$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa File: 1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa (raw, json) Hash identifier: oEEmToysZ8QiZtJbK46co3/3i6VYjJo+fk9JtV8vRLQ= Subject key identifier: 81:42:9F:16:85:68:6E:F6:C8:38:C5:89:91:A4:8C:B1:1F:24:D0:D7 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F432858472B1001C136594B9F54DB7360 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa Signing time: Tue 10 Sep 2024 13:31:58 +0000 ROA not before: Tue 10 Sep 2024 13:31:58 +0000 ROA not after: Mon 09 Dec 2024 14:31:58 +0000 asID: 63023 IP address blocks: 67.220.72.0/23 maxlen: 24 67.220.74.0/24 maxlen: 24 67.220.80.0/24 maxlen: 24 67.220.82.0/24 maxlen: 24 67.220.85.0/24 maxlen: 24 67.220.86.0/23 maxlen: 24 67.220.88.0/23 maxlen: 24 67.220.95.0/24 maxlen: 24 68.168.31.0/24 maxlen: 24 69.42.209.0/24 maxlen: 24 186.190.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Sep 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2b:10:01:c1:36:59:4b:9f:54:db:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Sep 10 13:31:58 2024 GMT Not After : Dec 9 14:31:58 2024 GMT Subject: CN=e20720e2-f14d-4476-b5e0-2097bee50c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:68:d4:70:5d:e1:03:8e:f3:ea:68:43:92: 25:04:f9:43:af:bc:bd:a4:a3:f5:50:f4:b1:2f:2f: 3b:50:d2:f8:06:12:d9:6c:e0:23:86:1a:f5:ff:ae: d0:91:97:f8:60:08:e6:1f:4d:b7:d9:cb:63:b7:9f: 41:f7:52:31:de:54:57:e6:0c:20:14:d9:52:ed:b8: 75:c9:ea:17:66:49:eb:1f:4f:cc:ab:cc:58:8c:6f: 5e:45:9f:f1:41:0a:a7:bd:f3:8d:b0:2c:59:6d:8f: c8:e4:87:e1:0b:d6:04:f1:82:30:52:de:4c:61:cb: 36:df:dc:c3:58:4b:57:79:04:c6:d4:ce:d4:b9:f4: db:fe:63:5c:3a:dc:1f:c0:d7:73:ff:1f:13:64:a7: 8e:e4:90:80:9a:4f:3a:96:46:50:fe:79:9b:04:73: f2:66:9d:bf:71:c5:53:87:b4:9a:9f:4b:0a:7c:d8: c8:a0:8b:48:54:d4:27:de:3f:dd:51:2c:dd:e4:65: 9b:d5:4e:09:b5:c5:03:7d:2a:b1:b3:95:56:89:26: 6a:9c:10:80:19:1c:eb:03:d1:ee:8e:40:c6:17:e1: 6b:60:95:d3:40:73:7d:88:6e:70:bb:45:59:55:46: b4:d5:88:eb:f1:78:0c:54:9a:77:3e:c4:52:c9:d8: 75:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:42:9F:16:85:68:6E:F6:C8:38:C5:89:91:A4:8C:B1:1F:24:D0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.72.0-67.220.74.255 67.220.80.0/24 67.220.82.0/24 67.220.85.0-67.220.89.255 67.220.95.0/24 68.168.31.0/24 69.42.209.0/24 186.190.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:23:c5:46:13:72:c5:53:bd:09:c6:b3:b9:81:0b:d2:6b:44: c2:30:a4:e9:19:20:d3:63:d6:14:4f:42:95:dd:9a:be:cb:d6: 24:e5:4c:f0:82:38:7f:e3:fc:b5:a0:08:a8:87:d3:da:5f:b1: 2e:69:86:eb:c2:f5:e6:7c:8e:a2:3a:c7:dd:7a:a9:fa:b7:74: a7:58:bb:68:e8:db:00:18:4e:25:0a:2b:02:e6:07:49:09:dc: 97:df:e0:18:7e:6d:8b:cd:ae:ee:90:5a:a7:63:08:b2:b5:6e: 13:ac:ac:c3:cc:0a:5b:75:70:e0:f1:58:71:06:60:80:b1:a4: 20:e7:b9:72:dd:85:02:67:8e:69:fc:30:73:ff:0d:b5:29:4b: 0c:83:6e:86:7b:39:a1:93:c9:f3:83:d0:20:c5:56:38:d2:4c: e8:66:64:bc:b9:48:25:68:c6:10:ee:52:94:1a:0a:a4:60:d7: 7d:51:ee:3f:a7:f9:5f:2e:64:06:92:29:8f:db:eb:0b:f7:ac: 26:87:92:ee:6f:95:5f:9c:f8:d3:67:fe:1c:93:b9:e4:6d:04: 54:67:61:28:2b:97:4a:fa:38:2a:ed:73:a9:2d:a5:05:ba:b9: 6d:84:12:c1:51:27:13:ee:49:ed:81:f5:ca:6f:f6:40:d6:8b: d5:4d:12:29 -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEcrEAHBNllLn1Tbc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI0MDkxMDEzMzE1OFoXDTI0MTIwOTE0MzE1OFowLzEtMCsGA1UEAxMk ZTIwNzIwZTItZjE0ZC00NDc2LWI1ZTAtMjA5N2JlZTUwYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMxo1HBd4QOO8+poQ5IlBPlDr7y9pKP1UPSx Ly87UNL4BhLZbOAjhhr1/67QkZf4YAjmH0232ctjt59B91Ix3lRX5gwgFNlS7bh1 yeoXZknrH0/Mq8xYjG9eRZ/xQQqnvfONsCxZbY/I5IfhC9YE8YIwUt5MYcs239zD WEtXeQTG1M7UufTb/mNcOtwfwNdz/x8TZKeO5JCAmk86lkZQ/nmbBHPyZp2/ccVT h7San0sKfNjIoItIVNQn3j/dUSzd5GWb1U4JtcUDfSqxs5VWiSZqnBCAGRzrA9Hu jkDGF+FrYJXTQHN9iG5wu0VZVUa01Yjr8XgMVJp3PsRSydh1swIDAQABo4IDjzCC A4swHQYDVR0OBBYEFIFCnxaFaG72yDjFiZGkjLEfJNDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMWY3MGJiOTktNDRmMS0z ZGRiLTk0MjktMmU4OTQwN2ZmNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAND3EgD BABD3EoDBABD3FADBABD3FIwDAMEAEPcVQMEAUPcWAMEAEPcXwMEAESoHwMEAEUq 0QMEALq+1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBNI8VGE3LFU70JxrO5gQvSa0TCMKTpGSDTY9YUT0KV 3Zq+y9Yk5Uzwgjh/4/y1oAioh9PaX7EuaYbrwvXmfI6iOsfdeqn6t3SnWLto6NsA GE4lCisC5gdJCdyX3+AYfm2Lza7ukFqnYwiytW4TrKzDzApbdXDg8VhxBmCAsaQg 57ly3YUCZ45p/DBz/w21KUsMg26Gezmhk8nzg9AgxVY40kzoZmS8uUglaMYQ7lKU GgqkYNd9Ue4/p/lfLmQGkimP2+sL96wmh5Lub5VfnPjTZ/4ck7nkbQRUZ2EoK5dK +jgq7XOpLaUFurlthBLBUScT7kntgfXKb/ZA1ovVTRIp -----END CERTIFICATE-----Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org