$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa File: a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa (raw, json) Hash identifier: vIHlXobVL+AKuMEBTlmJjC53Q9KUoHtVVdkOf5lWfWc= Subject key identifier: 63:69:DB:33:2A:6D:25:86:FD:EE:28:83:F1:92:B7:DA:A0:1E:8B:11 Certificate issuer: /CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Certificate serial: 010D0C9F43285845628D8BC0E82EFE3FD5BFD2F0 Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa Signing time: Sun 31 Mar 2024 01:00:26 +0000 ROA not before: Sun 31 Mar 2024 01:00:26 +0000 ROA not after: Sat 29 Jun 2024 01:00:26 +0000 asID: 46844 IP address blocks: 70.39.64.0/18 maxlen: 24 170.178.160.0/19 maxlen: 24 45.58.128.0/18 maxlen: 24 64.32.0.0/19 maxlen: 24 67.21.64.0/19 maxlen: 24 104.37.244.0/22 maxlen: 24 104.160.160.0/19 maxlen: 24 107.167.0.0/19 maxlen: 24 174.128.224.0/19 maxlen: 24 198.148.80.0/20 maxlen: 24 199.115.100.0/22 maxlen: 24 204.188.192.0/18 maxlen: 24 208.98.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:8d:8b:c0:e8:2e:fe:3f:d5:bf:d2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332 Validity Not Before: Mar 31 01:00:26 2024 GMT Not After : Jun 29 01:00:26 2024 GMT Subject: CN=d1e2d0ee-b48d-458d-90d7-dbdc5fbf7daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:44:e3:ec:c8:ce:39:cd:11:58:e0:df:a7: e3:9b:87:9c:c4:30:96:e7:8d:91:b8:22:e7:0b:23: ff:fd:bd:a4:84:95:4f:f4:36:57:0f:b9:42:11:fe: af:04:1f:78:ac:fe:9c:53:fc:91:a5:8d:76:2f:d2: 1d:38:25:18:94:51:7c:cf:83:a0:fd:1a:80:d2:77: e6:2f:a0:56:54:79:d9:10:e9:66:fd:84:53:f8:d3: 53:e7:50:8d:62:76:57:f1:70:c9:61:e5:02:29:bd: ca:9f:3d:f1:a5:13:80:75:4b:27:1a:ca:53:87:44: 3c:3b:9e:0c:e3:22:ef:a2:c3:04:a6:4f:0b:13:23: d1:6c:d0:36:e8:97:3e:7b:40:3d:0c:2e:09:84:6c: b8:38:e8:c5:e1:ff:56:27:0b:12:14:ec:61:d4:40: e1:43:b3:9b:91:2e:76:95:55:3c:31:4c:fa:0b:21: 26:f3:50:d0:b5:00:c0:9c:bf:ce:a9:1a:3c:6e:27: dd:78:61:45:4d:a1:e4:da:1e:c8:85:c9:10:61:92: 7c:3b:9a:fd:5a:0b:37:8b:1f:35:f0:a4:7c:b1:2c: bb:c9:de:60:5b:0e:b5:4d:af:e3:f6:37:72:bc:27: be:72:0c:05:91:5a:23:bf:57:76:2e:eb:06:55:2a: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:DB:33:2A:6D:25:86:FD:EE:28:83:F1:92:B7:DA:A0:1E:8B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/a5cb4e8b-52b7-3f3a-8259-f47c5855a25e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl X509v3 Authority Key Identifier: keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer sbgp-ipAddrBlock: critical IPv4: 45.58.128.0/18 64.32.0.0/19 67.21.64.0/19 70.39.64.0/18 104.37.244.0/22 104.160.160.0/19 107.167.0.0/19 170.178.160.0/19 174.128.224.0/19 198.148.80.0/20 199.115.100.0/22 204.188.192.0/18 208.98.