$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa File: b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa (raw, json) Hash identifier: UGP1eix7Vf4D4bZchykY0+l4N5BrrNPsHSFlEw8RfOY= Subject key identifier: 5F:B2:1E:B2:16:D4:4C:88:CA:25:0D:97:FA:06:17:EB:2B:F6:52:1F Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F43285847537B7D381FABCD09D0E11560 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 21887 IP address blocks: 23.105.192.0/19 maxlen: 24 23.106.128.0/19 maxlen: 24 23.252.96.0/20 maxlen: 24 45.62.96.0/19 maxlen: 24 45.78.0.0/18 maxlen: 24 66.112.208.0/20 maxlen: 24 67.209.176.0/20 maxlen: 24 74.121.148.0/22 maxlen: 24 104.128.80.0/20 maxlen: 24 104.160.32.0/20 maxlen: 24 104.194.64.0/19 maxlen: 24 104.224.128.0/18 maxlen: 24 107.182.176.0/20 maxlen: 24 138.128.192.0/19 maxlen: 24 144.168.56.0/21 maxlen: 24 162.211.224.0/21 maxlen: 24 192.243.112.0/20 maxlen: 24 198.35.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:7d:38:1f:ab:cd:09:d0:e1:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=663ff0fe-5d9f-4299-876b-03b511230323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:15:00:67:1a:cc:fe:6b:6f:d3:34:f3:ac: b9:0b:c9:4f:1c:77:7e:2d:e2:4c:d4:98:fd:d8:c4: f8:42:5c:d4:0a:31:30:85:d0:f3:d2:46:b3:51:67: 61:e6:26:1f:ef:5f:24:35:e5:f0:40:df:3c:f8:f5: 15:bf:f2:c6:31:f1:ac:03:79:bc:77:c8:ab:74:9c: e3:e4:ea:5e:0c:45:6b:c7:b2:05:f3:80:df:87:97: 01:47:2e:95:19:60:b2:72:a3:a3:ce:03:d7:dc:5e: f4:c0:1c:b8:b0:90:31:4c:e5:a3:ef:db:ec:56:bd: 76:b4:3b:89:47:df:46:c7:8f:06:4a:ac:6f:14:08: 05:f4:8d:da:19:1f:c5:bf:ba:ad:5e:92:ef:53:2e: 90:17:c7:74:0b:83:a4:ad:f7:28:17:af:2d:d8:b0: cf:54:82:b2:54:9d:df:f2:f5:b5:8d:88:9b:1f:ca: cd:5a:f3:60:7e:1f:66:16:e5:88:14:ee:eb:92:48: 9b:0b:ac:4e:6a:2d:ee:7b:69:62:a4:8c:9a:bf:0f: 67:9a:a7:d2:7a:09:14:69:cb:c3:6e:92:e2:74:ea: 4d:2b:71:fa:b4:5c:da:d7:7c:6d:29:db:30:64:6c: 88:71:ea:64:b9:9f:83:e7:78:34:c0:da:ff:41:42: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B2:1E:B2:16:D4:4C:88:CA:25:0D:97:FA:06:17:EB:2B:F6:52:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv4: 23.105.192.0/19 23.106.128.0/19 23.252.96.0/20 45.62.96.0/19 45.78.0.0/18 66.112.208.0/20 67.209.176.0/20 74.121.148.0/22 104.128.80.0/20 104.160.32.0/20 104.194.64.0/19 104.224.128.0/18 107.182.176.0/20 138.128.192.0/19 144.168.56.0/21 162.211.224.0/21 192.243.112.0/20 198.35.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dd:30:8d:c0:cf:17:cd:8b:4e:13:67:a9:52:41:c7:21:df: 05:7c:12:f6:07:ff:91:75:5a:ef:23:80:b0:ef:95:e8:00:18: 4e:71:63:f6:1a:5a:a9:65:fc:74:a9:6b:6a:1d:e5:f1:00:2e: df:de:c5:2b:0a:1a:07:ad:9c:82:22:20:ec:67:f6:ed:4d:43: 91:12:3d:94:f0:f6:ba:c0:e1:a2:57:c9:16:d8:3b:16:be:b5: e1:99:0c:d3:35:38:47:ff:36:15:10:4c:cb:49:c7:88:0a:d9: 3c:3c:38:df:35:f0:51:00:41:63:31:bf:01:7d:93:95:3a:66: f6:81:1e:88:a4:bf:16:c8:de:f8:cf:dd:9a:16:4b:0d:ae:38: 08:83:cb:de:a2:69:43:57:5a:49:ba:bc:2e:be:31:2f:64:8d: ec:c6:82:ec:e3:33:f4:32:f7:3e:ee:91:2b:bc:09:b3:95:7b: 60:3d:f6:a3:c4:ed:f5:36:58:37:51:38:12:ae:f0:be:45:96: 51:be:38:e0:05:42:9a:18:d6:8c:b8:dc:8f:27:2a:89:43:3e: 54:6b:2c:b3:1e:69:2c:d1:52:d1:4f:e4:8d:5e:e5:63:4a:53: b3:10:24:3c:77:4b:8c:3f:e4:1a:20:66:25:02:0b:54:7b:13: 4f:35:ca:23 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEdTe304H6vNCdDhFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk NjYzZmYwZmUtNWQ5Zi00Mjk5LTg3NmItMDNiNTExMjMwMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNgVAGcazP5rb9M086y5C8lPHHd+LeJM1Jj9 2MT4QlzUCjEwhdDz0kazUWdh5iYf718kNeXwQN88+PUVv/LGMfGsA3m8d8irdJzj 5OpeDEVrx7IF84Dfh5cBRy6VGWCycqOjzgPX3F70wBy4sJAxTOWj79vsVr12tDuJ R99Gx48GSqxvFAgF9I3aGR/Fv7qtXpLvUy6QF8d0C4OkrfcoF68t2LDPVIKyVJ3f 8vW1jYibH8rNWvNgfh9mFuWIFO7rkkibC6xOai3ue2lipIyavw9nmqfSegkUacvD bpLidOpNK3H6tFza13xtKdswZGyIcepkuZ+D53g0wNr/QUIaNQIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFF+yHrIW1EyIyiUNl/oGF+sr9lIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYjBhYzIzYjAtNWYzYS0z NjVkLTlhZjYtMjcwMjFhOTE1NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAX3TCNwM8XzYtOE2epUkHHId8FfBL2B/+RdVrvI4Cw75Xo ABhOcWP2GlqpZfx0qWtqHeXxAC7f3sUrChoHrZyCIiDsZ/btTUOREj2U8Pa6wOGi V8kW2DsWvrXhmQzTNThH/zYVEEzLSceICtk8PDjfNfBRAEFjMb8BfZOVOmb2gR6I pL8WyN74z92aFksNrjgIg8veomlDV1pJurwuvjEvZI3sxoLs4zP0Mvc+7pErvAmz lXtgPfajxO31Nlg3UTgSrvC+RZZRvjjgBUKaGNaMuNyPJyqJQz5UayyzHmks0VLR T+SNXuVjSlOzECQ8d0uMP+QaIGYlAgtUexNPNcoj -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org