$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ece768ed-864f-3496-be69-3aa50c7faa5d.roa File: ece768ed-864f-3496-be69-3aa50c7faa5d.roa (raw, json) Hash identifier: 9AS6FXO4IOaUvjRikfE4/486LGag7zoRrqyKiXH6V5c= Subject key identifier: 21:BE:D8:00:AB:F3:B8:1A:18:5B:AD:50:F1:C4:DD:B3:C5:AD:13:65 Certificate issuer: /CN=eb20c2e0-7f57-4974-bb92-1fdbfcfc514e Certificate serial: 010D0C9F432858478CB68CA6CB478A43FFF9AD40 Authority key identifier: 84:BA:C2:FD:68:01:49:CE:5D:F8:72:76:36:19:2A:B9:28:13:26:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ece768ed-864f-3496-be69-3aa50c7faa5d.roa Signing time: Tue 15 Oct 2024 13:00:47 +0000 ROA not before: Tue 15 Oct 2024 13:00:47 +0000 ROA not after: Mon 13 Jan 2025 14:00:47 +0000 asID: 17 IP address blocks: 149.164.0.0/16 maxlen: 24 168.102.144.0/20 maxlen: 24 168.102.160.0/19 maxlen: 24 168.102.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8c:b6:8c:a6:cb:47:8a:43:ff:f9:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb20c2e0-7f57-4974-bb92-1fdbfcfc514e Validity Not Before: Oct 15 13:00:47 2024 GMT Not After : Jan 13 14:00:47 2025 GMT Subject: CN=ed2a8a3f-0c1e-498d-8006-0c1a4458d486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:c4:ab:04:97:44:07:86:fa:1e:2e:66:e4: 94:55:5b:50:44:6d:f2:d8:f9:f0:00:9a:39:08:f1: 44:8c:4a:e4:5d:2d:28:95:8d:66:aa:ce:c5:c4:a3: 27:6e:3d:a5:27:09:c2:1a:84:76:f4:cc:ff:cc:14: 0f:71:a9:92:4b:be:94:55:d2:33:16:f8:92:1a:ad: 72:b6:83:ce:70:27:c2:75:78:a5:bd:b1:92:e1:17: 94:61:2a:f3:82:c1:6c:4d:e3:14:34:5b:6a:77:f6: 0a:5f:da:d1:96:45:34:38:e3:68:1c:c5:85:63:f0: 20:72:ad:cb:fc:bb:09:53:fb:81:2f:e4:7d:a5:44: 9c:7b:fc:83:9b:30:dd:78:f7:d4:3c:fb:2b:b2:a4: 3b:e7:31:7f:ee:d0:12:25:9b:d7:36:e5:d0:5e:9c: b7:17:71:ec:d8:2a:d8:69:e0:3e:10:e9:c2:d2:8a: 90:62:31:0b:47:3c:4a:40:3f:90:e8:ac:25:b1:3c: 90:b4:19:8a:aa:32:83:71:dd:f7:f3:d0:2d:b7:45: 39:cc:9a:0d:32:4d:6e:44:95:13:aa:3b:69:d9:bd: 14:70:9c:fc:76:50:ea:d4:ca:a0:8e:e7:e5:ef:a7: 6b:c0:64:ac:4a:a7:d7:79:d3:40:10:2c:dc:c5:5b: 10:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:D8:00:AB:F3:B8:1A:18:5B:AD:50:F1:C4:DD:B3:C5:AD:13:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ece768ed-864f-3496-be69-3aa50c7faa5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.crl X509v3 Authority Key Identifier: keyid:84:BA:C2:FD:68:01:49:CE:5D:F8:72:76:36:19:2A:B9:28:13:26:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer sbgp-ipAddrBlock: critical IPv4: 149.164.0.0/16 168.102.144.0-168.102.