$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/119e247e-fed7-3038-8cf2-117a82c3079a.roa File: 119e247e-fed7-3038-8cf2-117a82c3079a.roa (raw, json) Hash identifier: 3bt5CFsxoyqyeu3fhydmtkmmG85M6argSHe6mIb0Few= Subject key identifier: 18:04:88:B7:4E:59:78:4A:E4:FB:A7:F5:2D:65:E5:89:46:4E:9A:81 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858451B7AE8ED46F7E6E6ECA57880 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/119e247e-fed7-3038-8cf2-117a82c3079a.roa Signing time: Tue 05 Mar 2024 14:00:31 +0000 ROA not before: Tue 05 Mar 2024 14:00:31 +0000 ROA not after: Mon 03 Jun 2024 13:00:31 +0000 asID: 32181 IP address blocks: 98.159.224.0/24 maxlen: 24 173.239.204.0/24 maxlen: 24 64.64.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1b:7a:e8:ed:46:f7:e6:e6:ec:a5:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 5 14:00:31 2024 GMT Not After : Jun 3 13:00:31 2024 GMT Subject: CN=7cab3cca-b70c-4b2b-b274-43639b9c5302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:5d:c1:17:03:b4:06:1d:a3:3b:bc:27:0a: a4:95:93:d6:af:26:dd:3c:2b:f3:2d:2f:a1:42:54: 79:24:5d:6b:e0:b7:d1:c8:69:f5:81:b4:de:2b:3c: 41:e0:50:32:5d:23:ad:7e:f9:2e:dc:01:5d:8d:e6: 95:b5:3b:12:3c:15:ff:90:18:c6:bb:22:21:89:c0: cd:b3:cd:b2:86:b2:a3:0a:24:83:51:17:6a:43:b3: 32:2b:cc:1f:8f:d3:d8:bd:76:40:8b:d8:98:88:3f: 2d:cf:bb:14:8f:da:ec:ee:4c:eb:be:45:28:08:dc: 55:88:13:49:ad:fa:cb:68:9b:73:f7:93:06:70:64: b6:00:55:a1:04:2c:6d:22:5a:96:e5:f0:8e:81:6e: 19:db:a7:46:cd:2c:ba:45:ce:a4:ad:7c:3e:69:4b: 40:26:a8:71:73:db:90:c8:9b:04:1b:ca:8d:61:04: 9f:98:78:5f:b7:13:77:28:ac:a1:32:11:f8:17:53: 49:52:63:2d:0d:d2:74:aa:81:71:e7:41:d9:7a:ab: 47:35:78:92:c8:cb:4f:4f:f3:cd:d2:11:b9:15:7d: e6:87:57:b8:08:9d:ef:3a:bd:18:44:bb:96:c1:6f: c4:6b:b5:c5:5d:a8:b4:e9:74:49:1e:4d:67:62:b4: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:04:88:B7:4E:59:78:4A:E4:FB:A7:F5:2D:65:E5:89:46:4E:9A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/119e247e-fed7-3038-8cf2-117a82c3079a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 64.64.116.0/24 98.159.224.0/24 173.239.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:1a:4f:95:db:01:b5:bc:d4:e3:94:dc:32:8d:ae:79:79:8a: c2:8f:73:f7:3f:69:3a:d2:28:85:2e:88:0d:e0:e6:2f:fd:3e: a1:05:4b:c1:f8:d5:7f:38:4b:68:2e:47:49:c6:52:a2:32:78: d6:5b:75:98:a2:1c:3f:b7:39:6b:0b:b2:a9:74:88:4f:3b:7b: 78:14:b1:d9:81:bc:bf:da:05:4b:58:6c:de:6d:24:7d:74:2d: c8:a2:fd:f5:ce:85:a8:ab:f0:30:c5:f6:63:4b:61:39:66:ef: 57:2a:29:e2:f0:e6:ab:7f:dd:60:2f:1b:95:d3:6d:81:83:b6: 23:10:62:c7:b0:f5:bf:b6:3a:70:5e:79:e6:46:8d:92:4b:74: f6:1f:bb:da:25:4f:2e:b6:b2:a1:54:0a:9d:b0:d2:31:75:93: 85:31:a9:1a:d2:9f:9f:ff:35:f9:22:cd:60:e2:e2:e5:ec:b7: 0c:79:62:23:3e:1b:a2:ff:9a:c2:ef:e6:78:b4:56:88:39:4f: 3d:60:5e:f4:58:a5:d3:e7:ba:db:9a:3d:94:b8:83:49:13:97: 1f:3f:d4:2a:f0:c0:55:3d:bb:71:ca:e9:7c:6d:ea:06:d7:63: 7f:b3:e3:e6:74:a6:61:71:a3:e1:d3:68:00:2e:a4:38:71:38: cb:2d:5b:08 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEUbeujtRvfm5uyleIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI0MDMwNTE0MDAzMVoXDTI0MDYwMzEzMDAzMVowLzEtMCsGA1UEAxMk N2NhYjNjY2EtYjcwYy00YjJiLWIyNzQtNDM2MzliOWM1MzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHtdwRcDtAYdozu8JwqklZPWrybdPCvzLS+h QlR5JF1r4LfRyGn1gbTeKzxB4FAyXSOtfvku3AFdjeaVtTsSPBX/kBjGuyIhicDN s82yhrKjCiSDURdqQ7MyK8wfj9PYvXZAi9iYiD8tz7sUj9rs7kzrvkUoCNxViBNJ rfrLaJtz95MGcGS2AFWhBCxtIlqW5fCOgW4Z26dGzSy6Rc6krXw+aUtAJqhxc9uQ yJsEG8qNYQSfmHhftxN3KKyhMhH4F1NJUmMtDdJ0qoFx50HZeqtHNXiSyMtPT/PN 0hG5FX3mh1e4CJ3vOr0YRLuWwW/Ea7XFXai06XRJHk1nYrR2QwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBgEiLdOWXhK5Pun9S1l5YlGTpqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMTE5ZTI0N2UtZmVkNy0z MDM4LThjZjItMTE3YTgyYzMwNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQEB0AwQA Yp/gAwQAre/MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKAaT5XbAbW81OOU3DKNrnl5isKPc/c/aTrSKIUu iA3g5i/9PqEFS8H41X84S2guR0nGUqIyeNZbdZiiHD+3OWsLsql0iE87e3gUsdmB vL/aBUtYbN5tJH10Lcii/fXOhair8DDF9mNLYTlm71cqKeLw5qt/3WAvG5XTbYGD tiMQYsew9b+2OnBeeeZGjZJLdPYfu9olTy62sqFUCp2w0jF1k4UxqRrSn5//Nfki zWDi4uXstwx5YiM+G6L/msLv5ni0Vog5Tz1gXvRYpdPnutuaPZS4g0kTlx8/1Crw wFU9u3HK6Xxt6gbXY3+z4+Z0pmFxo+HTaAAupDhxOMstWwg= -----END CERTIFICATE-----Generated at Sun May 12 20:27:27 2024 by rpki-client on console-ams.rpki-client.org