$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa File: 8bae2104-002c-3732-af7e-f26123198ae6.roa (raw, json) Hash identifier: X8mk8t7ZJ7j/Y2R+pGq/eT3kCAzRf8gmm9qXP/hDz+I= Subject key identifier: 0D:69:85:8B:0C:DC:86:57:27:03:F2:B8:D5:F9:A2:9A:5D:2B:78:37 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858476D935872D14A545297168E40 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa Signing time: Fri 04 Oct 2024 09:19:57 +0000 ROA not before: Fri 04 Oct 2024 09:19:57 +0000 ROA not after: Thu 02 Jan 2025 10:19:57 +0000 asID: 174 IP address blocks: 23.237.74.0/23 maxlen: 24 23.237.82.0/23 maxlen: 24 23.237.158.0/23 maxlen: 24 23.237.208.0/24 maxlen: 24 50.7.72.0/22 maxlen: 24 192.240.100.0/23 maxlen: 24 198.255.121.0/24 maxlen: 24 2001:49f0:d002::/48 maxlen: 48 2001:49f0:d048::/48 maxlen: 48 2001:49f0:d090::/48 maxlen: 48 2001:49f0:d0c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Oct 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6d:93:58:72:d1:4a:54:52:97:16:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Oct 4 09:19:57 2024 GMT Not After : Jan 2 10:19:57 2025 GMT Subject: CN=34692c3e-0998-4428-9cef-aa36a5adc137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:b2:81:90:fa:4b:03:41:df:65:8e:45:55: 83:8b:70:4c:7b:48:8c:f0:f3:46:e2:69:6c:dd:95: ac:6d:6c:12:f2:6f:dd:2b:85:31:3a:14:20:f4:ff: a7:33:e3:55:d9:e8:c9:0a:77:e4:d1:be:7e:29:23: c6:c6:4a:9c:9a:f4:73:05:5e:82:46:cf:17:4d:06: eb:b0:f9:cb:e1:f6:01:d4:0b:e5:6a:1b:2e:13:5b: 01:dc:76:0a:5c:bc:ed:b3:9d:31:87:59:2c:9d:07: 9e:48:71:a9:be:e4:70:89:f9:89:90:85:06:7f:d8: f7:9f:b5:8c:f1:bb:4e:19:c0:6d:00:cb:a4:64:44: ad:be:5b:1f:18:71:85:9f:15:5d:f2:8c:b9:9f:01: f6:d7:e9:66:c4:ae:9d:25:3e:3a:fa:c2:d4:37:77: b0:6a:4f:83:0d:46:7a:7b:25:4d:9e:9e:94:ad:05: d9:ab:bc:14:96:8b:8f:56:5f:d2:71:10:b3:a6:47: 0f:4d:6e:ae:80:f2:bb:21:2b:ae:c9:9d:b6:6c:8a: b4:11:11:53:ab:aa:e7:c5:fe:0a:3f:3c:02:f1:08: 53:99:95:16:ed:29:03:d0:94:61:c9:5a:9b:32:37: 14:d6:d9:12:0e:b5:ae:c6:b1:be:20:bb:5b:e8:40: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:69:85:8B:0C:DC:86:57:27:03:F2:B8:D5:F9:A2:9A:5D:2B:78:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8bae2104-002c-3732-af7e-f26123198ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.74.0/23 23.237.82.0/23 23.237.158.0/23 23.237.208.0/24 50.7.72.0/22 192.240.100.0/23 198.255.121.0/24 IPv6: 2001:49f0:d002::/48 2001:49f0:d048::/48 2001:49f0:d090::/48 2001:49f0:d0c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:eb:26:77:6c:3b:22:51:b5:cb:e0:5b:ff:b3:e3:d6:b7:59: 96:96:99:e8:ff:30:41:43:3c:2f:d5:5c:b2:e0:3b:2b:d0:22: c4:a5:eb:dc:79:3f:bf:2f:3e:bc:93:d3:79:8a:72:66:09:42: bb:3c:03:03:9b:54:06:9c:da:68:1f:21:41:8a:29:76:5b:f5: e6:a0:57:76:d7:6a:e8:d1:2b:d5:39:85:96:a9:0c:1c:be:b3: c0:20:eb:9e:6d:e5:01:3d:0b:a7:9a:f4:e8:c9:b7:37:dc:1f: 85:74:92:3e:9f:7a:70:7e:10:b3:95:b0:b2:df:a1:79:71:85: 1d:61:fe:4d:30:60:82:6e:b9:cb:65:a6:c4:b0:7e:b0:88:ec: fa:ca:b8:e5:6a:91:4b:27:5f:49:44:da:57:52:86:e4:03:12: d0:7c:ca:c5:7a:42:e9:4b:cc:50:d8:cc:71:ef:94:67:6e:af: 24:23:0e:3a:78:aa:6b:d0:9d:de:70:53:5c:9d:46:ac:a9:27: b6:84:dc:5c:8d:a7:f7:5f:52:4a:7f:eb:3e:63:61:de:29:8a: 86:66:0a:4b:89:14:4f:06:73:34:f0:c1:9a:d7:05:70:70:af: d1:e5:8f:e2:de:df:23:88:31:fd:94:6f:9d:13:82:b0:39:2d: 1b:38:c4:43 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEdtk1hy0UpUUpcWjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTAwNDA5MTk1N1oXDTI1MDEwMjEwMTk1N1owLzEtMCsGA1UEAxMk MzQ2OTJjM2UtMDk5OC00NDI4LTljZWYtYWEzNmE1YWRjMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw+ygZD6SwNB32WORVWDi3BMe0iM8PNG4mls 3ZWsbWwS8m/dK4UxOhQg9P+nM+NV2ejJCnfk0b5+KSPGxkqcmvRzBV6CRs8XTQbr sPnL4fYB1AvlahsuE1sB3HYKXLzts50xh1ksnQeeSHGpvuRwifmJkIUGf9j3n7WM 8btOGcBtAMukZEStvlsfGHGFnxVd8oy5nwH21+lmxK6dJT46+sLUN3ewak+DDUZ6 eyVNnp6UrQXZq7wUlouPVl/ScRCzpkcPTW6ugPK7ISuuyZ22bIq0ERFTq6rnxf4K PzwC8QhTmZUW7SkD0JRhyVqbMjcU1tkSDrWuxrG+ILtb6ECl9QIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFA1phYsM3IZXJwPyuNX5oppdK3g3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOGJhZTIxMDQtMDAyYy0z NzMyLWFmN2UtZjI2MTIzMTk4YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw 0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZOsmd2w7IlG1 y+Bb/7Pj1rdZlpaZ6P8wQUM8L9VcsuA7K9AixKXr3Hk/vy8+vJPTeYpyZglCuzwD A5tUBpzaaB8hQYopdlv15qBXdtdq6NEr1TmFlqkMHL6zwCDrnm3lAT0Lp5r06Mm3 N9wfhXSSPp96cH4Qs5Wwst+heXGFHWH+TTBggm65y2WmxLB+sIjs+sq45WqRSydf SUTaV1KG5AMS0HzKxXpC6UvMUNjMce+UZ26vJCMOOniqa9Cd3nBTXJ1GrKkntoTc XI2n919SSn/rPmNh3imKhmYKS4kUTwZzNPDBmtcFcHCv0eWP4t7fI4gx/ZRvnROC sDktGzjEQw== -----END CERTIFICATE-----Generated at Tue Oct 22 18:55:14 2024 by rpki-client on console-ams.rpki-client.org