqrEyOLo27tylv GulqUGy7yJsfdQgtG+7GuaYpRNTGVi2lIDLagou+zEPMnjt2ozf0SaiM4NPezLHl ZrawB9sAIcAFvW5t34Zb7r40xByVSLNGRsows7XIVZSW -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:25 2024 by rpki-client on console-ams.rpki-client.org