$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa File: dad5264f-359a-33f3-bc03-957253f1506e.roa (raw, json) Hash identifier: M3sLdj5R0zxafxYLWPNdm1kdCU9qiXeF8POzFtK45WI= Subject key identifier: F0:8B:1B:86:2E:4E:4C:66:0C:3E:30:0F:69:33:A0:8C:0F:86:D5:65 Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F43285847256B253DB80054C0F247B100 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa Signing time: Sun 08 Sep 2024 13:00:41 +0000 ROA not before: Sun 08 Sep 2024 13:00:41 +0000 ROA not after: Sat 07 Dec 2024 14:00:41 +0000 asID: 15224 IP address blocks: 63.140.32.0/19 maxlen: 24 66.117.16.0/20 maxlen: 24 66.235.128.0/19 maxlen: 24 172.82.192.0/18 maxlen: 24 192.161.136.0/21 maxlen: 24 192.243.224.0/19 maxlen: 24 208.67.40.0/22 maxlen: 24 208.77.136.0/22 maxlen: 24 208.91.168.0/21 maxlen: 24 2620:113:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:25:6b:25:3d:b8:00:54:c0:f2:47:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Sep 8 13:00:41 2024 GMT Not After : Dec 7 14:00:41 2024 GMT Subject: CN=f8ac2033-c528-4065-ac23-90966e02e121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:ec:10:58:28:52:a3:ab:0e:91:1f:68:0f: 81:d2:f8:e2:a0:bf:85:dd:f9:ae:d0:51:d7:33:99: 1a:70:10:cd:c6:c8:29:cd:36:ce:99:2e:fa:c1:55: 47:3e:c7:69:32:ab:a3:bf:1c:21:3b:52:f5:0d:f9: 0f:15:23:01:af:63:fa:4a:29:29:bd:87:f5:87:a1: d1:89:3a:b1:d9:91:10:27:62:07:31:6d:18:ee:91: fd:8f:24:59:e3:50:64:e5:e3:30:58:d9:2b:09:39: 1b:ef:60:ff:a0:e1:8f:b5:d0:6e:da:d9:34:63:3d: ba:6a:04:8e:71:be:43:b0:45:47:dc:e9:7e:5d:21: b1:47:87:dc:8a:5a:31:91:29:66:3e:99:b5:71:aa: 1d:cb:ab:a8:db:47:23:7f:93:4a:90:52:df:92:10: b8:da:b6:1a:65:86:0f:7e:77:bd:45:73:aa:3a:4d: a0:d8:c2:99:74:88:89:a7:f8:e6:44:49:ef:74:df: cc:3a:3d:9a:5c:ae:ef:36:b4:4b:e8:8a:07:04:47: ff:40:a6:33:8d:26:49:a6:e6:f9:0c:75:5a:6f:58: 2d:34:e9:11:17:85:d3:c1:bb:2b:60:f5:69:10:a0: 4a:cd:f0:14:00:7b:5e:6f:d2:70:01:ed:24:67:b4: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:1B:86:2E:4E:4C:66:0C:3E:30:0F:69:33:A0:8C:0F:86:D5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 63.140.32.0/19 66.117.16.0/20 66.235.128.0/19 172.82.192.0/18 192.161.136.0/21 192.243.224.0/19 208.67.40.0/22 208.77.136.0/22 208.91.168.0/21 IPv6: 2620:113:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:02:45:5f:c5:64:a4:36:6e:52:ac:7e:4a:ab:38:fb:9b:d7: dc:51:6f:96:c5:d0:e4:05:2c:f9:11:ad:4d:b0:9f:4d:7d:b1: 3f:38:20:7b:8a:94:43:73:20:14:b3:d3:f2:cf:37:30:2d:ab: 6d:25:cf:4b:7b:de:9c:ff:96:cd:7d:ed:53:b2:c4:58:c0:11: 80:21:72:44:13:ff:e6:a4:a7:d7:2b:2c:9d:f4:62:b3:f0:a3: 3c:75:40:43:87:e9:a0:49:3b:a5:d9:a8:f6:22:77:4a:1b:f4: 04:ac:0f:97:96:bd:d8:85:70:bb:81:2d:32:f8:83:fc:41:8f: 67:1d:6a:e3:18:cd:15:fe:13:ed:be:c7:f6:ee:5f:2e:ad:d6: 24:ed:1f:88:6e:19:08:b3:97:e7:c3:81:df:77:b1:e5:ef:1f: a3:18:11:5c:1f:75:59:09:f4:c6:60:3f:25:64:5b:2e:db:55: a7:e2:29:2f:75:9d:6b:92:bc:e8:19:ad:44:c8:d5:02:01:22: ef:a2:66:9e:5d:59:05:e4:98:4f:d3:6c:97:43:5c:0a:00:cc: ed:d7:b4:6f:92:2c:f5:70:3a:0a:63:c3:8e:ee:14:83:a1:8a: 68:5d:a7:58:44:a2:fe:ad:ac:77:15:4d:a6:cc:4d:47:61:dc: 51:5b:d3:63 -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIUAQ0Mn0MoWEclayU9uABUwPJHsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI0MDkwODEzMDA0MVoXDTI0MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjhhYzIwMzMtYzUyOC00MDY1LWFjMjMtOTA5NjZlMDJlMTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ3sEFgoUqOrDpEfaA+B0vjioL+F3fmu0FHX M5kacBDNxsgpzTbOmS76wVVHPsdpMqujvxwhO1L1DfkPFSMBr2P6SikpvYf1h6HR iTqx2ZEQJ2IHMW0Y7pH9jyRZ41Bk5eMwWNkrCTkb72D/oOGPtdBu2tk0Yz26agSO cb5DsEVH3Ol+XSGxR4fciloxkSlmPpm1caody6uo20cjf5NKkFLfkhC42rYaZYYP fne9RXOqOk2g2MKZdIiJp/jmREnvdN/MOj2aXK7vNrRL6IoHBEf/QKYzjSZJpub5 DHVab1gtNOkRF4XTwbsrYPVpEKBKzfAUAHteb9JwAe0kZ7TDewIDAQABo4IDljCC A5IwHQYDVR0OBBYEFPCLG4YuTkxmDD4wD2kzoIwPhtVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvZGFkNTI2NGYtMzU5YS0z M2YzLWJjMDMtOTU3MjUzZjE1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQFP4wgAwQE QnUQAwQFQuuAAwQGrFLAAwQDwKGIAwQFwPPgAwQC0EMoAwQC0E2IAwQD0FuoMA8E AgACMAkDBwQmIAETEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAoQJFX8VkpDZuUqx+Sqs4+5vX3FFvlsXQ 5AUs+RGtTbCfTX2xPzgge4qUQ3MgFLPT8s83MC2rbSXPS3venP+WzX3tU7LEWMAR gCFyRBP/5qSn1yssnfRis/CjPHVAQ4fpoEk7pdmo9iJ3Shv0BKwPl5a92IVwu4Et MviD/EGPZx1q4xjNFf4T7b7H9u5fLq3WJO0fiG4ZCLOX58OB33ex5e8foxgRXB91 WQn0xmA/JWRbLttVp+IpL3Wda5K86BmtRMjVAgEi76Jmnl1ZBeSYT9Nsl0NcCgDM 7de0b5Is9XA6CmPDju4Ug6GKaF2nWESi/q2sdxVNpsxNR2HcUVvTYw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org