$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa File: 2fc97616-433c-34a4-a801-399ce469f872.roa (raw, json) Hash identifier: 9adTVzVzdwgCFz+iXt79+l/37NLNkmF2eLD/3iTbJKc= Subject key identifier: E1:EC:DC:0E:B1:AE:3F:55:20:D3:22:96:1F:59:5D:79:18:2E:DD:05 Certificate issuer: /CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Certificate serial: 010D0C9F43285845C17918F5D531C44B75C98600 Authority key identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa Signing time: Sat 04 May 2024 01:00:25 +0000 ROA not before: Sat 04 May 2024 01:00:25 +0000 ROA not after: Fri 02 Aug 2024 01:00:25 +0000 asID: 1299 IP address blocks: 192.40.220.0/22 maxlen: 22 198.241.12.0/22 maxlen: 22 162.222.20.0/22 maxlen: 22 2606:8c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c1:79:18:f5:d5:31:c4:4b:75:c9:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Validity Not Before: May 4 01:00:25 2024 GMT Not After : Aug 2 01:00:25 2024 GMT Subject: CN=4857dda6-82d6-4001-ad90-c11c458bf60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:ee:5a:00:1d:5e:c2:4d:24:f8:5e:20:53: 8c:d4:19:3a:f0:9b:fb:49:d0:ec:7b:9e:44:2b:43: eb:f8:e2:06:17:b5:7a:b7:92:e6:76:af:7f:f9:ec: 75:98:fe:95:45:cb:ec:de:e3:4b:22:17:00:3f:de: 43:57:a9:a3:cf:0a:b0:5d:af:1b:67:f6:67:db:40: 27:32:49:0e:83:14:83:bb:0f:09:35:0a:21:86:21: 7e:c9:f2:c7:10:e5:f9:2c:18:d6:04:9b:b1:c3:4e: 96:1a:96:c7:77:2f:f8:5c:2f:13:e6:e2:fc:f8:51: 95:ff:1a:fe:42:04:a0:8c:c0:25:95:44:2b:32:76: 3c:d4:98:ab:9f:da:6f:b6:1e:0f:f9:88:d5:1b:1e: e8:fb:d5:1a:8d:6c:68:91:6a:5a:9a:cf:5d:5d:db: 20:7c:17:9f:45:cc:34:45:7d:3a:fa:36:9f:47:1a: 64:8d:8a:bc:31:4c:a0:2c:26:e6:a0:5d:7e:f5:3c: 71:6e:97:87:e6:2c:6a:81:a3:12:5e:c6:a0:4c:bd: 48:05:e7:81:84:23:09:58:cd:f1:65:eb:9d:a2:01: 05:88:b5:f3:3b:61:69:2c:4e:95:e2:db:74:64:3b: 96:49:2f:ab:1a:01:dd:f9:4d:85:47:86:6f:ba:3d: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EC:DC:0E:B1:AE:3F:55:20:D3:22:96:1F:59:5D:79:18:2E:DD:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/2fc97616-433c-34a4-a801-399ce469f872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.crl X509v3 Authority Key Identifier: keyid:ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer sbgp-ipAddrBlock: critical IPv4: 162.222.20.0/22 192.40.220.0/22 198.241.12.0/22 IPv6: 2606:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:de:a9:14:b1:c7:29:10:d5:37:b7:7b:d3:94:f6:40:01:8b: bc:43:f9:fb:0a:52:5c:73:4d:63:18:d4:20:36:5d:6c:99:86: c3:ea:e4:77:16:e9:0c:f5:1a:39:34:9c:2b:76:6e:dc:43:85: 