$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa File: 7f8ab63b-847b-34e6-a398-301d847ad7f0.roa (raw, json) Hash identifier: ycTCcstdM/NHgOa4IsbZF4XPDU97Ja7K6gWpKkfgzsc= Subject key identifier: 63:38:29:24:19:57:F0:0D:FE:09:82:F3:03:DE:FC:24:FC:A3:86:EF Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F432858474850A406937C60FAE55D2000 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa Signing time: Sat 21 Sep 2024 01:00:33 +0000 ROA not before: Sat 21 Sep 2024 01:00:33 +0000 ROA not after: Fri 20 Dec 2024 02:00:33 +0000 asID: 19905 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:50:a4:06:93:7c:60:fa:e5:5d:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Sep 21 01:00:33 2024 GMT Not After : Dec 20 02:00:33 2024 GMT Subject: CN=920d554e-2761-4f59-b34e-b93f06f363fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:f5:a0:f8:6d:bf:86:3e:40:10:09:75:96: ee:e8:b7:e3:37:d7:99:77:83:c4:55:bd:23:ad:10: b7:6d:2f:1f:78:32:01:19:ce:9a:4d:aa:1f:94:23: 8a:1f:ef:33:4f:a0:3b:37:32:78:71:85:8b:23:dd: 32:d4:54:14:e7:03:34:f5:49:27:e3:37:74:d0:65: fe:c4:e0:87:3a:47:c7:ca:1f:3c:74:c8:3d:87:56: 44:8f:e0:3c:0b:ad:83:7e:af:4a:61:54:91:55:dc: 17:cf:b3:e7:16:2a:ed:33:80:51:b7:ef:2f:40:de: 19:ea:5f:6d:d8:36:6f:7e:de:2a:60:d4:ac:03:b3: df:5c:05:0c:89:ce:c8:d8:34:7d:f9:f5:f2:8a:18: e3:3f:18:c0:d3:46:40:9b:64:e3:8d:ae:ac:cd:27: d9:b6:45:83:36:1d:12:8d:34:19:86:c2:45:73:e1: b7:23:0a:09:fa:4a:01:9c:e0:b1:46:00:ea:2d:15: 69:25:b9:0f:3f:54:5a:a6:41:2c:b7:4e:82:88:86: 75:21:48:9c:59:46:78:6d:96:b7:01:e4:b6:7b:1f: 3b:ea:9d:1d:f6:6c:c6:3e:68:ee:53:78:d1:98:2a: 01:b4:33:34:e5:46:a6:d3:7c:10:e1:dd:db:80:fb: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:38:29:24:19:57:F0:0D:FE:09:82:F3:03:DE:FC:24:FC:A3:86:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/7f8ab63b-847b-34e6-a398-301d847ad7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:05:e1:c6:6b:92:fd:19:c7:c2:7a:8a:14:f8:d0:21:74:47: f6:19:89:f3:84:f8:9f:63:f8:ec:9f:31:60:65:cb:f0:00:19: b7:f4:ea:f7:59:c4:ee:1a:05:5b:56:e7:1e:2d:6c:e0:64:84: 19:39:d4:74:2e:6c:cc:1d:48:2f:ad:67:36:74:28:ed:70:22: 6e:8f:24:42:44:2e:b8:0f:ed:94:43:1e:09:61:7e:f1:a5:14: 21:c1:92:08:a7:b0:03:35:c3:00:ca:f8:98:78:b5:c7:29:bd: 71:5c:89:b4:55:22:b4:b5:34:2c:6e:b4:32:1e:ed:44:0d:8d: 7d:ad:af:c8:74:bf:da:9e:87:3e:c9:8f:f9:69:87:8a:f6:64: 28:3e:12:12:3c:a1:36:1b:02:23:37:c7:44:64:2f:ad:1b:ab: c0:df:3f:bf:b4:79:37:9a:63:ec:35:f6:14:f1:97:7b:08:a4: 57:05:d9:65:00:63:f5:ce:24:17:59:ea:35:8e:c3:02:3f:83: 7a:1e:37:59:d5:9a:e8:38:90:fe:ce:1c:f3:59:8d:79:6b:62: 09:10:bb:de:96:71:f4:e5:b8:70:d9:f9:54:da:9b:6e:24:0a: 71:2e:74:89:3a:3e:1e:e2:ad:6d:83:26:9e:9b:03:2e:d3:b5: 5c:ad:8f:d3 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEdIUKQGk3xg+uVdIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk OTIwZDU1NGUtMjc2MS00ZjU5LWIzNGUtYjkzZjA2ZjM2M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3f1oPhtv4Y+QBAJdZbu6LfjN9eZd4PEVb0j rRC3bS8feDIBGc6aTaoflCOKH+8zT6A7NzJ4cYWLI90y1FQU5wM09Ukn4zd00GX+ xOCHOkfHyh88dMg9h1ZEj+A8C62Dfq9KYVSRVdwXz7PnFirtM4BRt+8vQN4Z6l9t 2DZvft4qYNSsA7PfXAUMic7I2DR9+fXyihjjPxjA00ZAm2Tjja6szSfZtkWDNh0S jTQZhsJFc+G3IwoJ+koBnOCxRgDqLRVpJbkPP1RapkEst06CiIZ1IUicWUZ4bZa3 AeS2ex876p0d9mzGPmjuU3jRmCoBtDM05Uam03wQ4d3bgPs38QIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFGM4KSQZV/AN/gmC8wPe/CT8o4bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvN2Y4YWI2M2ItODQ3Yi0z NGU2LWEzOTgtMzAxZDg0N2FkN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEQF4cZrkv0Zx8J6ihT40CF0R/YZifOE+J9j +OyfMWBly/AAGbf06vdZxO4aBVtW5x4tbOBkhBk51HQubMwdSC+tZzZ0KO1wIm6P JEJELrgP7ZRDHglhfvGlFCHBkginsAM1wwDK+Jh4tccpvXFcibRVIrS1NCxutDIe 7UQNjX2tr8h0v9qehz7Jj/lph4r2ZCg+EhI8oTYbAiM3x0RkL60bq8DfP7+0eTea Y+w19hTxl3sIpFcF2WUAY/XOJBdZ6jWOwwI/g3oeN1nVmug4kP7OHPNZjXlrYgkQ u96WcfTluHDZ+VTam24kCnEudIk6Ph7irW2DJp6bAy7TtVytj9M= -----END CERTIFICATE-----Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org