$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/598f423f-1caf-32ed-bd7e-127455fdf126.roa File: 598f423f-1caf-32ed-bd7e-127455fdf126.roa (raw, json) Hash identifier: auJzB+N4x0tRIKoqtBZ6ZxIW/NUoD2vO0Q38o59tlSE= Subject key identifier: B3:33:72:56:13:56:86:CB:EC:99:49:66:66:93:59:3B:3A:75:A4:F8 Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Certificate serial: 010D0C9F4328584510502CB43903055AD3896380 Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/598f423f-1caf-32ed-bd7e-127455fdf126.roa Signing time: Fri 01 Mar 2024 14:00:30 +0000 ROA not before: Fri 01 Mar 2024 14:00:30 +0000 ROA not after: Thu 30 May 2024 13:00:30 +0000 asID: 3842 IP address blocks: 168.235.112.0/24 maxlen: 24 167.88.112.0/22 maxlen: 22 107.191.116.0/22 maxlen: 22 23.226.224.0/21 maxlen: 21 192.249.60.0/22 maxlen: 22 192.184.88.0/21 maxlen: 24 107.161.16.0/22 maxlen: 24 167.88.124.0/23 maxlen: 23 107.191.104.0/22 maxlen: 22 107.161.24.0/22 maxlen: 22 2604:180:f2::/48 maxlen: 48 2604:180:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:10:50:2c:b4:39:03:05:5a:d3:89:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae Validity Not Before: Mar 1 14:00:30 2024 GMT Not After : May 30 13:00:30 2024 GMT Subject: CN=27deab3b-4d2a-4aee-98f6-8c5c6dde5695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:2b:e4:be:d7:bb:73:fd:90:10:c0:ed:0f: 67:99:29:5b:bb:b0:28:d6:06:93:7a:7e:be:a2:46: 67:b7:c1:2d:4d:f3:54:00:98:39:c0:4b:db:59:c2: 77:7a:8b:c9:75:f0:3c:c4:6f:d7:cf:03:91:04:f1: ea:d4:07:62:66:60:0b:ab:2d:4e:2b:eb:0e:ba:87: 8d:79:48:4e:e6:29:07:ee:1b:35:31:51:ef:81:a3: 3e:82:af:78:8e:4a:b6:4a:86:df:26:f5:8a:3f:6d: a4:5f:c1:03:fa:48:ce:f7:e9:06:6e:66:b1:5e:a0: ef:a9:a5:ec:e3:d7:cd:6f:a6:ce:ce:04:34:c1:73: c0:c1:d8:a9:d9:13:47:f3:38:5c:8d:9f:2a:a0:da: a1:18:2a:a1:22:13:49:d2:b2:f8:15:d4:0a:5f:6a: ee:bb:64:50:4b:2a:0d:1d:64:ba:eb:bd:2d:d7:62: dd:0e:ea:60:3f:30:a5:7a:cf:9a:ea:3d:3b:f1:64: 16:59:4b:3e:48:f9:11:48:59:09:77:94:47:22:91: e5:82:66:af:0e:f3:ea:e5:9f:9b:40:6b:c4:d9:88: 4e:d0:27:07:ab:b7:aa:58:bf:53:ec:de:a0:8f:1b: 45:2a:d8:7c:d5:a6:17:db:c9:e1:e6:ae:03:57:7c: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:72:56:13:56:86:CB:EC:99:49:66:66:93:59:3B:3A:75:A4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/598f423f-1caf-32ed-bd7e-127455fdf126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl X509v3 Authority Key Identifier: keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer sbgp-ipAddrBlock: critical IPv4: 23.226.224.0/21 107.161.16.0/22 107.161.24.0/22 107.191.104.0/22 107.191.116.0/22 167.88.112.0/22 