56:92:4a:92:f4:b5:44:8f:88:89:fc:e5:fd:5d:ba:5a:57:7f: f5:a2:91:50:dd:83:11:9b:ae:5b:56:71:47:96:87:82:d6:42: 35:a6:7a:9c:e0:04:47:00:ed:9c:4d:78:08:e3:ed:3a:9b:79: 5d:15:56:68:d9:c2:8e:0b:fe:4e:18:b2:fe:34:4d:96:53:cf: 3b:87:93:7b:3e:82:35:ee:27:2f:16:dd:62:16:2c:66:9b:5d: f1:c8:63:a8:41:80:7b:92:f8:77:2e:bc:79:69:fc:64:a9:78: c3:68:85:e5:07:db:00:8e:d1:c5:04:0b:aa:53:de:aa:1d:2e: 3f:c6:87:19:c2:21:7a:f6:d4:a9:06:03:46:e3:ca:7c:c8:79: 03:9c:c5:97:73:fb:bd:00:48:e5:0f:3b:21:be:90:b7:ae:32: 51:78:95:b6:a1:a9:2c:9b:ea:a4:b9:15:43:92:27:52:2b:85: 94:33:bf:76:c8:f1:ac:d0:41:37:d6:6f:bd:c2:72:4b:3d:e6: f6:f3:d9:c8 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEXBeRj11THES3XJhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E1ZWEzM2ItZWU4MC00MmQ4LTgyNTUtYjBjNjFmMjhi MDZmMB4XDTI0MDUwNDAxMDAyNVoXDTI0MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NDg1N2RkYTYtODJkNi00MDAxLWFkOTAtYzExYzQ1OGJmNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ruWgAdXsJNJPheIFOM1Bk68Jv7SdDse55E K0Pr+OIGF7V6t5Lmdq9/+ex1mP6VRcvs3uNLIhcAP95DV6mjzwqwXa8bZ/Zn20An MkkOgxSDuw8JNQohhiF+yfLHEOX5LBjWBJuxw06WGpbHdy/4XC8T5uL8+FGV/xr+ QgSgjMAllUQrMnY81Jirn9pvth4P+YjVGx7o+9UajWxokWpams9dXdsgfBefRcw0 RX06+jafRxpkjYq8MUygLCbmoF1+9TxxbpeH5ixqgaMSXsagTL1IBeeBhCMJWM3x ZeudogEFiLXzO2FpLE6V4tt0ZDuWSS+rGgHd+U2FR4Zvuj2DFwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFOHs3A6xrj9VINMilh9ZXXkYLt0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVl YTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYyOGIwNmYvMmZjOTc2MTYtNDMzYy0z NGE0LWE4MDEtMzk5Y2U0NjlmODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2E1ZWEzM2ItZWU4MC00MmQ4LTgy NTUtYjBjNjFmMjhiMDZmLzdhNWVhMzNiLWVlODAtNDJkOC04MjU1LWIwYzYxZjI4 YjA2Zi5jcmwwHwYDVR0jBBgwFoAU7c4hFN88/AybrNtX0nu8s9RSsg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2 MWYyOGIwNmYuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCot4UAwQC wCjcAwQCxvEMMA0EAgACMAcDBQAmBoyAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADLeqRSxxykQ1Te3e9OU 9kABi7xD+fsKUlxzTWMY1CA2XWyZhsPq5HcW6Qz1Gjk0nCt2btxDhVaSSpL0tUSP iIn85f1dulpXf/WikVDdgxGbrltWcUeWh4LWQjWmepzgBEcA7ZxNeAjj7TqbeV0V VmjZwo4L/k4Ysv40TZZTzzuHk3s+gjXuJy8W3WIWLGabXfHIY6hBgHuS+HcuvHlp /GSpeMNoheUH2wCO0cUEC6pT3qodLj/GhxnCIXr21KkGA0bjynzIeQOcxZdz+70A SOUPOyG+kLeuMlF4lbahqSyb6qS5FUOSJ1IrhZQzv3bI8azQQTfWb73Ccks95vbz 2cg= -----END CERTIFICATE-----Generated at Fri May 17 18:15:12 2024 by rpki-client on console-fra.rpki-client.org