$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa File: 25ac78b4-e1ca-3663-9d67-95abb9982390.roa (raw, json) Hash identifier: KlyzX8WsSuPDXI2G0Fx3mNLTORRYAdaW/t6lJjEoJH4= Subject key identifier: 5B:A8:3C:E7:9F:91:CD:D2:34:1F:85:C9:45:AE:BF:3B:72:6C:40:15 Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F432858473A5B869199CA243CFE0C6B40 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa Signing time: Mon 16 Sep 2024 01:00:29 +0000 ROA not before: Mon 16 Sep 2024 01:00:29 +0000 ROA not after: Sun 15 Dec 2024 02:00:29 +0000 asID: 32329 IP address blocks: 158.247.68.0/22 maxlen: 24 176.108.136.0/21 maxlen: 24 207.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:5b:86:91:99:ca:24:3c:fe:0c:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Sep 16 01:00:29 2024 GMT Not After : Dec 15 02:00:29 2024 GMT Subject: CN=49dd8160-a536-4ede-9922-95e7fc24df95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:42:31:c8:93:c8:29:87:7b:e8:fe:fe:38: 81:53:70:d8:4c:3f:37:37:d6:8f:83:3f:fe:06:5a: 9f:b4:d0:2a:84:8a:24:95:a0:1e:0c:fe:89:dc:aa: b5:a5:1e:30:97:04:32:21:57:fc:b5:d5:32:90:04: 1b:1c:8c:94:c1:bc:4b:70:46:14:23:e7:55:6a:9f: 2c:63:07:b4:e3:e0:8a:8b:45:1e:62:52:8a:a3:29: 3c:b5:b8:e5:58:ff:07:e8:1f:5d:5a:a2:24:70:55: 2b:5d:0a:1c:02:90:ab:6b:c0:a2:64:51:75:62:53: f5:5f:83:a8:9d:2c:49:1a:c6:a6:0a:e3:ff:f7:bd: 68:ab:35:9d:5b:ac:36:8a:69:d0:39:29:62:58:40: 50:d2:f2:8b:d1:6a:5a:12:45:3d:8e:2c:6f:18:61: 85:04:f2:55:99:ee:30:f6:fb:60:31:35:e0:4f:dc: 43:40:b4:36:30:20:79:b2:4c:ae:d2:1e:81:db:12: b6:ba:41:12:b2:0c:31:9a:27:38:ff:1a:39:2d:6e: e4:8c:72:b3:4c:a8:97:f9:09:97:52:be:7a:ce:d1: 98:79:05:a2:0e:a1:55:ba:82:bc:b0:42:07:fa:b8: 85:a6:35:ec:b1:41:cb:c7:41:10:7a:05:e3:c2:c1: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A8:3C:E7:9F:91:CD:D2:34:1F:85:C9:45:AE:BF:3B:72:6C:40:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/25ac78b4-e1ca-3663-9d67-95abb9982390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 158.247.68.0/22 176.108.136.0/21 207.53.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:31:0d:21:b9:af:fc:d7:a9:a1:fb:0a:67:ce:5c:68:a2:2b: ce:0e:86:87:48:ac:9d:02:8f:c1:82:bf:2a:f1:0f:48:a1:3f: 9f:8e:25:cf:c7:96:0c:90:0b:f8:a1:97:6d:4e:b8:9e:fe:60: 1e:da:13:0b:98:d5:c4:b7:42:e9:ea:91:00:62:f7:e9:75:a5: 43:3d:3a:00:cb:bd:a0:30:de:a8:19:44:b9:64:a0:74:e3:bf: bd:c9:8c:9a:94:b1:95:e7:8d:49:a7:f6:b6:13:77:4a:ed:3a: bb:b6:c9:b2:06:a9:71:f3:50:21:44:d3:75:a6:3f:29:ab:76: 41:b3:45:5c:29:5b:8b:4c:af:07:e8:0d:ed:c4:24:77:d5:05: 39:dc:c7:a3:10:2f:f4:1d:03:ca:b6:36:67:a7:bb:7b:21:06: c5:d9:2d:bd:5c:0d:32:e7:aa:11:0b:1d:cb:04:45:c5:20:aa: 2b:48:68:21:6b:0f:1f:9d:dd:28:5d:40:62:74:f8:c1:db:3b: ed:ca:b4:da:66:52:93:fd:9f:03:07:2d:50:d4:47:27:18:18: 00:82:c6:d1:18:81:0c:0c:49:be:59:c7:c2:58:3a:3c:f6:01: 5a:33:26:8b:8d:10:07:8e:59:d4:26:f7:f1:94:a6:f4:9b:82: e5:33:cc:75 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEc6W4aRmcokPP4Ma0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk NDlkZDgxNjAtYTUzNi00ZWRlLTk5MjItOTVlN2ZjMjRkZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdCMciTyCmHe+j+/jiBU3DYTD83N9aPgz/+ BlqftNAqhIoklaAeDP6J3Kq1pR4wlwQyIVf8tdUykAQbHIyUwbxLcEYUI+dVap8s Ywe04+CKi0UeYlKKoyk8tbjlWP8H6B9dWqIkcFUrXQocApCra8CiZFF1YlP1X4Oo nSxJGsamCuP/971oqzWdW6w2imnQOSliWEBQ0vKL0WpaEkU9jixvGGGFBPJVme4w 9vtgMTXgT9xDQLQ2MCB5skyu0h6B2xK2ukESsgwxmic4/xo5LW7kjHKzTKiX+QmX Ur56ztGYeQWiDqFVuoK8sEIH+riFpjXssUHLx0EQegXjwsG5PQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFuoPOefkc3SNB+FyUWuvztybEAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjVhYzc4YjQtZTFjYS0z NjYzLTlkNjctOTVhYmI5OTgyMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnvdEAwQD sGyIAwQCzzX8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKsxDSG5r/zXqaH7CmfOXGiiK84OhodIrJ0Cj8GC vyrxD0ihP5+OJc/HlgyQC/ihl21OuJ7+YB7aEwuY1cS3QunqkQBi9+l1pUM9OgDL vaAw3qgZRLlkoHTjv73JjJqUsZXnjUmn9rYTd0rtOru2ybIGqXHzUCFE03WmPymr dkGzRVwpW4tMrwfoDe3EJHfVBTncx6MQL/QdA8q2Nmenu3shBsXZLb1cDTLnqhEL HcsERcUgqitIaCFrDx+d3ShdQGJ0+MHbO+3KtNpmUpP9nwMHLVDURycYGACCxtEY gQwMSb5Zx8JYOjz2AVozJouNEAeOWdQm9/GUpvSbguUzzHU= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:07 2024 by rpki-client on console-ams.rpki-client.org