167.88.124.0/23 168.235.112.0/24 192.184.88.0/21 192.249.60.0/22 IPv6: 2604:180:1::/48 2604:180:f2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d8:50:c5:c4:b1:01:f1:46:93:0c:77:15:ed:f0:10:f2:4a: ce:1f:f2:ce:ae:75:d7:67:77:ac:e3:54:8e:f9:08:fb:41:83: 0b:20:bf:77:c3:ac:9e:67:18:c2:90:f9:24:63:12:3f:d9:1d: da:41:8a:a0:33:5b:1c:11:fb:4e:2d:ae:97:30:2b:18:3a:0e: fc:12:26:c6:e3:83:21:69:4b:92:ec:49:ce:b5:2e:2c:a2:fd: 18:9b:f9:3b:1a:b5:7b:53:ac:fd:ab:ad:14:be:21:0b:5f:79: 73:19:ec:bb:0e:8f:ea:66:8e:4f:c7:b1:b6:c1:81:fe:fa:cf: 50:ee:f6:ec:8f:f1:f5:93:a6:54:fa:fc:ca:68:e7:7f:c7:1c: bb:ee:b9:15:db:22:e8:c3:4a:a6:84:b1:83:ab:01:f2:e7:22: 8c:03:43:45:ba:4c:c5:77:ba:ef:e6:b8:ec:04:a2:11:94:72: 4d:83:9d:c7:09:34:e8:18:9c:c5:2d:9e:c5:3d:1a:da:fe:60: 56:b2:0f:7b:29:c1:ae:f5:4c:98:fe:24:e2:34:8d:8d:0a:b7: 99:52:16:3a:ce:94:44:6f:dc:ab:37:81:e7:99:85:5a:4e:82: 50:1c:09:1a:fe:16:41:f5:ca:8e:ba:49:ad:23:f6:88:8f:ef: 9b:9c:c4:24 -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEUQUCy0OQMFWtOJY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0 ZmFlMB4XDTI0MDMwMTE0MDAzMFoXDTI0MDUzMDEzMDAzMFowLzEtMCsGA1UEAxMk MjdkZWFiM2ItNGQyYS00YWVlLTk4ZjYtOGM1YzZkZGU1Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgkr5L7Xu3P9kBDA7Q9nmSlbu7Ao1gaTen6+ okZnt8EtTfNUAJg5wEvbWcJ3eovJdfA8xG/XzwORBPHq1AdiZmALqy1OK+sOuoeN eUhO5ikH7hs1MVHvgaM+gq94jkq2SobfJvWKP22kX8ED+kjO9+kGbmaxXqDvqaXs 49fNb6bOzgQ0wXPAwdip2RNH8zhcjZ8qoNqhGCqhIhNJ0rL4FdQKX2ruu2RQSyoN HWS6670t12LdDupgPzCles+a6j078WQWWUs+SPkRSFkJd5RHIpHlgmavDvPq5Z+b QGvE2YhO0CcHq7eqWL9T7N6gjxtFKth81aYX28nh5q4DV3z8XQIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFLMzclYTVobL7JlJZmaTWTs6daT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvNTk4ZjQyM2YtMWNhZi0z MmVkLWJkN2UtMTI3NDU1ZmRmMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2 NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1 ZTU5NjRmYWUuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjBCBAIAATA8AwQDF+LgAwQC a6EQAwQCa6EYAwQCa79oAwQCa790AwQCp1hwAwQBp1h8AwQAqOtwAwQDwLhYAwQC wPk8MBgEAgACMBIDBwAmBAGAAAEDBwAmBAGAAPIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANthQxcSxAfFG kwx3Fe3wEPJKzh/yzq5112d3rONUjvkI+0GDCyC/d8OsnmcYwpD5JGMSP9kd2kGK oDNbHBH7Ti2ulzArGDoO/BImxuODIWlLkuxJzrUuLKL9GJv5Oxq1e1Os/autFL4h C195cxnsuw6P6maOT8extsGB/vrPUO727I/x9ZOmVPr8ymjnf8ccu+65Fdsi6MNK poSxg6sB8ucijANDRbpMxXe67+a47ASiEZRyTYOdxwk06BicxS2exT0a2v5gVrIP eynBrvVMmP4k4jSNjQq3mVIWOs6URG/cqzeB55mFWk6CUBwJGv4WQfXKjrpJrSP2 iI/vm5zEJA== -----END CERTIFICATE-----Generated at Fri May 17 20:57:26 2024 by rpki-client on console-fra.rpki-client.org