$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa File: 32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (raw, json) Hash identifier: tGnKJnQmiC8pLWTgXtE1D5mZD7P6/XzrRn5XeQrK1aQ= Subject key identifier: 8E:AB:41:5C:F0:C9:33:B5:8D:74:1E:0C:B8:73:0A:70:FB:B9:87:34 Certificate issuer: /CN=79af2149-f711-4230-b22d-36786f0219ac Certificate serial: 010D0C9F43285845A9BE18935E46E16BAF17B300 Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa Signing time: Thu 25 Apr 2024 13:00:33 +0000 ROA not before: Thu 25 Apr 2024 13:00:33 +0000 ROA not after: Wed 24 Jul 2024 13:00:33 +0000 asID: 398182 IP address blocks: 64.186.10.0/24 maxlen: 24 198.135.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a9:be:18:93:5e:46:e1:6b:af:17:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac Validity Not Before: Apr 25 13:00:33 2024 GMT Not After : Jul 24 13:00:33 2024 GMT Subject: CN=5e515ba9-19ea-437b-86a3-32123e7771e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:b0:6e:8a:90:90:ad:6c:d9:cf:35:a7:1a: f3:c7:20:42:e8:d6:f1:54:04:3c:c2:9a:51:85:af: 1a:be:7e:4f:19:75:f0:32:41:5b:fd:22:5c:90:2e: f7:f2:75:fc:f4:09:7f:a3:4d:17:8c:5e:76:1b:3b: 7e:da:af:a7:82:5a:13:8e:8a:30:0b:68:08:12:be: 01:97:8e:52:e1:1f:b2:70:42:51:6b:41:42:08:bd: 65:cf:e9:23:25:4a:ae:7c:5f:9b:e4:6b:f2:d5:05: 01:53:b5:f4:04:dc:08:20:b9:fa:e7:db:74:0f:61: 49:db:bd:3a:80:f8:52:44:eb:7e:61:73:61:8a:bd: c0:0e:bd:11:f0:e2:58:56:c0:46:c2:7d:25:b5:da: 49:66:4c:51:50:68:bf:02:1c:81:bb:21:53:a2:be: 81:96:56:84:31:3b:46:f5:71:d7:67:0f:db:33:19: d4:4c:c2:29:f7:09:71:36:9c:db:83:aa:ef:a1:7d: 39:a7:48:da:1e:38:45:6b:3c:f9:3b:f8:a0:ae:50: cc:0b:af:62:63:af:b7:a2:39:9c:41:6c:24:ca:be: be:8b:c7:51:bd:08:29:d2:6d:bd:6e:c8:ba:72:92: b2:0b:4c:54:48:15:64:ba:13:e2:f2:c0:0e:a0:f8: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AB:41:5C:F0:C9:33:B5:8D:74:1E:0C:B8:73:0A:70:FB:B9:87:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl X509v3 Authority Key Identifier: keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer sbgp-ipAddrBlock: critical IPv4: 64.186.10.0/24 198.135.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:6e:ff:fe:f4:b1:3f:61:a9:db:65:f0:d0:bc:d5:2b:0a:41: 68:69:f9:8e:a3:89:ad:81:bb:73:ef:b0:e7:18:71:31:cc:92: 3f:c0:9e:18:9b:53:8b:db:a6:e2:94:b1:2b:51:5e:07:30:8c: 9f:6a:b2:00:9f:58:f4:87:09:a6:d2:cf:70:83:35:0e:42:70: 17:29:0f:36:19:85:6e:31:77:71:21:b2:6c:d7:b3:37:68:f5: db:77:e9:09:cc:dd:a5:83:91:ce:d6:2e:31:24:3a:d3:af:08: bc:55:45:c7:a4:03:89:7a:d9:c6:ce:36:e6:73:06:9f:99:3d: cc:f3:23:2c:ec:03:b2:a8:12:ec:2b:a3:e2:54:5a:f2:05:b3: 84:e5:10:c5:1e:25:1d:43:73:a6:f3:9d:1f:52:02:cb:be:57: 0b:24:56:fc:22:48:0d:90:ac:28:bf:cf:92:ad:b7:11:22:71: 8c:a5:e2:76:2c:0c:92:d6:3b:d7:6d:a6:f5:68:70:3c:4a:45: cb:18:1e:40:4d:3c:03:a3:65:35:50:55:cc:dd:0b:ee:dd:43: 6c:2e:58:6f:5b:db:cc:2f:ec:14:ea:d5:6a:33:e4:af:8d:0b: ee:1e:b8:d4:3b:1d:60:4c:ed:d3:36:60:9a:66:58:1c:ab:13: 0b:06:d5:ea -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWpvhiTXkbha68XswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzlhZjIxNDktZjcxMS00MjMwLWIyMmQtMzY3ODZmMDIx OWFjMB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk NWU1MTViYTktMTllYS00MzdiLTg2YTMtMzIxMjNlNzc3MWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTmwboqQkK1s2c81pxrzxyBC6NbxVAQ8wppR ha8avn5PGXXwMkFb/SJckC738nX89Al/o00XjF52Gzt+2q+ngloTjoowC2gIEr4B l45S4R+ycEJRa0FCCL1lz+kjJUqufF+b5Gvy1QUBU7X0BNwIILn659t0D2FJ2706 gPhSROt+YXNhir3ADr0R8OJYVsBGwn0ltdpJZkxRUGi/AhyBuyFTor6BllaEMTtG 9XHXZw/bMxnUTMIp9wlxNpzbg6rvoX05p0jaHjhFazz5O/igrlDMC69iY6+3ojmc QWwkyr6+i8dRvQgp0m29bsi6cpKyC0xUSBVkuhPi8sAOoPjhFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI6rQVzwyTO1jXQeDLhzCnD7uYc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OWFm MjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4NmYwMjE5YWMvMzJlZWNlYjEtM2FjZC0z ZDdlLThlNjgtNWYwODYzZDczNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzlhZjIxNDktZjcxMS00MjMwLWIy MmQtMzY3ODZmMDIxOWFjLzc5YWYyMTQ5LWY3MTEtNDIzMC1iMjJkLTM2Nzg2ZjAy MTlhYy5jcmwwHwYDVR0jBBgwFoAUV4uAqhRzWbejGq79NBP1W9oqD0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OWFmMjE0OS1mNzExLTQyMzAtYjIyZC0zNjc4 NmYwMjE5YWMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQLoKAwQA xoeYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ9u//70sT9hqdtl8NC81SsKQWhp+Y6jia2Bu3PvsOcYcTHM kj/AnhibU4vbpuKUsStRXgcwjJ9qsgCfWPSHCabSz3CDNQ5CcBcpDzYZhW4xd3Eh smzXszdo9dt36QnM3aWDkc7WLjEkOtOvCLxVRcekA4l62cbONuZzBp+ZPczzIyzs A7KoEuwro+JUWvIFs4TlEMUeJR1Dc6bznR9SAsu+VwskVvwiSA2QrCi/z5KttxEi cYyl4nYsDJLWO9dtpvVocDxKRcsYHkBNPAOjZTVQVczdC+7dQ2wuWG9b28wv7BTq 1Woz5K+NC+4euNQ7HWBM7dM2YJpmWByrEwsG1eo= -----END CERTIFICATE-----Generated at Sat May 18 15:35:28 2024 by rpki-client on console-fra.rpki-client.org