$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json) Hash identifier: erPJwTSpO5BuNOBojdQaqoiGfaOhC1MskQwiwz6JyJs= Subject key identifier: B5:D0:E0:59:78:E0:D3:80:16:F7:45:E9:A9:8F:84:B0:90:4C:67:74 Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584211DD8962FFAE597ACFFF7A40 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa Signing time: Thu 01 Jun 2023 01:00:18 +0000 ROA not before: Thu 01 Jun 2023 01:00:18 +0000 ROA not after: Wed 30 Aug 2023 01:00:18 +0000 asID: 399717 IP address blocks: 64.112.106.0/24 maxlen: 24 23.179.176.0/24 maxlen: 24 2602:fc7e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Jun 2023 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:11:dd:89:62:ff:ae:59:7a:cf:ff:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Jun 1 01:00:18 2023 GMT Not After : Aug 30 01:00:18 2023 GMT Subject: CN=4f0a40ee-cac3-4ae5-85ce-546227ab5093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:d2:52:5a:f1:b5:33:fc:6b:15:8d:1e:4a: d5:43:15:33:7a:87:54:83:85:15:74:13:49:2f:ca: eb:83:c7:29:bc:85:a2:00:22:2d:5f:f9:24:82:76: 36:18:e0:16:6a:9d:99:4b:af:84:fc:af:34:24:00: f6:13:73:b3:25:40:82:98:5a:7b:35:85:75:0d:62: 2d:c6:e3:8a:ad:4f:61:c4:63:9a:94:da:06:58:a0: 26:8c:23:9b:dd:01:ce:9e:39:1f:8d:83:0f:2c:c0: 89:77:13:60:43:65:64:bd:bd:96:9a:7d:f7:f1:d9: 07:3e:e5:2e:b2:f6:f5:e8:8b:32:fc:0d:13:17:df: d6:12:9b:05:67:e5:43:e9:38:7a:d9:77:90:89:96: e9:96:52:c4:61:9d:b4:d9:0b:7c:79:b3:ff:33:0c: 3c:77:5e:e9:6a:61:e1:c0:80:83:a5:9f:76:34:f2: 66:70:2b:54:26:c5:e5:c8:ae:af:39:65:34:8d:bf: 73:79:f6:16:bd:81:db:00:07:41:31:b3:76:ac:51: 38:27:13:96:70:c5:64:57:ab:98:63:ca:dc:29:99: 58:4c:2c:07:51:3a:b4:49:b6:84:1e:b2:60:84:72: 75:f0:77:1c:ff:8b:46:9c:a4:90:21:c0:18:70:4f: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D0:E0:59:78:E0:D3:80:16:F7:45:E9:A9:8F:84:B0:90:4C:67:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:40:05:e4:72:19:47:d8:bc:5d:e5:83:68:af:d8:fe:50:34: 4d:5c:f0:67:cf:42:54:62:22:b5:2d:6c:b5:0d:1e:3d:92:81: bd:ae:6c:13:ea:b0:8d:41:7b:37:58:3a:f3:e4:33:e7:83:29: 5a:9e:67:bb:82:77:48:25:7e:b0:47:58:ea:fd:84:a1:32:e2: e2:b4:18:97:ed:80:4a:e4:d0:28:7b:3b:2b:07:fb:0c:05:05: d5:f8:1f:82:8b:9f:51:81:ab:5c:d0:09:36:1e:1f:e4:4f:c6: 88:af:3d:62:2a:ec:a9:c3:76:b7:0e:ac:53:ec:7d:16:cc:c4: 4b:6e:7d:78:a0:3b:85:05:89:98:78:fa:ef:61:29:a0:70:a4: c8:8c:49:08:0c:69:71:c1:97:ae:9d:77:9c:39:47:7c:87:56: b9:ad:7b:58:a1:2a:02:5a:c6:0c:ff:af:6e:5b:cc:34:f7:64: 93:b7:f0:ab:ee:df:9e:5d:0e:aa:2d:24:cf:e8:9b:5b:b8:6e: 46:a6:90:cf:6d:97:ba:6b:0b:d3:30:96:df:d5:d8:b2:5f:4e: 3c:df:42:97:98:e2:77:2a:3e:7a:90:3b:64:68:cd:0f:91:28: 59:cd:4b:4d:06:43:73:e3:44:11:f9:ab:6d:89:49:46:80:00: 1e:db:c2:6f -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEIR3Yli/65Zes//ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTIzMDYwMTAxMDAxOFoXDTIzMDgzMDAxMDAxOFowLzEtMCsGA1UEAxMk NGYwYTQwZWUtY2FjMy00YWU1LTg1Y2UtNTQ2MjI3YWI1MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4fSUlrxtTP8axWNHkrVQxUzeodUg4UVdBNJ L8rrg8cpvIWiACItX/kkgnY2GOAWap2ZS6+E/K80JAD2E3OzJUCCmFp7NYV1DWIt xuOKrU9hxGOalNoGWKAmjCOb3QHOnjkfjYMPLMCJdxNgQ2Vkvb2Wmn338dkHPuUu svb16Isy/A0TF9/WEpsFZ+VD6Th62XeQiZbpllLEYZ202Qt8ebP/Mww8d17pamHh wICDpZ92NPJmcCtUJsXlyK6vOWU0jb9zefYWvYHbAAdBMbN2rFE4JxOWcMVkV6uY Y8rcKZlYTCwHUTq0SbaEHrJghHJ18Hcc/4tGnKSQIcAYcE8dPQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFLXQ4Fl44NOAFvdF6amPhLCQTGd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOQAXkchlH2Lxd5YNor9j+UDRN XPBnz0JUYiK1LWy1DR49koG9rmwT6rCNQXs3WDrz5DPngylanme7gndIJX6wR1jq /YShMuLitBiX7YBK5NAoezsrB/sMBQXV+B+Ci59Rgatc0Ak2Hh/kT8aIrz1iKuyp w3a3DqxT7H0WzMRLbn14oDuFBYmYePrvYSmgcKTIjEkIDGlxwZeunXecOUd8h1a5 rXtYoSoCWsYM/69uW8w092STt/Cr7t+eXQ6qLSTP6JtbuG5GppDPbZe6awvTMJbf 1diyX04830KXmOJ3Kj56kDtkaM0PkShZzUtNBkNz40QR+attiUlGgAAe28Jv -----END CERTIFICATE-----Generated at Thu Jun 1 01:33:37 2023 by rpki-client on console-ams.rpki-client.org