$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: 7GxjjRTkoIHhAtd0rDe5gEyS6i3wFortoavC2vI+gTw= Subject key identifier: 92:77:0E:DD:A5:48:39:C5:1B:9E:E3:B1:F2:6F:C4:8E:E6:62:21:4F Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F432858455CF82C548B9D28B3567E2AA0 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Fri 29 Mar 2024 01:00:26 +0000 ROA not before: Fri 29 Mar 2024 01:00:26 +0000 ROA not after: Thu 27 Jun 2024 01:00:26 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 204.121.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:f8:2c:54:8b:9d:28:b3:56:7e:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Mar 29 01:00:26 2024 GMT Not After : Jun 27 01:00:26 2024 GMT Subject: CN=95e40807-6b53-4935-9039-6ffee20069e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:d4:16:e8:4a:1f:44:52:92:99:46:36:62: e9:40:4e:c3:6f:9f:56:16:e2:10:4b:92:d1:5a:1a: 0c:c1:d9:45:75:2d:b7:7c:fd:00:ae:f4:8b:fd:46: 2a:56:35:ee:ab:1b:cf:8e:97:99:20:ff:57:5c:1a: 19:fd:85:f9:ca:9c:6a:fa:e6:c9:b5:c4:7b:06:5d: 9b:d9:c6:9b:6c:7f:1a:0e:42:e1:3a:a5:e4:e4:2b: 00:59:57:ef:07:8c:a6:fc:17:09:87:b5:be:9f:ec: 3d:37:fd:8d:c0:e6:fb:2e:b8:11:10:06:09:55:2c: 4a:d3:1c:af:22:fd:61:cf:60:c8:c2:71:3c:49:11: cc:bc:db:7b:8a:23:37:a4:5a:be:fa:03:9a:67:0b: ee:27:96:0d:00:0b:75:c9:fd:c2:d6:26:8e:ca:70: 7d:2c:24:08:71:36:3e:f8:b7:d8:03:72:ea:eb:bd: a8:08:2d:f2:78:24:9d:1a:fd:ce:44:d2:2e:e2:3e: 3a:9f:ab:6f:3c:9f:e1:75:70:fd:54:e2:58:7d:cd: 87:da:39:8a:07:dc:71:34:26:8a:2d:c5:2b:71:51: ad:f9:16:e0:4b:d9:e2:14:38:37:5e:15:97:4e:69: 26:f2:ef:92:fb:b0:9d:07:3c:98:05:23:9e:66:b7: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:77:0E:DD:A5:48:39:C5:1B:9E:E3:B1:F2:6F:C4:8E:E6:62:21:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:57:15:80:4c:5b:9d:04:54:07:10:09:b6:9c:2b:4f:36:11: 9d:7f:ed:97:66:c2:9b:66:29:3b:ea:28:a4:d8:c1:0c:7f:62: b5:9e:c8:e5:b3:24:b5:56:b4:a5:f3:b1:0b:84:d9:21:b1:7b: 76:cf:9a:3f:9b:ac:b6:28:2d:36:86:75:9c:5f:3a:e6:39:4d: 3f:6d:37:32:cd:7f:7d:93:9d:87:78:e6:1a:77:62:d7:3e:bc: da:73:6e:46:14:6c:81:a1:40:cf:c5:07:05:d5:89:08:8a:d5: 23:3c:2e:6d:b8:69:62:01:1a:21:8c:17:50:56:98:53:76:71: 64:a8:3b:a1:9a:28:a2:10:15:b5:cc:08:b1:ae:d7:9b:f2:b0: 60:8b:e4:1d:8f:0e:7a:d7:6b:5a:d3:78:16:32:21:b8:be:49: fa:14:6b:74:5b:85:ad:cd:91:ca:a0:d7:19:99:fd:ad:a6:14: 18:3c:6e:95:74:37:de:37:5e:e4:7e:30:ad:ee:a5:27:02:f7: 10:7b:60:da:70:cf:0d:52:0e:02:53:f2:ae:c9:21:dc:9e:37: 51:a9:dc:0f:51:6a:d2:67:64:fa:b7:68:a5:0f:ea:9c:72:5f: 00:5c:d2:68:57:3a:72:1f:63:40:9a:ff:2b:e5:61:10:17:95: 54:89:2f:f2 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEVc+CxUi50os1Z+KqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI0MDMyOTAxMDAyNloXDTI0MDYyNzAxMDAyNlowLzEtMCsGA1UEAxMk OTVlNDA4MDctNmI1My00OTM1LTkwMzktNmZmZWUyMDA2OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp37UFuhKH0RSkplGNmLpQE7Db59WFuIQS5LR WhoMwdlFdS23fP0ArvSL/UYqVjXuqxvPjpeZIP9XXBoZ/YX5ypxq+ubJtcR7Bl2b 2cabbH8aDkLhOqXk5CsAWVfvB4ym/BcJh7W+n+w9N/2NwOb7LrgREAYJVSxK0xyv Iv1hz2DIwnE8SRHMvNt7iiM3pFq++gOaZwvuJ5YNAAt1yf3C1iaOynB9LCQIcTY+ +LfYA3Lq672oCC3yeCSdGv3ORNIu4j46n6tvPJ/hdXD9VOJYfc2H2jmKB9xxNCaK LcUrcVGt+RbgS9niFDg3XhWXTmkm8u+S+7CdBzyYBSOeZrf4sQIDAQABo4IDgDCC A3wwHQYDVR0OBBYEFJJ3Dt2lSDnFG57jsfJvxI7mYiFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADANEYDBADAQV8DAwDMeTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQASVxWATFudBFQHEAm2nCtPNhGdf+2XZsKbZik76iik2MEMf2K1nsjlsyS1VrSl 87ELhNkhsXt2z5o/m6y2KC02hnWcXzrmOU0/bTcyzX99k52HeOYad2LXPrzac25G FGyBoUDPxQcF1YkIitUjPC5tuGliARohjBdQVphTdnFkqDuhmiiiEBW1zAixrteb 8rBgi+Qdjw5612ta03gWMiG4vkn6FGt0W4WtzZHKoNcZmf2tphQYPG6VdDfeN17k fjCt7qUnAvcQe2DacM8NUg4CU/KuySHcnjdRqdwPUWrSZ2T6t2ilD+qccl8AXNJo VzpyH2NAmv8r5WEQF5VUiS/y -----END CERTIFICATE-----Generated at Sun Jun 2 21:00:33 2024 by rpki-client on console-fra.rpki-client.org