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d3:a7:c2:d9:ea:0a:d6:57:92:56:d2:9a:d4:8c:9a:a5:b1: 05:a7:8f:0d:d2:1e:16:60:cc:a9:87:e4:0d:0a:9f:d5:3f:b1: 0d:c0:bd:c8:c6:ff:7a:78:89:7a:75:44:b0:c4:1d:76:e1:76: a9:04:5c:20:10:db:6c:a7:72:f3:00:24:2f:6b:6b:86:ce:c9: fa:9d:38:16:17:c6:6a:09:3d:d5:bc:a9:60:4c:4e:0f:3b:0c: 25:0f:7c:a5:84:8a:98:69:40:b7:8a:bb:e7:62:af:ec:6a:0c: ce:c0:cb:b9:1a:2a:e2:74:c2:9d:0e:41:a0:bc:1e:ca:91:15: ed:34:90:bf:e7:a7:4c:37:00:62:24:70:53:88:c5:e3:32:17: 77:8d:af:46:33:ff:86:09:9d:6a:f0:a6:c8:d5:c7:d2:c4:6c: c4:a5:51:ad:d8:88:2a:59:61:18:64:be:4d:20:34:15:8f:0a: ac:9d:9b:37:64:5b:a3:93:e5:3b:22:46:95:b9:c5:68:82:cb: 06:06:fc:fb:af:dc:0e:4d:93:4c:a1:38:63:6d:86:9e:f0:dc: 44:53:9b:5f:95:1d:51:ae:08:43:51:b2:67:f9:fd:af:91:9c: a2:7e:ed:b4:c6:4b:f9:5e:14:12:dd:c4:78:e4:1b:58:36:4a: c4:2f:96:84 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEeMtoymy0eKQ//5rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIyMGMyZTAtN2Y1Ny00OTc0LWJiOTItMWZkYmZjZmM1 MTRlMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk ZWQyYThhM2YtMGMxZS00OThkLTgwMDYtMGMxYTQ0NThkNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm13EqwSXRAeG+h4uZuSUVVtQRG3y2PnwAJo5 CPFEjErkXS0olY1mqs7FxKMnbj2lJwnCGoR29Mz/zBQPcamSS76UVdIzFviSGq1y toPOcCfCdXilvbGS4ReUYSrzgsFsTeMUNFtqd/YKX9rRlkU0OONoHMWFY/Agcq3L /LsJU/uBL+R9pUSce/yDmzDdePfUPPsrsqQ75zF/7tASJZvXNuXQXpy3F3Hs2CrY aeA+EOnC0oqQYjELRzxKQD+Q6KwlsTyQtBmKqjKDcd3389Att0U5zJoNMk1uRJUT qjtp2b0UcJz8dlDq1Mqgjufl76drwGSsSqfXedNAECzcxVsQSwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCG+2ACr87gaGFutUPHE3bPFrRNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lYjIw YzJlMC03ZjU3LTQ5NzQtYmI5Mi0xZmRiZmNmYzUxNGUvZWNlNzY4ZWQtODY0Zi0z NDk2LWJlNjktM2FhNTBjN2ZhYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWIyMGMyZTAtN2Y1Ny00OTc0LWJi OTItMWZkYmZjZmM1MTRlL2ViMjBjMmUwLTdmNTctNDk3NC1iYjkyLTFmZGJmY2Zj NTE0ZS5jcmwwHwYDVR0jBBgwFoAUhLrC/WgBSc5d+HJ2NhkquSgTJtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lYjIwYzJlMC03ZjU3LTQ5NzQtYmI5Mi0xZmRi ZmNmYzUxNGUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwMAlaQwCwME BKhmkAMDAKhmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABnTp8LZ6grWV5JW0prUjJqlsQWnjw3SHhZgzKmH 5A0Kn9U/sQ3AvcjG/3p4iXp1RLDEHXbhdqkEXCAQ22yncvMAJC9ra4bOyfqdOBYX xmoJPdW8qWBMTg87DCUPfKWEiphpQLeKu+dir+xqDM7Ay7kaKuJ0wp0OQaC8HsqR Fe00kL/np0w3AGIkcFOIxeMyF3eNr0Yz/4YJnWrwpsjVx9LEbMSlUa3YiCpZYRhk vk0gNBWPCqydmzdkW6OT5TsiRpW5xWiCywYG/Puv3A5Nk0yhOGNthp7w3ERTm1+V HVGuCENRsmf5/a+RnKJ+7bTGS/leFBLdxHjkG1g2SsQvloQ= -----END CERTIFICATE-----Generated at Fri Nov 22 08:07:08 2024 by rpki-client on console-ams.rpki-client.org