$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa File: 8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (raw, json) Hash identifier: 7VpbbttQ6ulhNT3qh8sjal3kSR2fDIeFRTw8c/x4Nxk= Subject key identifier: 3E:94:44:DF:35:61:EF:62:6E:62:C3:46:31:A1:C4:67:B6:91:B6:92 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F43285841FFB8201EC147A1A02FBF7000 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa Signing time: Thu 25 May 2023 13:00:19 +0000 ROA not before: Thu 25 May 2023 13:00:19 +0000 ROA not after: Wed 23 Aug 2023 13:00:19 +0000 asID: 1239 IP address blocks: 162.250.96.0/21 maxlen: 24 162.254.0.0/21 maxlen: 24 104.171.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 May 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:ff:b8:20:1e:c1:47:a1:a0:2f:bf:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: May 25 13:00:19 2023 GMT Not After : Aug 23 13:00:19 2023 GMT Subject: CN=cc3a62f7-f254-47ec-bf19-9c73023595cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:a0:ad:67:5f:e8:37:bb:fd:61:aa:e0:04: 85:06:96:4f:84:02:19:e0:f6:67:bc:32:fc:6b:d9: 4c:19:a9:93:f6:55:a2:5a:85:7a:40:76:f3:3a:65: 81:70:e7:76:27:fa:73:2c:aa:af:83:cc:84:a8:19: e9:06:fa:7c:df:3c:3c:54:21:88:3c:0f:a7:55:9b: 63:f3:67:c3:cc:09:b2:19:7d:8a:23:51:92:82:89: 80:62:d9:f8:0b:c7:96:73:dd:01:05:8e:f9:85:f2: 72:01:a6:53:63:82:9d:c2:27:08:cc:c3:c1:fb:db: f2:cd:1b:ed:78:36:8a:06:75:bd:b2:9d:e7:a0:e2: 52:bf:48:9e:15:73:0c:4b:c5:b5:5a:1e:dd:70:56: d8:42:99:f7:d6:40:77:cb:67:8c:4d:f6:88:29:3a: 21:db:c7:6c:5a:a3:2d:39:b6:16:8f:7c:e3:5a:40: e1:bb:c5:ae:b1:01:92:e4:a3:22:2e:4c:e2:5f:43: ec:91:7c:0a:fc:ae:e6:40:5d:9e:9e:9a:fd:98:69: c0:7a:15:0c:45:46:13:8a:f6:96:ea:a1:58:50:74: b3:91:e4:98:34:56:0a:59:ac:0d:78:df:fe:11:4f: 2b:93:33:50:96:1a:fa:54:aa:1f:14:c9:84:c2:27: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:94:44:DF:35:61:EF:62:6E:62:C3:46:31:A1:C4:67:B6:91:B6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 104.171.160.0/20 162.250.96.0/21 162.254.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0a:27:d4:71:6c:70:d1:eb:36:51:d6:44:14:16:f1:31:e8: ba:c4:d1:d0:96:68:a6:29:1f:3d:1a:b2:e0:8e:e8:71:b6:7c: 22:59:aa:08:64:51:5e:26:d8:5b:99:af:8b:e5:41:16:0e:47: a9:d7:52:bc:ea:71:85:79:55:3b:83:3a:c1:c1:fc:58:37:d4: b4:8f:96:92:1e:98:bb:ca:91:d8:f2:11:79:b5:99:98:ee:33: aa:ab:0c:6e:7e:3d:4b:e0:7c:03:fd:50:81:1c:b4:bd:c8:b1: 9a:10:07:8a:20:a8:19:ff:83:51:50:83:db:95:47:ea:6b:c4: e6:71:22:32:d2:a3:cd:05:f4:15:c4:60:ea:69:52:cb:dd:39: 2b:cb:01:44:40:1f:68:d5:16:2e:0a:1a:5e:99:6f:1f:89:48: 32:53:c1:50:fe:0b:f5:7c:54:bc:1e:b1:81:f9:b0:8f:1e:65: 08:aa:72:37:77:5f:83:55:9f:67:99:d2:96:c9:a5:16:19:fc: 17:9c:3f:db:ab:a7:cc:24:10:16:4f:15:92:79:32:db:99:c6: 83:44:85:51:b4:92:ad:42:2c:83:02:3b:6c:5a:99:9d:4e:b2: f4:7a:08:f3:3b:af:49:be:0a:78:fc:ea:a5:88:c4:39:b6:b8: 91:26:d0:86 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEH/uCAewUehoC+/cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTIzMDUyNTEzMDAxOVoXDTIzMDgyMzEzMDAxOVowLzEtMCsGA1UEAxMk Y2MzYTYyZjctZjI1NC00N2VjLWJmMTktOWM3MzAyMzU5NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gWgrWdf6De7/WGq4ASFBpZPhAIZ4PZnvDL8 a9lMGamT9lWiWoV6QHbzOmWBcOd2J/pzLKqvg8yEqBnpBvp83zw8VCGIPA+nVZtj 82fDzAmyGX2KI1GSgomAYtn4C8eWc90BBY75hfJyAaZTY4KdwicIzMPB+9vyzRvt eDaKBnW9sp3noOJSv0ieFXMMS8W1Wh7dcFbYQpn31kB3y2eMTfaIKToh28dsWqMt ObYWj3zjWkDhu8WusQGS5KMiLkziX0PskXwK/K7mQF2enpr9mGnAehUMRUYTivaW 6qFYUHSzkeSYNFYKWawNeN/+EU8rkzNQlhr6VKofFMmEwief1wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD6URN81Ye9ibmLDRjGhxGe2kbaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvOGE5MzBkNWMtMTdmZi0z YTdlLWJjNmEtMDA4MWVhYTU1NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEaKugAwQD ovpgAwQDov4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALcKJ9RxbHDR6zZR1kQUFvEx6LrE0dCWaKYpHz0a suCO6HG2fCJZqghkUV4m2FuZr4vlQRYOR6nXUrzqcYV5VTuDOsHB/Fg31LSPlpIe mLvKkdjyEXm1mZjuM6qrDG5+PUvgfAP9UIEctL3IsZoQB4ogqBn/g1FQg9uVR+pr xOZxIjLSo80F9BXEYOppUsvdOSvLAURAH2jVFi4KGl6Zbx+JSDJTwVD+C/V8VLwe sYH5sI8eZQiqcjd3X4NVn2eZ0pbJpRYZ/BecP9urp8wkEBZPFZJ5MtuZxoNEhVG0 kq1CLIMCO2xamZ1OsvR6CPM7r0m+Cnj86qWIxDm2uJEm0IY= -----END CERTIFICATE-----Generated at Thu May 25 13:29:16 2023 by rpki-client on console-fra.rpki-client.org