$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/29a8684a-4966-3724-bf0d-9a0ec918c504.roa File: 29a8684a-4966-3724-bf0d-9a0ec918c504.roa (raw, json) Hash identifier: iRtxQCEYmA5Q3l3sO4799op1GAAMxKTkFX6G2bpjIlg= Subject key identifier: F6:CF:F6:F8:F3:5F:CB:55:74:F6:A4:7B:35:01:F7:EB:CD:5D:B9:0D Certificate issuer: /CN=a90f006a-b108-4757-9dfd-b36376534658 Certificate serial: 010D0C9F43285844F73004C7896AE04599708B00 Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/29a8684a-4966-3724-bf0d-9a0ec918c504.roa Signing time: Wed 21 Feb 2024 14:00:32 +0000 ROA not before: Wed 21 Feb 2024 14:00:32 +0000 ROA not after: Tue 21 May 2024 13:00:32 +0000 asID: 980 IP address blocks: 45.43.8.0/24 maxlen: 24 45.43.7.0/24 maxlen: 24 66.11.125.0/24 maxlen: 24 104.192.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:30:04:c7:89:6a:e0:45:99:70:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658 Validity Not Before: Feb 21 14:00:32 2024 GMT Not After : May 21 13:00:32 2024 GMT Subject: CN=ba5ce25a-a61f-4eda-b5df-88362dafac88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:a3:1e:05:1b:c7:e1:5d:0a:a1:57:d3:5b: 06:57:53:37:e6:b1:e8:95:34:2e:4f:d4:09:f6:66: c6:fd:c4:f9:3a:49:81:a0:35:5c:79:59:03:e6:4c: e4:52:a1:72:6d:33:e7:43:a6:f7:df:b6:76:3b:69: 92:ea:b2:ba:63:c5:2d:96:a9:53:f2:09:53:40:1b: 41:af:e5:7f:7c:ec:29:30:5b:fa:1c:83:35:cc:98: 4a:51:ad:51:ae:9c:3a:07:74:d7:4f:b7:a0:1a:db: 1c:cc:70:11:04:62:74:28:3b:76:a9:03:22:d2:dd: 58:30:b0:72:ce:47:0b:4f:18:2f:80:89:e6:6b:27: da:aa:1e:52:b0:c7:8c:c5:6f:b5:89:f8:c3:96:03: 96:bb:54:3a:c0:bc:fd:72:82:26:3d:17:b3:be:c9: 90:1c:ab:72:c3:08:7f:ab:08:10:af:76:89:31:08: 98:12:72:d3:31:0a:c1:e5:48:f4:5e:65:30:6d:8b: a0:91:ba:1c:fa:e1:b3:45:38:40:dc:b0:45:54:b7: 1d:4b:ee:4c:2e:8f:63:7f:66:44:c7:16:5e:49:10: fb:aa:b9:88:72:be:82:d2:81:6b:db:fe:6c:3b:88: a8:74:87:1a:4f:8a:bd:6c:a0:bb:61:0f:af:51:07: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:F6:F8:F3:5F:CB:55:74:F6:A4:7B:35:01:F7:EB:CD:5D:B9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/29a8684a-4966-3724-bf0d-9a0ec918c504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl X509v3 Authority Key Identifier: keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer sbgp-ipAddrBlock: critical IPv4: 45.43.7.0-45.43.8.255 66.11.125.0/24 104.192.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1d:d6:e5:a1:64:71:e7:c8:7d:7f:fa:09:a9:b3:95:ed:b5: c5:19:4f:d8:11:a4:ef:6e:3b:78:c4:4b:50:40:cb:7a:fb:ce: 10:09:77:f5:1c:c2:7c:06:dd:e2:61:4d:9a:97:e4:9e:2a:39: 5d:41:4b:dc:91:6e:37:e8:11:56:56:8d:e0:b9:2f:66:31:50: dc:f2:6c:41:87:c9:56:ff:ae:44:32:20:64:54:37:96:25:f3: 34:f3:c1:00:4d:f8:d7:8b:4d:b5:2a:6c:09:21:68:32:5b:78: 48:15:2c:20:f6:4c:da:8d:5b:e8:24:f4:2c:6f:95:1d:9d:99: 8f:86:19:c3:2e:3e:18:2b:f0:6a:5b:75:57:0a:1e:22:ab:c5: 35:13:41:cb:ea:a0:f7:63:2a:13:82:14:77:29:58:7f:d1:4f: da:69:23:e6:9f:dc:56:d8:2b:0d:6d:72:3a:de:3a:b3:61:1f: 6e:63:f4:b2:c9:bc:d1:2f:2f:2f:32:ab:71:14:fe:de:89:1f: 5a:bb:8f:02:8b:44:fe:13:6c:4d:59:08:e5:4f:d0:4e:de:b1: ba:e0:90:f2:2d:03:28:a7:ed:2b:71:00:09:88:9e:6b:d8:55: 90:1a:20:7b:6a:6e:fa:25:47:16:12:2c:fe:44:22:6a:6d:3b: 65:2d:a1:9f -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWET3MATHiWrgRZlwiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0 NjU4MB4XDTI0MDIyMTE0MDAzMloXDTI0MDUyMTEzMDAzMlowLzEtMCsGA1UEAxMk YmE1Y2UyNWEtYTYxZi00ZWRhLWI1ZGYtODgzNjJkYWZhYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA472jHgUbx+FdCqFX01sGV1M35rHolTQuT9QJ 9mbG/cT5OkmBoDVceVkD5kzkUqFybTPnQ6b337Z2O2mS6rK6Y8UtlqlT8glTQBtB r+V/fOwpMFv6HIM1zJhKUa1Rrpw6B3TXT7egGtsczHARBGJ0KDt2qQMi0t1YMLBy zkcLTxgvgInmayfaqh5SsMeMxW+1ifjDlgOWu1Q6wLz9coImPRezvsmQHKtywwh/ qwgQr3aJMQiYEnLTMQrB5Uj0XmUwbYugkboc+uGzRThA3LBFVLcdS+5MLo9jf2ZE xxZeSRD7qrmIcr6C0oFr2/5sO4iodIcaT4q9bKC7YQ+vUQfxnQIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFPbP9vjzX8tVdPakezUB9+vNXbkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvMjlhODY4NGEtNDk2Ni0z NzI0LWJmMGQtOWEwZWM5MThjNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz NzY1MzQ2NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtKwcD BAAtKwgDBABCC30DBABowGcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbh3W5aFkcefIfX/6Camzle21xRlP 2BGk7247eMRLUEDLevvOEAl39RzCfAbd4mFNmpfknio5XUFL3JFuN+gRVlaN4Lkv ZjFQ3PJsQYfJVv+uRDIgZFQ3liXzNPPBAE3414tNtSpsCSFoMlt4SBUsIPZM2o1b 6CT0LG+VHZ2Zj4YZwy4+GCvwalt1VwoeIqvFNRNBy+qg92MqE4IUdylYf9FP2mkj 5p/cVtgrDW1yOt46s2EfbmP0ssm80S8vLzKrcRT+3okfWruPAotE/hNsTVkI5U/Q Tt6xuuCQ8i0DKKftK3EACYiea9hVkBoge2pu+iVHFhIs/kQiam07ZS2hnw== -----END CERTIFICATE-----Generated at Fri May 3 09:12:53 2024 by rpki-client on console-fra.rpki-client.org