$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa File: 08780fc2-df88-3de5-b147-ed57d81f5382.roa (raw, json) Hash identifier: EOJkDn4NHh5zePcfiQNX4UUcwIo59iiMI4MfSiwA28s= Subject key identifier: 75:B2:35:32:66:BD:A9:86:FA:3D:A0:07:B9:17:CB:3D:9B:2E:9D:78 Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F43285847F584F098DF355F5E2D03B880 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa Signing time: Fri 22 Nov 2024 02:00:40 +0000 ROA not before: Fri 22 Nov 2024 02:00:40 +0000 ROA not after: Thu 20 Feb 2025 02:00:40 +0000 asID: 32524 IP address blocks: 66.244.128.0/20 maxlen: 24 100.42.192.0/23 maxlen: 24 100.42.194.0/24 maxlen: 24 100.42.196.0/22 maxlen: 24 100.42.200.0/21 maxlen: 24 162.208.112.0/22 maxlen: 24 192.30.176.0/21 maxlen: 24 199.38.200.0/22 maxlen: 24 199.87.184.0/21 maxlen: 24 199.255.24.0/22 maxlen: 24 208.82.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:84:f0:98:df:35:5f:5e:2d:03:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Nov 22 02:00:40 2024 GMT Not After : Feb 20 02:00:40 2025 GMT Subject: CN=d9596202-62d4-41df-b78d-fdfe4694c213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:38:d2:24:e2:56:9b:1f:a9:52:45:4f:46: 41:50:69:35:da:c0:dc:75:0a:55:a8:8d:d4:ce:bc: fb:a0:cf:23:09:9c:ca:16:39:f2:c4:fa:fb:ab:65: c9:58:0e:da:14:ac:93:c2:1f:3d:1b:92:82:74:c0: 88:d7:0b:a8:d8:d5:55:da:09:84:43:6f:36:19:bf: c0:5e:9c:a3:cf:6e:f0:c1:1e:7a:57:c9:82:a7:1a: 73:f1:12:0b:3b:5e:71:68:02:d6:5c:49:f8:c7:72: ad:9f:88:98:57:1f:38:fd:a1:2f:30:ce:80:9c:ee: eb:4f:f1:1a:d3:26:26:86:5d:c3:06:f1:59:02:53: 3c:43:72:db:1a:32:18:ba:17:93:07:d2:7c:d1:b2: 09:73:97:aa:da:89:28:a7:10:24:4e:62:43:a5:ac: 22:a6:bc:84:39:fd:c9:71:d8:30:45:ee:9a:4d:55: 88:26:98:46:39:3b:65:8e:05:48:b6:47:0f:2d:b6: 26:4f:e1:d4:aa:4c:58:28:73:2a:ff:1c:92:7b:50: 22:60:56:05:84:62:5f:43:a1:e5:94:70:c0:c4:53: dc:65:b6:03:25:f0:91:0e:7f:82:fa:b9:d3:bc:c8: bf:7d:47:ff:91:a3:f1:d6:b9:7e:6a:58:8f:31:f7: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B2:35:32:66:BD:A9:86:FA:3D:A0:07:B9:17:CB:3D:9B:2E:9D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv4: 66.244.128.0/20 100.42.192.0-100.42.194.255 100.42.196.0-100.42.207.255 162.208.112.0/22 192.30.176.0/21 199.38.200.0/22 199.87.184.0/21 199.255.24.0/22 208.82.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:26:f2:47:e3:5c:4c:3d:03:b6:cb:ef:2c:49:75:81:81:b3: 61:4f:69:cf:1a:a5:b3:f1:53:bb:54:b0:02:f5:36:93:36:fc: 0e:aa:af:b9:45:c3:81:fb:4b:9e:f1:f7:02:59:ce:fa:48:b2: 5b:00:67:20:93:c1:b4:6a:7e:5f:91:e8:0f:1e:af:da:3e:72: 99:e3:d1:d4:56:1a:24:7b:56:ea:3b:49:1e:6a:ef:24:62:85: 1b:e3:d8:8c:3f:72:fa:82:ae:75:dc:bf:db:7f:b9:45:23:1a: 7f:4e:04:e8:3e:e0:6c:04:a5:e8:4e:de:ae:84:65:94:5d:cf: 4f:86:ce:6f:9d:22:4b:d7:3c:8a:8e:a1:38:b7:c3:b7:95:31: 87:ae:72:7d:91:10:c9:a7:5d:57:1f:32:94:db:5e:ef:2d:92: 32:5e:4e:67:a1:e5:33:91:0a:a6:1b:69:e5:3e:7a:30:fe:bb: 2c:f1:a7:e0:06:09:ce:7e:0a:ef:5c:1e:14:c4:4b:4c:90:17: ac:e4:b2:b5:c5:ba:bd:fa:bf:7f:9d:5a:b6:19:ed:3d:8b:a0: 9c:ad:9a:c3:29:06:2c:66:eb:6d:bd:d3:34:04:cf:4a:1a:be: 9c:be:fd:1e:14:34:86:e7:62:4a:7d:4c:4c:68:f5:01:b3:12: 50:b8:b8:9a -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEf1hPCY3zVfXi0DuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk ZDk1OTYyMDItNjJkNC00MWRmLWI3OGQtZmRmZTQ2OTRjMjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPQ40iTiVpsfqVJFT0ZBUGk12sDcdQpVqI3U zrz7oM8jCZzKFjnyxPr7q2XJWA7aFKyTwh89G5KCdMCI1wuo2NVV2gmEQ282Gb/A Xpyjz27wwR56V8mCpxpz8RILO15xaALWXEn4x3Ktn4iYVx84/aEvMM6AnO7rT/Ea 0yYmhl3DBvFZAlM8Q3LbGjIYuheTB9J80bIJc5eq2okopxAkTmJDpawipryEOf3J cdgwRe6aTVWIJphGOTtljgVItkcPLbYmT+HUqkxYKHMq/xySe1AiYFYFhGJfQ6Hl lHDAxFPcZbYDJfCRDn+C+rnTvMi/fUf/kaPx1rl+aliPMfeJEQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFHWyNTJmvamG+j2gB7kXyz2bLp14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvMDg3ODBmYzItZGY4OC0z ZGU1LWIxNDctZWQ1N2Q4MWY1MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQEQvSAMAwD BAZkKsADBABkKsIwDAMEAmQqxAMEBGQqwAMEAqLQcAMEA8AesAMEAscmyAMEA8dX uAMEAsf/GAMEA9BSiDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNJvJH41xMPQO2y+8sSXWBgbNhT2nPGqWz 8VO7VLAC9TaTNvwOqq+5RcOB+0ue8fcCWc76SLJbAGcgk8G0an5fkegPHq/aPnKZ 49HUVhoke1bqO0keau8kYoUb49iMP3L6gq513L/bf7lFIxp/TgToPuBsBKXoTt6u hGWUXc9Phs5vnSJL1zyKjqE4t8O3lTGHrnJ9kRDJp11XHzKU217vLZIyXk5noeUz kQqmG2nlPnow/rss8afgBgnOfgrvXB4UxEtMkBes5LK1xbq9+r9/nVq2Ge09i6Cc rZrDKQYsZuttvdM0BM9KGr6cvv0eFDSG52JKfUxMaPUBsxJQuLia -----END CERTIFICATE-----Generated at Fri Nov 22 17:31:29 2024 by rpki-client on console-ams.rpki-client.org