$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0897be13-fbfd-390c-905e-fd886c4a983c.roa File: 0897be13-fbfd-390c-905e-fd886c4a983c.roa (raw, json) Hash identifier: 8iQtxKVfklSs8sCeFNMHno/WsX1ovcXocVB7uK8eRPY= Subject key identifier: 6C:0F:69:71:AA:A0:2E:0B:4F:DF:C6:D2:51:CF:75:FD:B6:2D:EC:B3 Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584561285B1FFEC3369CF9856700 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0897be13-fbfd-390c-905e-fd886c4a983c.roa Signing time: Sat 30 Mar 2024 13:00:38 +0000 ROA not before: Sat 30 Mar 2024 13:00:38 +0000 ROA not after: Fri 28 Jun 2024 13:00:38 +0000 asID: 27589 IP address blocks: 199.241.96.0/21 maxlen: 24 64.59.64.0/18 maxlen: 24 208.122.192.0/19 maxlen: 24 204.13.52.0/22 maxlen: 24 199.182.104.0/21 maxlen: 24 199.59.88.0/21 maxlen: 24 104.193.120.0/22 maxlen: 24 66.244.144.0/20 maxlen: 24 74.206.160.0/19 maxlen: 24 99.192.128.0/17 maxlen: 24 162.250.76.0/22 maxlen: 24 208.74.148.0/22 maxlen: 24 184.94.144.0/20 maxlen: 24 199.19.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:61:28:5b:1f:fe:c3:36:9c:f9:85:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Mar 30 13:00:38 2024 GMT Not After : Jun 28 13:00:38 2024 GMT Subject: CN=ef72ac97-38db-4306-9049-6323f5e8c3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:30:1f:de:e0:40:be:04:eb:c6:1d:cd:86:7f: 2f:26:72:dc:43:c5:5d:15:c9:7a:4f:e3:f6:69:c1: a6:13:cd:87:ab:2c:87:f2:61:ad:74:27:bb:cb:be: 05:1e:ee:56:83:40:db:db:d2:00:f1:0a:d5:c7:6b: 99:98:c4:69:f4:7b:56:f2:41:19:b4:fa:3f:26:bc: 47:12:14:13:cd:81:6d:0e:79:b2:30:db:83:a3:55: 30:63:54:73:2a:e8:09:3e:b8:db:34:1e:1e:93:0a: a2:02:21:e3:29:39:04:40:86:e9:1d:86:58:7d:72: 30:65:29:ff:26:f5:fd:d4:fb:c2:ef:49:9e:5a:3d: e2:d2:ef:06:42:46:50:b0:c9:cc:20:08:e2:63:79: da:56:81:65:a7:04:a9:c3:9a:16:72:36:48:9e:4e: b3:84:05:d3:a6:9c:10:22:a3:dc:31:81:15:47:b0: 9d:92:b0:b8:29:d3:2f:d3:eb:e2:92:c5:a3:2f:bd: fc:8e:31:15:91:14:73:77:9a:2b:1e:b6:7f:b0:61: 89:9e:08:c5:27:09:92:46:7b:72:1a:04:88:23:5a: d0:bb:8a:da:69:e9:eb:52:fc:df:00:c2:fe:ec:ac: 3c:97:1e:9c:f4:66:7f:77:d7:38:de:6f:c7:6c:e2: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0F:69:71:AA:A0:2E:0B:4F:DF:C6:D2:51:CF:75:FD:B6:2D:EC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0897be13-fbfd-390c-905e-fd886c4a983c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: 64.59.64.0/18 66.244.144.0/20 74.206.160.0/19 99.192.128.0/17 104.193.120.0/22 162.250.76.0/22 184.94.144.0/20 199.19.200.0/21 199.59.88.0/21 199.182.104.0/21 199.241.96.0/21 204.13.52.0/22 208.74.148.0/22 208.122.