$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa File: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (raw, json) Hash identifier: GNecImC7GJA3Ix/53VECKnOBd2MpUvPfzmCTQJp/cJw= Subject key identifier: 41:A9:BE:71:52:55:A0:B0:74:6F:35:EE:70:A4:44:90:6B:35:DF:73 Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Certificate serial: 010D0C9F43285847EFEF8B474ECB6B303CBFF080 Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa Signing time: Wed 20 Nov 2024 02:00:39 +0000 ROA not before: Wed 20 Nov 2024 02:00:39 +0000 ROA not after: Tue 18 Feb 2025 02:00:39 +0000 asID: 63330 IP address blocks: 104.222.64.0/20 maxlen: 24 2605:e580::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ef:ef:8b:47:4e:cb:6b:30:3c:bf:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Validity Not Before: Nov 20 02:00:39 2024 GMT Not After : Feb 18 02:00:39 2025 GMT Subject: CN=b9699fe8-f9dc-478a-879a-991333a80b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:e3:bf:bc:3e:55:ec:75:82:bb:18:55:44: 58:63:2f:dd:23:f8:86:85:da:cc:4e:a9:50:3e:96: cd:e1:a1:77:9b:5d:a6:b5:9e:72:e3:de:15:10:6d: 40:f7:96:36:b7:64:8d:65:af:32:71:1c:9c:f5:4e: 99:bf:18:b5:36:e2:24:26:ec:34:8e:de:c3:54:94: b9:30:e6:87:a7:8d:64:85:ee:82:66:62:5e:e2:24: b5:14:a0:0f:27:1b:50:88:61:a8:ee:d5:3d:fd:1f: 20:4f:b4:af:11:00:07:92:c2:79:21:88:a5:76:02: cd:40:1f:74:69:4b:2a:a7:bf:f8:75:bc:ec:cd:1c: fc:fb:bd:87:09:cd:ef:c1:c6:2d:57:77:f6:26:35: 61:50:aa:10:d1:bb:cc:8a:96:8e:70:6a:1d:29:1c: c3:dd:c2:d2:9c:24:c8:f5:23:c9:a4:92:01:34:51: 60:e7:ac:9f:f6:11:40:99:29:76:dd:67:74:20:60: e6:2a:47:1f:8d:77:a4:8a:a2:72:0f:0f:68:1b:c0: ed:10:e0:e5:c8:04:ec:e2:bd:31:93:4a:cd:38:3c: ec:f6:f3:2f:12:fd:51:b5:0b:fa:0a:a9:85:bb:a1: 2c:e0:e5:b8:6a:b5:75:08:45:fc:d0:ce:04:eb:b7: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:BE:71:52:55:A0:B0:74:6F:35:EE:70:A4:44:90:6B:35:DF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl X509v3 Authority Key Identifier: keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer sbgp-ipAddrBlock: critical IPv4: 104.222.64.0/20 IPv6: 2605:e580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:25:0f:c8:34:0f:3a:6f:ff:26:83:fa:b2:07:0e:c6:90:07: f8:49:2e:bf:ee:72:bf:be:2a:10:29:0b:2d:f8:ed:9e:d2:f7: c5:68:7e:4d:fd:b3:9f:66:7a:f5:3e:96:18:47:68:f1:76:a1: b6:21:6d:10:c2:c6:11:52:1a:a4:8e:f7:f2:61:c5:90:d1:55: 69:64:cd:cb:b0:56:26:49:7e:e8:85:45:6d:59:93:32:84:21: ab:3a:3b:d9:59:a6:0e:2a:13:c7:53:60:b7:43:fd:a1:fe:cb: 16:b4:4e:c8:fb:99:dc:ac:37:9d:cd:3a:e3:90:62:0f:d8:3d: fb:96:f6:06:ee:b4:b9:99:fc:bb:9e:ef:d7:fa:99:a1:01:56: ea:e1:79:02:5c:52:97:71:23:80:8e:5a:54:24:c2:09:cd:79: ab:3a:e2:68:a0:02:e4:98:36:5b:cd:f3:47:3c:08:da:63:bb: 75:a2:10:ca:dc:63:3f:69:41:da:03:93:06:3f:b6:ff:10:20: a2:b5:18:99:60:e3:b3:67:71:8d:aa:c5:b7:59:d4:e4:ce:b6: 45:ad:8d:d5:86:71:b0:5b:30:6c:f1:fe:0c:01:82:8c:52:c8: 32:34:0f:cd:f4:bf:a4:89:6b:3d:1f:a3:f5:d5:16:c4:14:55: 72:b6:76:fe -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEfv74tHTstrMDy/8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVmZmIxNjAtN2QwOC00MjgyLTk2NmEtMTM3ZTczMjhj MWIwMB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk Yjk2OTlmZTgtZjlkYy00NzhhLTg3OWEtOTkxMzMzYTgwYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRPjv7w+Vex1grsYVURYYy/dI/iGhdrMTqlQ PpbN4aF3m12mtZ5y494VEG1A95Y2t2SNZa8ycRyc9U6Zvxi1NuIkJuw0jt7DVJS5 MOaHp41khe6CZmJe4iS1FKAPJxtQiGGo7tU9/R8gT7SvEQAHksJ5IYildgLNQB90 aUsqp7/4dbzszRz8+72HCc3vwcYtV3f2JjVhUKoQ0bvMipaOcGodKRzD3cLSnCTI 9SPJpJIBNFFg56yf9hFAmSl23Wd0IGDmKkcfjXekiqJyDw9oG8DtEODlyATs4r0x k0rNODzs9vMvEv1RtQv6CqmFu6Es4OW4arV1CEX80M4E67dFmwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEGpvnFSVaCwdG817nCkRJBrNd9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZm YjE2MC03ZDA4LTQyODItOTY2YS0xMzdlNzMyOGMxYjAvZWNlZmVhZGEtY2JkYi0z ZjhhLTlhYmUtNTBlYTM1YTcyOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTVmZmIxNjAtN2QwOC00MjgyLTk2 NmEtMTM3ZTczMjhjMWIwL2E1ZmZiMTYwLTdkMDgtNDI4Mi05NjZhLTEzN2U3MzI4 YzFiMC5jcmwwHwYDVR0jBBgwFoAUPC5ArBlHHCOMQjlu0zXstrvl1jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZmYjE2MC03ZDA4LTQyODItOTY2YS0xMzdl NzMyOGMxYjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEaN5AMA0E AgACMAcDBQAmBeWAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJslD8g0Dzpv/yaD+rIHDsaQB/hJLr/ucr++ KhApCy347Z7S98Vofk39s59mevU+lhhHaPF2obYhbRDCxhFSGqSO9/JhxZDRVWlk zcuwViZJfuiFRW1ZkzKEIas6O9lZpg4qE8dTYLdD/aH+yxa0Tsj7mdysN53NOuOQ Yg/YPfuW9gbutLmZ/Lue79f6maEBVurheQJcUpdxI4COWlQkwgnNeas64migAuSY NlvN80c8CNpju3WiEMrcYz9pQdoDkwY/tv8QIKK1GJlg47NncY2qxbdZ1OTOtkWt jdWGcbBbMGzx/gwBgoxSyDI0D830v6SJaz0fo/XVFsQUVXK2dv4= -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:18 2024 by rpki-client on console-ams.rpki-client.org