$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json) Hash identifier: +/VzndWLcCZWGqndtWsZD9vkGGERyUjdABd3QRQUjRQ= Subject key identifier: C9:89:6E:2A:3B:0A:1C:63:16:10:33:99:4B:0B:76:C0:73:21:2D:6E Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Certificate serial: 010D0C9F43285847537B6CE742406DFFA82AD180 Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa Signing time: Wed 25 Sep 2024 01:00:31 +0000 ROA not before: Wed 25 Sep 2024 01:00:31 +0000 ROA not after: Tue 24 Dec 2024 02:00:31 +0000 asID: 32003 IP address blocks: 104.243.144.0/20 maxlen: 24 199.38.168.0/22 maxlen: 24 2606:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:7b:6c:e7:42:40:6d:ff:a8:2a:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Validity Not Before: Sep 25 01:00:31 2024 GMT Not After : Dec 24 02:00:31 2024 GMT Subject: CN=7eb4caeb-2531-4c6f-ac90-1ed5d51fa262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:38:63:4d:dd:e1:f6:84:a7:66:2c:db:d3: 68:79:a1:5e:4a:e6:d4:b7:f5:3d:e6:f5:4c:32:76: 42:c0:58:a0:07:47:e8:27:22:dd:9d:09:28:64:f4: ec:b7:f8:c6:3f:9b:5d:98:a7:4c:ca:4d:c2:b3:b7: 23:12:89:f6:a7:49:2b:7f:94:72:b3:8a:6d:b7:01: 2a:54:50:89:2b:ac:5d:90:96:92:c1:a0:b1:82:89: 60:7d:5e:90:6c:7f:61:6e:1d:14:57:d1:14:b9:c9: ab:09:a8:5c:9a:fb:5c:4f:a8:8e:b1:9e:b8:7c:96: d9:d7:a6:1b:1b:cb:a8:ff:92:46:fe:eb:7a:39:26: 4a:6c:a8:7a:23:2c:ee:52:31:45:f2:3b:f8:85:16: 9c:b8:7a:c5:53:c3:a9:e7:68:0c:34:89:1f:d9:44: 56:a8:f5:6e:44:da:c6:56:47:57:ac:e9:7a:90:55: b3:49:3c:8a:30:7d:23:76:a0:d0:74:c0:71:e1:ab: 8d:60:3c:b3:a4:23:a6:5b:31:65:8e:56:67:84:c8: 09:e2:55:d9:6e:e6:77:59:8f:75:11:33:6e:2c:51: 45:f2:9f:da:70:ca:ae:01:a0:09:8f:34:35:f8:2e: 0c:25:9d:26:dd:63:5c:08:fd:fb:c5:38:1b:f2:02: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:89:6E:2A:3B:0A:1C:63:16:10:33:99:4B:0B:76:C0:73:21:2D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl X509v3 Authority Key Identifier: keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4d:df:ee:53:b9:15:69:de:a9:b1:bb:24:02:f3:15:b8:79: ca:2b:5e:04:25:3c:21:46:75:0e:26:e8:dc:e0:39:6e:b4:11: 59:3b:59:ec:01:79:df:21:81:32:3b:4b:80:d4:7b:96:80:70: 67:dd:f2:8c:56:1f:68:32:72:03:62:2a:f0:8e:92:9c:8e:a1: 7e:c6:76:d0:85:2b:30:d9:e3:28:43:a0:95:a8:8c:a3:61:64: 10:f1:b9:f7:8a:00:52:46:97:85:ba:8f:4a:7f:04:73:3b:4a: 28:2c:b6:10:58:c0:d8:0e:5e:95:c3:31:79:4d:dc:fa:89:de: e7:64:3e:76:86:ca:61:f8:b2:52:90:19:46:74:0a:e2:0c:2b: c2:16:f9:02:35:e4:80:03:32:ab:e7:a6:53:ba:03:b3:aa:36: 6d:9e:ae:6a:e4:e5:08:25:8a:dc:e8:6c:18:12:f1:29:a0:57: 1f:ba:b5:42:7e:99:2c:56:e8:e8:0b:3d:2f:da:4e:11:b5:71: 6d:e1:72:44:df:a8:ac:6f:92:aa:b0:cb:fb:07:a7:46:b5:84: bc:99:6c:fc:35:40:18:7d:aa:4c:58:8f:0b:5a:fc:31:e1:bc: 70:4e:7b:22:6f:0c:76:3a:4d:7c:78:4d:33:ac:c4:29:86:ad: a9:33:68:38 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEdTe2znQkBt/6gq0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw MDNiMB4XDTI0MDkyNTAxMDAzMVoXDTI0MTIyNDAyMDAzMVowLzEtMCsGA1UEAxMk N2ViNGNhZWItMjUzMS00YzZmLWFjOTAtMWVkNWQ1MWZhMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsE4Y03d4faEp2Ys29NoeaFeSubUt/U95vVM MnZCwFigB0foJyLdnQkoZPTst/jGP5tdmKdMyk3Cs7cjEon2p0krf5Rys4pttwEq VFCJK6xdkJaSwaCxgolgfV6QbH9hbh0UV9EUucmrCahcmvtcT6iOsZ64fJbZ16Yb G8uo/5JG/ut6OSZKbKh6IyzuUjFF8jv4hRacuHrFU8Op52gMNIkf2URWqPVuRNrG VkdXrOl6kFWzSTyKMH0jdqDQdMBx4auNYDyzpCOmWzFljlZnhMgJ4lXZbuZ3WY91 ETNuLFFF8p/acMquAaAJjzQ1+C4MJZ0m3WNcCP37xTgb8gKWgwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFMmJbio7ChxjFhAzmUsLdsBzIS1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3 ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABN3+5TuRVp3qmxuyQC8xW4ecor XgQlPCFGdQ4m6NzgOW60EVk7WewBed8hgTI7S4DUe5aAcGfd8oxWH2gycgNiKvCO kpyOoX7GdtCFKzDZ4yhDoJWojKNhZBDxufeKAFJGl4W6j0p/BHM7SigsthBYwNgO XpXDMXlN3PqJ3udkPnaGymH4slKQGUZ0CuIMK8IW+QI15IADMqvnplO6A7OqNm2e rmrk5QglitzobBgS8SmgVx+6tUJ+mSxW6OgLPS/aThG1cW3hckTfqKxvkqqwy/sH p0a1hLyZbPw1QBh9qkxYjwta/DHhvHBOeyJvDHY6TXx4TTOsxCmGrakzaDg= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:05 2024 by rpki-client on console-ams.rpki-client.org