$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa File: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (raw, json) Hash identifier: rmGZLk2YV2fJVttxQt2gjC81U1wpobZS5ISs1T9caR8= Subject key identifier: A9:19:D9:15:E4:A6:F0:9D:D0:95:EB:6C:41:05:51:91:6B:2E:FE:8B Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F43285847CE6F3DD2D4017DA235EDDD00 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa Signing time: Fri 08 Nov 2024 02:00:27 +0000 ROA not before: Fri 08 Nov 2024 02:00:27 +0000 ROA not after: Thu 06 Feb 2025 02:00:27 +0000 asID: 49585 IP address blocks: 104.156.136.0/24 maxlen: 24 104.156.137.0/24 maxlen: 24 104.156.138.0/24 maxlen: 24 104.156.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:6f:3d:d2:d4:01:7d:a2:35:ed:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Nov 8 02:00:27 2024 GMT Not After : Feb 6 02:00:27 2025 GMT Subject: CN=f258aec4-67a6-4ca4-b7a4-9f6777d1cbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:d6:ac:48:81:86:65:b2:46:88:78:ee:d2: 06:b7:c7:4c:0a:1e:92:6a:cc:61:ad:a6:52:4f:a4: 90:2c:3c:ab:76:d1:cf:00:d3:a4:f9:a2:5e:5d:ca: 2c:71:48:8f:17:ca:25:c3:60:7f:f8:a8:08:5b:14: cf:eb:b1:06:e4:b8:c8:11:40:2a:c4:47:b4:ce:80: 5d:bb:a5:8c:17:d6:fd:92:77:90:5a:8b:5f:6b:29: 47:bd:94:1e:eb:0d:a9:e2:25:81:03:65:b8:d7:5a: 0e:53:9c:98:8b:71:1a:5b:95:25:00:6f:7a:da:58: 46:65:98:a7:d6:a2:c0:e0:36:a2:0a:b5:4d:50:31: 98:f6:74:2b:8e:f0:39:ba:e2:60:c3:aa:ef:08:26: bc:2c:79:67:55:43:67:e9:3d:59:c7:31:38:f0:93: b8:be:95:96:91:85:f8:f0:b1:47:3e:ce:63:f0:12: d6:46:85:00:6a:2e:b6:c6:a4:17:84:db:e2:98:69: a9:8b:81:c9:2a:56:90:15:bd:a8:4b:ee:48:f6:5a: 22:9a:ad:b6:65:aa:88:32:5c:f2:7c:a9:1d:7a:e5: 72:7d:a3:13:d7:56:a2:43:f0:64:9c:b3:ca:b5:e8: a7:e0:f2:18:91:db:34:fb:e0:af:a3:56:56:72:b6: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:D9:15:E4:A6:F0:9D:D0:95:EB:6C:41:05:51:91:6B:2E:FE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/4749d5a9-351a-310d-a4b1-7d0866c068cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 104.156.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6a:6c:7b:46:d2:04:57:49:4e:c9:60:95:f8:19:53:8c:90: d7:20:95:15:72:4c:25:a2:8d:b8:93:a5:ab:e9:d8:6c:27:8e: b7:b1:f4:b8:00:dd:0f:c0:b2:39:4e:34:28:c3:13:d0:c4:fe: d7:4c:4e:a3:df:20:4c:34:45:61:07:a8:e3:84:9c:71:75:e4: 1c:5b:fc:cb:6d:1c:e1:1f:b0:30:d0:04:d1:06:9a:d3:20:e0: 9b:cf:1e:8f:01:d1:a5:cc:53:8a:6f:2a:dc:fe:7a:32:68:a4: 32:d5:b5:30:b7:6c:45:11:a5:7e:2e:b3:80:28:6b:df:a5:cf: 7c:91:a1:2c:6e:e1:d5:3f:df:69:dd:8b:86:6b:07:9e:09:fa: 1c:98:e1:4f:89:c3:e5:18:a6:9b:9d:4d:9a:8a:ea:eb:14:4a: 67:d6:56:b0:9a:02:b1:33:55:02:80:61:04:ed:f3:a8:63:97: 92:16:3f:d6:40:cb:36:c2:53:12:3b:d4:a2:10:f8:43:1e:66: 7c:6e:13:34:5d:60:59:65:1a:a3:b0:72:d5:43:38:ab:84:c8: c4:6c:fd:e3:02:21:a1:04:ab:ae:03:26:58:29:cf:52:e6:b5: 85:f0:33:03:83:c5:c8:7d:20:74:b6:01:27:e0:a0:9a:28:bd: 5e:85:69:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfObz3S1AF9ojXt3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk ZjI1OGFlYzQtNjdhNi00Y2E0LWI3YTQtOWY2Nzc3ZDFjYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUPWrEiBhmWyRoh47tIGt8dMCh6SasxhraZS T6SQLDyrdtHPANOk+aJeXcoscUiPF8olw2B/+KgIWxTP67EG5LjIEUAqxEe0zoBd u6WMF9b9kneQWotfaylHvZQe6w2p4iWBA2W411oOU5yYi3EaW5UlAG962lhGZZin 1qLA4DaiCrVNUDGY9nQrjvA5uuJgw6rvCCa8LHlnVUNn6T1ZxzE48JO4vpWWkYX4 8LFHPs5j8BLWRoUAai62xqQXhNvimGmpi4HJKlaQFb2oS+5I9loimq22ZaqIMlzy fKkdeuVyfaMT11aiQ/BknLPKtein4PIYkds0++Cvo1ZWcrZ0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkZ2RXkpvCd0JXrbEEFUZFrLv6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvNDc0OWQ1YTktMzUxYS0z MTBkLWE0YjEtN2QwODY2YzA2OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVqbHtG0gRXSU7JYJX4GVOMkNcglRVyTCWijbiTpavp2Gwnjrex9LgA 3Q/AsjlONCjDE9DE/tdMTqPfIEw0RWEHqOOEnHF15Bxb/MttHOEfsDDQBNEGmtMg 4JvPHo8B0aXMU4pvKtz+ejJopDLVtTC3bEURpX4us4Aoa9+lz3yRoSxu4dU/32nd i4ZrB54J+hyY4U+Jw+UYppudTZqK6usUSmfWVrCaArEzVQKAYQTt86hjl5IWP9ZA yzbCUxI71KIQ+EMeZnxuEzRdYFllGqOwctVDOKuEyMRs/eMCIaEEq64DJlgpz1Lm tYXwMwODxch9IHS2ASfgoJoovV6FaRo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:24 2024 by rpki-client on console-fra.rpki-client.org