$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa File: cadfb715-8e26-3e18-83e8-8fb22e97789c.roa (raw, json) Hash identifier: yh9awvYi8mlogPOakxwdlRKnHeQYqCvNWlnul8XAyBE= Subject key identifier: 29:06:D5:5A:36:43:30:2F:8A:CA:BE:B9:AD:C2:D0:36:02:88:1F:49 Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4 Certificate serial: 010D0C9F432858476C9DB109256AD03420C4F090 Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 13657 IP address blocks: 67.215.192.0/20 maxlen: 24 104.242.0.0/17 maxlen: 24 216.235.0.0/20 maxlen: 24 2001:4900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:b1:09:25:6a:d0:34:20:c4:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=f74245c8-4873-4801-be9c-563c49896d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:08:e1:c3:91:27:5b:5c:9c:7a:c8:db:b9: b1:04:e5:2f:5c:57:fb:ad:79:1d:35:4c:df:32:b3: e5:48:c1:aa:9b:3c:81:92:1f:ca:12:26:3a:a2:61: 09:dc:e0:75:89:d1:19:5e:d8:83:9f:82:c8:a4:cd: b8:03:fc:a7:72:4c:cc:f8:15:3c:32:6a:c8:d4:0d: 5a:96:f9:35:f4:c2:12:b0:fb:dd:8a:f9:43:b1:38: c9:5c:ad:5f:87:9c:d4:23:fa:28:7a:e4:f1:02:4b: c3:e6:f9:5f:12:0b:ce:26:69:5b:a2:1f:cb:66:3b: d3:94:66:d4:2e:ed:0a:84:ca:f3:01:b5:35:0e:3a: 0e:c2:66:c8:e5:0b:3a:db:df:b8:61:f8:62:16:3b: 7e:95:0a:6e:52:0e:0f:95:df:f0:5d:39:c1:4b:01: 47:ef:28:2a:95:fe:d0:1e:cb:dd:c5:23:5f:d9:37: 32:14:b3:65:48:72:2c:68:4e:7c:af:6e:97:3b:ee: 3a:b0:19:50:d9:0a:ec:07:a8:c3:87:7d:4b:07:a6: 63:e5:2f:fc:ee:9f:37:56:c3:f9:78:7e:c1:56:a7: 89:60:bd:8a:98:47:bd:a4:6e:7a:f0:61:b7:64:cf: a2:11:fd:21:d0:fe:f3:81:47:91:7f:e1:db:16:82: 2b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:06:D5:5A:36:43:30:2F:8A:CA:BE:B9:AD:C2:D0:36:02:88:1F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl X509v3 Authority Key Identifier: keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer sbgp-ipAddrBlock: critical IPv4: 67.215.192.0/20 104.242.0.0/17 216.235.0.0/20 IPv6: 2001:4900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:87:cf:db:04:7a:33:01:fd:dc:9f:a7:72:93:37:c3:94:2e: 04:5a:a1:84:20:65:73:6e:2c:0e:b7:8f:82:80:a1:98:70:5c: 4f:1a:68:da:fc:aa:16:ed:fc:b6:85:39:a2:29:b8:97:21:33: d9:41:b4:19:eb:19:08:6f:18:94:73:5f:ad:38:7c:ca:f6:55: dc:0e:18:64:7a:8a:0d:5a:a9:a9:e8:ff:95:7b:19:f7:a3:48: cc:26:2d:8b:f7:52:e1:6b:3b:6f:4f:f4:a9:a4:a5:d4:55:ac: 1f:ce:b7:86:9e:bc:1b:7f:4f:c4:4a:e3:ce:a5:b3:95:02:20: f3:a7:16:60:a3:19:b3:e9:52:38:47:81:70:57:c7:78:81:12: 3f:93:bb:b5:b5:51:61:00:8c:6c:b7:13:63:df:77:d9:f7:46: fd:72:c7:b3:4e:2e:89:43:7e:9e:ed:40:a3:4a:db:24:1d:23: 08:20:82:ab:22:df:bb:1a:81:c8:6f:13:97:9d:0e:ce:71:db: 1b:52:0d:88:62:c4:36:3d:be:fe:e5:3c:15:48:34:49:9e:9b: ea:93:fc:fc:29:13:39:9c:a2:a6:07:31:1d:e6:c4:e6:8e:6e: d0:19:07:b3:1d:ee:cd:8c:2d:4a:08:2b:91:24:52:98:0e:10: b9:98:4c:a1 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEdsnbEJJWrQNCDE8JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy MGU0MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk Zjc0MjQ1YzgtNDg3My00ODAxLWJlOWMtNTYzYzQ5ODk2ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6gI4cORJ1tcnHrI27mxBOUvXFf7rXkdNUzf MrPlSMGqmzyBkh/KEiY6omEJ3OB1idEZXtiDn4LIpM24A/ynckzM+BU8MmrI1A1a lvk19MISsPvdivlDsTjJXK1fh5zUI/ooeuTxAkvD5vlfEgvOJmlboh/LZjvTlGbU Lu0KhMrzAbU1DjoOwmbI5Qs629+4YfhiFjt+lQpuUg4Pld/wXTnBSwFH7ygqlf7Q HsvdxSNf2TcyFLNlSHIsaE58r26XO+46sBlQ2QrsB6jDh31LB6Zj5S/87p83VsP5 eH7BVqeJYL2KmEe9pG568GG3ZM+iEf0h0P7zgUeRf+HbFoIrDwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFCkG1Vo2QzAvisq+ua3C0DYCiB9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvY2FkZmI3MTUtOGUyNi0z ZTE4LTgzZTgtOGZiMjJlOTc3ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3 ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3 MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz NWU1NzIwZTQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQ9fAAwQH aPIAAwQE2OsAMA0EAgACMAcDBQAgAUkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAICHz9sEejMB/dyfp3KT N8OULgRaoYQgZXNuLA63j4KAoZhwXE8aaNr8qhbt/LaFOaIpuJchM9lBtBnrGQhv GJRzX604fMr2VdwOGGR6ig1aqano/5V7GfejSMwmLYv3UuFrO29P9KmkpdRVrB/O t4aevBt/T8RK486ls5UCIPOnFmCjGbPpUjhHgXBXx3iBEj+Tu7W1UWEAjGy3E2Pf d9n3Rv1yx7NOLolDfp7tQKNK2yQdIwgggqsi37sagchvE5edDs5x2xtSDYhixDY9 vv7lPBVINEmem+qT/PwpEzmcoqYHMR3mxOaObtAZB7Md7s2MLUoIK5EkUpgOELmY TKE= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:20 2024 by rpki-client on console-ams.rpki-client.org