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:51:1c:a6:f8:21:28:43:bc:b9:e2:a2:05:9f:c5:62:8f:4d: ca:86:f3:6d:b9:f5:d3:96:17:db:0a:ae:72:0a:b8:ed:ff:28: 35:21:30:57:ea:e6:03:68:0d:c3:5a:19:61:5e:a8:1b:bf:d9: 21:76:fc:d7:ff:66:2d:48:15:a4:32:6b:65:72:93:63:23:22: ca:f2:ab:97:dd:50:aa:85:48:2f:c4:f0:a7:c1:a7:24:50:b9: 8e:f7:17:7d:0c:c0:b1:c2:c7:1c:9c:79:05:9e:c2:96:a8:33: 41:94:58:6c:58:e1:3b:d9:fd:4a:0b:d3:68:4d:d4:56:07:9a: 0d:7e:6f:51:aa:4a:26:f2:9f:59:7e:77:18:2b:37:4d:3a:73: ba:2d:e9:dc:85:33:0a:50:5e:3c:5a:96:26:d6:48:9b:d7:9c: df:cc:e4:b0:09:67:a3:73:c1:cd:6f:68:e5:f5:1f:9e:6b:31: a5:f5:79:8b:69:8b:2b:18:49:f6:3c:d6:47:fa:80:6e:f5:73: 6f:67:0f:4c:e7:c3:9c:fc:73:1e:3d:a8:f2:c4:6d:eb:f0:53: 47:a4:da:e6:b6:29:5d:44:d2:6a:d0:56:3d:ea:ef:49:47:64: 44:ed:33:41:08:a4:3d:07:13:a8:9c:30:7e:15:a2:8b:84:35: 36:02:0c:93 -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWEVhKFsf/sM2nPmFZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI0MDMzMDEzMDAzOFoXDTI0MDYyODEzMDAzOFowLzEtMCsGA1UEAxMk ZWY3MmFjOTctMzhkYi00MzA2LTkwNDktNjMyM2Y1ZThjM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TAf3uBAvgTrxh3Nhn8vJnLcQ8VdFcl6T+P2 acGmE82HqyyH8mGtdCe7y74FHu5Wg0Db29IA8QrVx2uZmMRp9HtW8kEZtPo/JrxH EhQTzYFtDnmyMNuDo1UwY1RzKugJPrjbNB4ekwqiAiHjKTkEQIbpHYZYfXIwZSn/ JvX91PvC70meWj3i0u8GQkZQsMnMIAjiY3naVoFlpwSpw5oWcjZInk6zhAXTppwQ IqPcMYEVR7CdkrC4KdMv0+viksWjL738jjEVkRRzd5orHrZ/sGGJngjFJwmSRnty GgSII1rQu4raaenrUvzfAML+7Kw8lx6c9GZ/d9c43m/HbOKPXQIDAQABo4IDozCC A58wHQYDVR0OBBYEFGwPaXGqoC4LT9/G0lHPdf22LeyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvMDg5N2JlMTMtZmJmZC0z OTBjLTkwNWUtZmQ4ODZjNGE5ODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQGQDtAAwQE QvSQAwQFSs6gAwQHY8CAAwQCaMF4AwQCovpMAwQEuF6QAwQDxxPIAwQDxztYAwQD x7ZoAwQDx/FgAwQCzA00AwQC0EqUAwQF0HrAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABZRHKb4IShDvLni ogWfxWKPTcqG82259dOWF9sKrnIKuO3/KDUhMFfq5gNoDcNaGWFeqBu/2SF2/Nf/ Zi1IFaQya2Vyk2MjIsryq5fdUKqFSC/E8KfBpyRQuY73F30MwLHCxxyceQWewpao M0GUWGxY4TvZ/UoL02hN1FYHmg1+b1GqSibyn1l+dxgrN006c7ot6dyFMwpQXjxa libWSJvXnN/M5LAJZ6Nzwc1vaOX1H55rMaX1eYtpiysYSfY81kf6gG71c29nD0zn w5z8cx49qPLEbevwU0ek2ua2KV1E0mrQVj3q70lHZETtM0EIpD0HE6icMH4VoouE NTYCDJM= -----END CERTIFICATE-----Generated at Mon May 13 16:55:32 2024 by rpki-client on console-ams.rpki-client.org