$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa File: 864d8067-3825-33b1-b76e-1c3b72be155f.roa (raw, json) Hash identifier: zjWV4f24P4UeKDcU83lcwaX7sCmN15W7IXTxrkADHnA= Subject key identifier: 7B:D7:D3:E9:20:5C:F4:60:87:7B:CF:FA:E6:99:A3:84:94:94:6D:40 Certificate issuer: /CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Certificate serial: 010D0C9F4328584563F305DE6CA4BABCEA070C00 Authority key identifier: 02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa Signing time: Sun 31 Mar 2024 13:00:36 +0000 ROA not before: Sun 31 Mar 2024 13:00:36 +0000 ROA not after: Sat 29 Jun 2024 13:00:36 +0000 asID: 18616 IP address blocks: 64.111.64.0/20 maxlen: 32 68.233.176.0/20 maxlen: 32 163.182.160.0/23 maxlen: 32 198.254.112.0/20 maxlen: 32 52.119.64.0/19 maxlen: 32 163.182.128.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:63:f3:05:de:6c:a4:ba:bc:ea:07:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Validity Not Before: Mar 31 13:00:36 2024 GMT Not After : Jun 29 13:00:36 2024 GMT Subject: CN=1ad8a8fc-fe8d-4ee7-b170-856f5893abf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:fc:04:29:ce:51:07:ca:e7:4d:24:2b:2a: 5f:0a:94:2b:5a:65:f2:ce:55:d9:d4:49:f5:80:cd: 5d:1e:f8:ec:95:7f:43:7d:d5:da:85:28:1b:27:9f: 97:bd:6c:93:bb:a0:4c:1a:f2:ef:8c:93:2c:87:56: fd:c8:f1:a0:90:3b:b8:67:20:d7:f7:a2:10:27:d6: c7:c8:23:59:8c:65:ee:ff:66:89:f9:d3:a1:d1:38: a4:06:e1:12:fb:03:5f:43:c4:21:45:8b:c1:ed:0c: df:46:46:6b:aa:17:83:b5:ed:fe:6b:9a:e3:22:cd: a6:e2:85:c0:9d:75:f7:f3:b3:e0:1e:eb:92:72:79: 88:c1:9c:e7:20:d5:a4:5c:3c:22:8e:de:b0:81:09: 05:e4:8c:56:24:bb:9e:c6:0a:e3:7e:24:bf:8c:41: 5f:f5:1f:1c:eb:51:35:c1:18:a1:00:6b:53:52:b5: 3d:08:d2:86:e1:d3:53:c1:5a:71:10:b1:5a:1e:a9: 08:84:84:c4:38:85:fe:15:1a:8d:5d:20:07:9a:11: db:cf:1e:34:3c:b1:13:ce:7a:6b:8e:bc:e6:3b:69: 24:79:dd:9d:e0:71:cc:06:06:a8:83:74:51:a2:77: c1:18:93:82:6d:c8:81:fb:75:21:ee:c9:24:42:0d: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:D3:E9:20:5C:F4:60:87:7B:CF:FA:E6:99:A3:84:94:94:6D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/864d8067-3825-33b1-b76e-1c3b72be155f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl X509v3 Authority Key Identifier: keyid:02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer sbgp-ipAddrBlock: critical IPv4: 52.119.64.0/19 64.111.64.0/20 68.233.176.0/20 163.182.128.0-163.182.161.255 198.254.