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:4a:74:f9:0b:35:53:8f:36:dc:90:f2:3b:4d:18:b9:10:da: 83:96:4d:78:cd:e2:12:b6:72:3b:fc:55:a0:eb:4b:8a:c5:04: 8e:db:c9:04:4f:f2:1b:31:f3:13:aa:68:95:a6:65:63:b7:a4: 3b:71:8b:5b:9c:08:76:86:6f:5c:ea:47:5e:81:c0:11:2b:76: 24:df:6e:d5:94:a4:43:b8:08:20:cb:46:e3:77:96:61:c4:ac: 7a:13:af:10:f7:e8:c1:5c:d7:19:d6:eb:26:98:c5:d0:5e:2e: 00:b0:71:69:36:b2:cb:4d:85:b6:6b:c1:52:2d:53:55:f5:ae: 4b:fd:e3:73:61:6f:e3:75:e5:22:e5:59:6c:e9:d5:be:35:a7: c1:56:3e:61:9f:66:42:2f:f4:f2:9f:a4:61:6b:86:29:44:16: 6a:05:33:78:20:db:37:71:56:f7:d1:c3:97:d4:6f:d2:f2:31: bb:00:6a:a2:d3:29:91:95:cb:ca:e0:57:80:4f:47:90:f6:6e: 66:f6:dd:16:5d:8b:5d:fb:ae:34:92:05:dd:ae:d8:57:83:91: 02:03:47:e8:63:1b:81:90:ac:6f:5c:8d:f0:39:0f:5d:3b:8e: 62:40:58:23:44:27:5f:8d:94:be:02:59:e6:b4:55:60:5c:e8: 96:6a:76:4b -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEVijYvA6C7+P9W/0vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRmODNmMmUtZTRiNC00OTUzLThhY2MtNzgxNmIzMzNk MzMyMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDFlMmQwZWUtYjQ4ZC00NThkLTkwZDctZGJkYzVmYmY3ZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L5E4+zIzjnNEVjg36fjm4ecxDCW542RuCLn CyP//b2khJVP9DZXD7lCEf6vBB94rP6cU/yRpY12L9IdOCUYlFF8z4Og/RqA0nfm L6BWVHnZEOlm/YRT+NNT51CNYnZX8XDJYeUCKb3Knz3xpROAdUsnGspTh0Q8O54M 4yLvosMEpk8LEyPRbNA26Jc+e0A9DC4JhGy4OOjF4f9WJwsSFOxh1EDhQ7ObkS52 lVU8MUz6CyEm81DQtQDAnL/OqRo8bifdeGFFTaHk2h7IhckQYZJ8O5r9Wgs3ix81 8KR8sSy7yd5gWw61Ta/j9jdyvCe+cgwFkVojv1d2LusGVSoQKwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFGNp2zMqbSWG/e4og/GSt9qgHosRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGY4 M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2YjMzM2QzMzIvYTVjYjRlOGItNTJiNy0z ZjNhLTgyNTktZjQ3YzU4NTVhMjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRmODNmMmUtZTRiNC00OTUzLThh Y2MtNzgxNmIzMzNkMzMyLzhkZjgzZjJlLWU0YjQtNDk1My04YWNjLTc4MTZiMzMz ZDMzMi5jcmwwHwYDVR0jBBgwFoAUDaYqxupoTrLFfVvi9T8jMGOP5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGY4M2YyZS1lNGI0LTQ5NTMtOGFjYy03ODE2 YjMzM2QzMzIuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQGLTqAAwQF QCAAAwQFQxVAAwQGRidAAwQCaCX0AwQFaKCgAwQFa6cAAwQFqrKgAwQFroDgAwQE xpRQAwQCx3NkAwQGzLzAAwQG0GIAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKtKdPkLNVOPNtyQ8jtNGLkQ 2oOWTXjN4hK2cjv8VaDrS4rFBI7byQRP8hsx8xOqaJWmZWO3pDtxi1ucCHaGb1zq R16BwBErdiTfbtWUpEO4CCDLRuN3lmHErHoTrxD36MFc1xnW6yaYxdBeLgCwcWk2 sstNhbZrwVItU1X1rkv943Nhb+N15SLlWWzp1b41p8FWPmGfZkIv9PKfpGFrhilE FmoFM3gg2zdxVvfRw5fUb9LyMbsAaqLTKZGVy8rgV4BPR5D2bmb23RZdi137rjSS Bd2u2FeDkQIDR+hjG4GQrG9cjfA5D107jmJAWCNEJ1+NlL4CWea0VWBc6JZqdks= -----END CERTIFICATE-----Generated at Thu May 2 22:29:56 2024 by rpki-client on console-ams.rpki-client.org