$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa File: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (raw, json) Hash identifier: BjedYPkpP7wOsDrH65x709Dh5faZeLQqctNa8LQsb9o= Subject key identifier: 13:59:B8:62:5E:9F:10:5A:75:C8:F1:AC:5A:C1:DE:C3:F0:A8:2E:7F Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F43285845E7292567DC6194E2B3813240 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa Signing time: Fri 17 May 2024 13:00:34 +0000 ROA not before: Fri 17 May 2024 13:00:34 +0000 ROA not after: Thu 15 Aug 2024 13:00:34 +0000 asID: 63318 IP address blocks: 66.85.252.0/23 maxlen: 24 2602:ff39::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 May 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e7:29:25:67:dc:61:94:e2:b3:81:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: May 17 13:00:34 2024 GMT Not After : Aug 15 13:00:34 2024 GMT Subject: CN=245a51f3-414c-4f6d-ac15-114fb90768f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:3f:6d:ca:2d:cf:65:8a:76:2d:37:d2:7c: bc:37:97:4f:28:df:3b:f6:1a:bc:6d:d6:b4:9d:9b: 50:16:e2:6b:00:cf:8e:06:75:94:a8:7b:32:95:9a: dd:e5:bc:d1:60:22:70:9e:a8:9c:09:1d:ed:64:60: a5:de:9b:e2:65:8f:9e:86:0f:13:da:fc:41:86:53: 77:10:64:36:0b:89:e3:b9:3d:c4:51:c8:ca:9a:d9: a3:ab:a3:f4:ec:9b:d1:a1:b1:f4:25:51:da:89:d9: 5a:3a:f2:0a:eb:61:30:73:ae:b1:be:d7:81:2f:c3: 29:bf:42:d9:c7:1d:e1:93:df:7c:84:1a:cb:f8:c3: 79:58:70:a0:0d:3c:82:bf:9d:f3:23:55:37:f2:08: 50:2d:32:b6:78:ca:17:d8:4b:80:0a:af:90:df:2d: 26:2a:c8:46:1e:b7:95:05:1c:6d:ec:90:36:25:43: 5e:24:4e:17:9e:2c:6e:8d:9a:16:ed:66:5d:28:d4: 79:c9:7d:71:26:66:ed:b8:bf:95:9b:04:46:1b:4b: d0:5b:4c:4b:d3:3d:32:07:1b:8e:06:ee:42:ed:b6: 70:4c:8d:35:c4:5c:3b:91:89:df:3b:28:23:45:13: 01:0d:8c:e4:a8:f5:74:76:83:78:36:7d:21:c3:b8: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:59:B8:62:5E:9F:10:5A:75:C8:F1:AC:5A:C1:DE:C3:F0:A8:2E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/bf2887aa-43e9-37de-b469-8642f6a243b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: 66.85.252.0/23 IPv6: 2602:ff39::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:70:cd:d0:e5:75:c9:77:a7:8b:3a:fe:ad:b3:18:82:b4:74: 32:bf:fd:79:59:84:cc:35:c2:7b:ec:b7:ba:c0:10:78:94:34: 93:87:ab:be:3a:25:13:b7:d4:48:e7:b4:3e:7b:bf:55:89:64: dd:9e:46:de:c8:d7:5f:9a:48:11:e5:e0:ec:61:ac:91:a3:92: 4e:af:98:34:6e:23:32:d0:d9:54:0f:96:52:c2:65:9f:0f:ba: 13:c3:e6:84:1c:58:96:d0:1e:e6:40:0e:da:25:ce:cc:1f:14: 9e:d4:0b:3c:6b:ee:1f:7c:b8:5e:36:df:b7:d0:ba:8f:ed:2c: 56:9a:8e:51:29:ba:7d:35:bd:6d:eb:40:49:9c:fa:30:31:4f: ae:ac:3a:b1:21:97:08:db:3a:f8:fc:05:0d:7e:01:29:5b:ec: 31:73:6e:27:a9:54:7f:5b:bf:bc:6f:74:87:4d:84:21:23:6b: 7b:07:9b:69:3d:ae:0c:44:38:ba:6a:34:1b:d5:5d:a7:be:a3: 2e:63:8d:77:4c:a2:ca:ec:c1:0b:cb:81:3f:cb:36:ba:9e:60: 4d:60:29:2f:2f:d2:41:c1:18:98:d9:fc:67:02:0b:15:a7:5a: ad:43:3c:c7:02:6f:4b:a0:9a:e6:e9:b1:96:67:4a:14:5f:90: 26:98:cb:41 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEXnKSVn3GGU4rOBMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk MjQ1YTUxZjMtNDE0Yy00ZjZkLWFjMTUtMTE0ZmI5MDc2OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTA/bcotz2WKdi030ny8N5dPKN879hq8bda0 nZtQFuJrAM+OBnWUqHsylZrd5bzRYCJwnqicCR3tZGCl3pviZY+ehg8T2vxBhlN3 EGQ2C4njuT3EUcjKmtmjq6P07JvRobH0JVHaidlaOvIK62Ewc66xvteBL8Mpv0LZ xx3hk998hBrL+MN5WHCgDTyCv53zI1U38ghQLTK2eMoX2EuACq+Q3y0mKshGHreV BRxt7JA2JUNeJE4XnixujZoW7WZdKNR5yX1xJmbtuL+VmwRGG0vQW0xL0z0yBxuO Bu5C7bZwTI01xFw7kYnfOygjRRMBDYzkqPV0doN4Nn0hw7js3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBNZuGJenxBadcjxrFrB3sPwqC5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvYmYyODg3YWEtNDNlOS0z N2RlLWI0NjktODY0MmY2YTI0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBQlX8MA4E AgACMAgDBgQmAv85ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUcM3Q5XXJd6eLOv6tsxiCtHQyv/15WYTM NcJ77Le6wBB4lDSTh6u+OiUTt9RI57Q+e79ViWTdnkbeyNdfmkgR5eDsYayRo5JO r5g0biMy0NlUD5ZSwmWfD7oTw+aEHFiW0B7mQA7aJc7MHxSe1As8a+4ffLheNt+3 0LqP7SxWmo5RKbp9Nb1t60BJnPowMU+urDqxIZcI2zr4/AUNfgEpW+wxc24nqVR/ W7+8b3SHTYQhI2t7B5tpPa4MRDi6ajQb1V2nvqMuY413TKLK7MELy4E/yza6nmBN YCkvL9JBwRiY2fxnAgsVp1qtQzzHAm9LoJrm6bGWZ0oUX5AmmMtB -----END CERTIFICATE-----Generated at Mon May 27 06:57:55 2024 by rpki-client on console-fra.rpki-client.org