$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa File: c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json) Hash identifier: sUMtfZ++GZErgLBv29RUlgJ6XEgA4SuaRXKlzYanl60= Subject key identifier: 94:0E:AE:0B:B2:AA:D8:EB:8A:3A:CD:D9:00:D5:84:22:B7:33:A1:C9 Certificate issuer: /CN=3767dced-4e89-4965-b8de-50e421201b4d Certificate serial: 010D0C9F43285847C8D9E0C7C57F96EEF28FC280 Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 11602 IP address blocks: 151.159.0.0/17 maxlen: 24 151.159.128.0/18 maxlen: 24 151.159.192.0/20 maxlen: 24 151.159.208.0/21 maxlen: 24 151.159.216.0/22 maxlen: 24 151.159.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:e0:c7:c5:7f:96:ee:f2:8f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=8cc044d0-7cf0-4f45-b3c1-492fed5bc208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fc:c0:98:0c:6d:8a:d3:7b:19:23:29:5d:2e: ca:a4:ff:e2:90:4d:9f:0f:de:a9:89:bd:36:51:e2: 08:36:13:aa:05:7b:9c:0d:0f:b7:b2:46:cb:18:68: b4:95:20:7d:94:77:9a:df:b6:c5:fa:cf:5f:ba:be: e5:bd:57:84:c5:24:5a:83:08:3d:e7:47:c1:d6:0c: 73:90:80:19:5d:da:82:66:aa:1a:83:9a:4b:68:a3: ba:22:f2:3b:dc:67:83:a4:c1:c4:97:13:cd:f8:1b: 70:e7:35:ff:02:f2:46:27:e2:e3:35:4d:a2:2d:26: e0:f7:02:db:fb:97:11:98:0b:0b:c9:dd:c0:17:f0: 55:a2:87:95:d3:40:54:36:4c:5b:3b:f4:21:2b:76: 9c:57:6d:50:a5:cd:42:0c:45:a4:8d:23:4f:a1:c5: f3:15:67:82:64:f4:49:be:7f:c5:7d:f9:3b:c7:79: 8a:8a:96:50:0e:79:0f:88:1d:fe:42:70:b2:de:0d: 56:11:6a:d0:66:cd:cd:de:bc:1f:7b:a4:4c:db:94: b3:63:c4:e6:49:2a:0c:4e:92:95:f3:5e:7b:e4:3f: 14:b8:98:26:99:5c:ec:7c:fb:c2:dc:f2:88:72:72: 99:46:cf:27:ab:05:83:4b:ab:df:06:94:20:84:3a: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0E:AE:0B:B2:AA:D8:EB:8A:3A:CD:D9:00:D5:84:22:B7:33:A1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl X509v3 Authority Key Identifier: keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer sbgp-ipAddrBlock: critical IPv4: 151.159.0.0-151.159.219.255 151.159.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:10:a7:02:80:5c:bb:06:fe:e0:61:92:cf:90:8d:03:78:b2: 2a:56:e8:2b:dc:f8:cd:9a:be:df:00:d4:7c:83:df:e4:3a:85: fe:fa:80:70:7a:49:93:a7:e8:5b:77:60:f6:8e:50:af:f0:73: 2d:6d:68:66:47:eb:8e:b7:e1:b4:2a:5c:88:c1:2c:6e:0f:a2: 7b:03:8e:d1:25:5d:e4:08:8c:08:1b:91:5a:b7:db:ea:0e:8e: de:dd:72:aa:39:86:74:62:de:ce:e5:f6:63:75:70:25:25:66: 61:b3:02:da:28:b4:17:83:05:4a:8b:f3:58:b7:f5:96:a4:40: be:9c:53:89:17:06:fc:1e:7e:a1:47:ad:dc:82:c2:2f:ae:06: 71:bc:8f:d5:d9:19:91:f1:4a:5b:43:04:04:25:5e:e0:01:29: 8d:7f:37:d2:a1:43:93:3b:78:5c:6c:18:c1:c0:fc:f5:d7:76: 44:7b:a8:42:5c:c2:4b:ea:a5:40:4e:06:52:15:aa:ee:1a:6f: fe:32:65:33:fd:88:71:9b:3e:84:a1:b3:9a:7f:a9:58:06:08: 04:22:6e:b8:78:07:94:31:7f:86:b5:48:7e:2b:30:b4:14:7f: b6:ec:d6:31:4e:ae:44:69:ee:82:ed:b0:31:ba:a9:c9:6f:38: 89:ac:66:94 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfI2eDHxX+W7vKPwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc2N2RjZWQtNGU4OS00OTY1LWI4ZGUtNTBlNDIxMjAx YjRkMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk OGNjMDQ0ZDAtN2NmMC00ZjQ1LWIzYzEtNDkyZmVkNWJjMjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvzAmAxtitN7GSMpXS7KpP/ikE2fD96pib02 UeIINhOqBXucDQ+3skbLGGi0lSB9lHea37bF+s9fur7lvVeExSRagwg950fB1gxz kIAZXdqCZqoag5pLaKO6IvI73GeDpMHElxPN+Btw5zX/AvJGJ+LjNU2iLSbg9wLb +5cRmAsLyd3AF/BVooeV00BUNkxbO/QhK3acV21Qpc1CDEWkjSNPocXzFWeCZPRJ vn/Fffk7x3mKipZQDnkPiB3+QnCy3g1WEWrQZs3N3rwfe6RM25SzY8TmSSoMTpKV 81575D8UuJgmmVzsfPvC3PKIcnKZRs8nqwWDS6vfBpQghDqsCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJQOrguyqtjrijrN2QDVhCK3M6HJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3 ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0MjEyMDFiNGQvYzRmMGU1MzctY2ZkZC0z NDM3LWI1YWQtZjYxM2EyNTliMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzc2N2RjZWQtNGU4OS00OTY1LWI4 ZGUtNTBlNDIxMjAxYjRkLzM3NjdkY2VkLTRlODktNDk2NS1iOGRlLTUwZTQyMTIw MWI0ZC5jcmwwHwYDVR0jBBgwFoAUSSpaeqWs/SJY9eRGkJ0Fcu2mgMYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNzY3ZGNlZC00ZTg5LTQ5NjUtYjhkZS01MGU0 MjEyMDFiNGQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwCXnwME Apef2AMEBJef8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAcEKcCgFy7Bv7gYZLPkI0DeLIqVugr3PjNmr7f ANR8g9/kOoX++oBwekmTp+hbd2D2jlCv8HMtbWhmR+uOt+G0KlyIwSxuD6J7A47R JV3kCIwIG5Fat9vqDo7e3XKqOYZ0Yt7O5fZjdXAlJWZhswLaKLQXgwVKi/NYt/WW pEC+nFOJFwb8Hn6hR63cgsIvrgZxvI/V2RmR8UpbQwQEJV7gASmNfzfSoUOTO3hc bBjBwPz113ZEe6hCXMJL6qVATgZSFaruGm/+MmUz/Yhxmz6EobOaf6lYBggEIm64 eAeUMX+GtUh+KzC0FH+27NYxTq5Eae6C7bAxuqnJbziJrGaU -----END CERTIFICATE-----Generated at Tue Nov 26 07:56:02 2024 by rpki-client on console-fra.rpki-client.org