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:11:f5:4a:d6:3a:57:db:a7:e6:f4:3c:6e:08:7b:71:fd:7c: 15:5c:fc:33:bf:62:86:a6:d0:e9:65:c1:c0:e6:db:11:e0:78: 9f:12:90:58:f7:cd:5b:a9:fa:96:d9:70:91:f2:a5:20:e0:29: 9c:2a:67:37:e5:b6:cd:b4:0e:a0:3a:8c:6f:42:60:78:af:2e: 2e:bf:dd:73:bb:4f:f5:78:9b:04:a1:81:a3:bf:00:00:09:88: 75:bf:fd:9c:47:95:a7:29:5b:33:c2:27:9e:44:45:28:09:1d: 6d:53:64:15:3f:2f:0e:1e:8d:05:db:fa:3b:bb:2e:66:ca:0c: d3:1a:a8:d4:79:1e:ec:5d:11:78:7d:93:38:06:e6:ae:b8:e7: 92:e2:8d:34:55:b5:eb:e2:79:cf:1c:f9:38:28:2d:0d:49:e2: c7:37:a8:bf:8b:a6:de:89:a9:89:dc:e4:ee:74:3c:b3:12:78: 2d:24:40:08:0b:b5:3d:8c:e8:b2:20:ab:96:c4:39:cf:ba:7e: 72:01:6d:1d:13:ca:d3:c3:48:5c:5c:3f:b3:b7:9c:11:9d:c6: 97:c1:dd:b8:60:08:39:ae:46:53:42:25:02:42:fa:66:03:c8: 24:0b:56:d0:82:f1:93:97:c1:fb:6a:ab:50:1e:68:81:82:dc: e6:fb:2f:13 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEVj8wXebKS6vOoHDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NmY1YzMtY2M4MS00YWNkLTgyMDktYzI4YjZmNWI3 OTg0MB4XDTI0MDMzMTEzMDAzNloXDTI0MDYyOTEzMDAzNlowLzEtMCsGA1UEAxMk MWFkOGE4ZmMtZmU4ZC00ZWU3LWIxNzAtODU2ZjU4OTNhYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTD8BCnOUQfK500kKypfCpQrWmXyzlXZ1En1 gM1dHvjslX9DfdXahSgbJ5+XvWyTu6BMGvLvjJMsh1b9yPGgkDu4ZyDX96IQJ9bH yCNZjGXu/2aJ+dOh0TikBuES+wNfQ8QhRYvB7QzfRkZrqheDte3+a5rjIs2m4oXA nXX387PgHuuScnmIwZznINWkXDwijt6wgQkF5IxWJLuexgrjfiS/jEFf9R8c61E1 wRihAGtTUrU9CNKG4dNTwVpxELFaHqkIhITEOIX+FRqNXSAHmhHbzx40PLETznpr jrzmO2kked2d4HHMBgaog3RRonfBGJOCbciB+3Uh7skkQg1eIQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFHvX0+kgXPRgh3vP+uaZo4SUlG1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2 ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhiNmY1Yjc5ODQvODY0ZDgwNjctMzgyNS0z M2IxLWI3NmUtMWMzYjcyYmUxNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWM4NmY1YzMtY2M4MS00YWNkLTgy MDktYzI4YjZmNWI3OTg0LzljODZmNWMzLWNjODEtNGFjZC04MjA5LWMyOGI2ZjVi Nzk4NC5jcmwwHwYDVR0jBBgwFoAUAtKGNKaNQAcaGCa7Z0eLWJH/0icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhi NmY1Yjc5ODQuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQFNHdAAwQE QG9AAwQEROmwMAwDBAejtoADBAGjtqADBATG/nAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWRH1StY6V9un 5vQ8bgh7cf18FVz8M79ihqbQ6WXBwObbEeB4nxKQWPfNW6n6ltlwkfKlIOApnCpn N+W2zbQOoDqMb0JgeK8uLr/dc7tP9XibBKGBo78AAAmIdb/9nEeVpylbM8InnkRF KAkdbVNkFT8vDh6NBdv6O7suZsoM0xqo1Hke7F0ReH2TOAbmrrjnkuKNNFW16+J5 zxz5OCgtDUnixzeov4um3ompidzk7nQ8sxJ4LSRACAu1PYzosiCrlsQ5z7p+cgFt HRPK08NIXFw/s7ecEZ3Gl8HduGAIOa5GU0IlAkL6ZgPIJAtW0ILxk5fB+2qrUB5o gYLc5vsvEw== -----END CERTIFICATE-----Generated at Sat May 11 15:30:20 2024 by rpki-client on console-fra.rpki-client.org