$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa File: a940db39-8b94-3a45-8f58-c597de6ac74a.roa (raw, json) Hash identifier: NS9A0dxqno8khhvB+cVNtDuG95H+dLCKlwbGBCcpua4= Subject key identifier: 24:55:A9:5B:51:17:A5:77:68:65:3A:56:B3:63:BB:8D:5B:05:18:20 Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Certificate serial: 010D0C9F43285842081828726E46BC0CCE0AC000 Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa Signing time: Sun 28 May 2023 13:00:19 +0000 ROA not before: Sun 28 May 2023 13:00:19 +0000 ROA not after: Sat 26 Aug 2023 13:00:19 +0000 asID: 399809 IP address blocks: 64.29.138.0/24 maxlen: 24 2607:f3a0:a00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 May 2023 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:08:18:28:72:6e:46:bc:0c:ce:0a:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73 Validity Not Before: May 28 13:00:19 2023 GMT Not After : Aug 26 13:00:19 2023 GMT Subject: CN=cd316eae-3953-412f-b525-539ad18c5d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:22:bc:d0:d2:ca:8f:9f:44:46:71:1e:1f: 07:07:52:8d:5e:0f:3a:17:0e:d3:7e:bd:cd:6e:3b: f4:cf:fa:35:f5:19:b2:2d:85:61:02:66:36:41:c5: eb:7b:82:26:54:81:a6:48:3d:a5:1e:72:9f:59:43: 0d:f1:66:77:35:d6:c9:87:9c:5b:af:f9:75:81:7a: 0f:37:c3:c8:b9:62:da:58:99:71:7d:14:e3:cb:c7: 6c:31:9c:19:2a:f4:dc:11:f1:a3:63:31:fa:d5:91: 4d:3c:b7:b0:76:9b:aa:bd:08:e6:04:ab:2e:bb:27: 07:9e:59:3e:1e:b2:2f:b4:42:b7:dc:06:6c:b1:ee: 49:68:0a:62:a0:af:3d:55:00:a4:a5:15:05:c0:3c: 55:9c:f6:f2:c3:31:a5:c6:46:60:af:80:6f:b7:49: 38:c4:e9:00:9d:da:4f:a6:8d:d4:79:cf:05:fb:2e: 81:24:11:0a:f9:3f:07:e6:8f:f6:f8:a1:5d:d2:a7: 18:40:fc:cf:40:09:4e:d0:2e:e5:1a:10:e1:da:46: 2a:2e:e5:fb:dc:2b:8f:ef:b7:a3:b2:55:8c:28:48: 92:33:71:b8:3f:be:a6:96:88:bd:03:66:d4:59:0d: e2:76:e9:e9:9b:9f:ab:b7:bc:8e:93:69:52:f4:c5: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:55:A9:5B:51:17:A5:77:68:65:3A:56:B3:63:BB:8D:5B:05:18:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl X509v3 Authority Key Identifier: keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer sbgp-ipAddrBlock: critical IPv4: 64.29.138.0/24 IPv6: 2607:f3a0:a00a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:06:98:11:12:a1:35:ec:34:5c:28:66:1e:65:0e:06:af:b3: f4:d4:9c:67:66:27:aa:ed:00:56:7b:7d:14:cb:88:ba:06:47: 10:f4:49:a9:f6:43:a9:df:a2:59:fc:a2:ed:27:30:7d:9b:da: 4f:6b:60:4a:6a:b8:6f:7b:fa:4f:78:0a:45:0d:bc:9d:d0:f9: 5d:95:5b:b9:0e:ee:ef:e2:1e:df:cd:01:c7:f7:6e:aa:7e:66: b5:ec:7a:bd:a7:59:6f:cf:78:f2:9a:0d:89:50:7a:86:35:63: 11:67:84:fe:36:fd:b6:ee:36:b2:99:fe:f4:15:e1:2e:0e:00: 4f:9e:84:26:92:ce:4d:35:94:61:8d:f6:9e:d1:48:8c:0f:73: 3b:e5:9a:91:45:e6:fe:75:d9:d9:f3:e6:80:76:c6:21:e4:36: 05:e7:ef:9f:17:63:e9:dd:63:d8:6e:88:89:a6:32:1b:9f:e1: 19:d8:5b:22:6d:52:f8:1c:a0:ad:c5:51:80:e2:28:b3:9b:f3: 25:1a:c8:32:83:b3:c2:cb:c1:3f:4f:d3:28:61:36:14:79:fc: 50:2f:3f:4f:d7:30:e8:71:88:bf:6f:cb:62:74:32:54:2d:83: 48:bd:5f:42:73:90:da:f9:43:38:e9:12:70:bd:6a:86:a3:08: e1:61:43:db -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEIIGChybka8DM4KwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0 YjczMB4XDTIzMDUyODEzMDAxOVoXDTIzMDgyNjEzMDAxOVowLzEtMCsGA1UEAxMk Y2QzMTZlYWUtMzk1My00MTJmLWI1MjUtNTM5YWQxOGM1ZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFYivNDSyo+fREZxHh8HB1KNXg86Fw7Tfr3N bjv0z/o19RmyLYVhAmY2QcXre4ImVIGmSD2lHnKfWUMN8WZ3NdbJh5xbr/l1gXoP N8PIuWLaWJlxfRTjy8dsMZwZKvTcEfGjYzH61ZFNPLewdpuqvQjmBKsuuycHnlk+ HrIvtEK33AZsse5JaApioK89VQCkpRUFwDxVnPbywzGlxkZgr4Bvt0k4xOkAndpP po3Uec8F+y6BJBEK+T8H5o/2+KFd0qcYQPzPQAlO0C7lGhDh2kYqLuX73CuP77ej slWMKEiSM3G4P76mloi9A2bUWQ3idunpm5+rt7yOk2lS9MXb5wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCRVqVtRF6V3aGU6VrNju41bBRggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3 MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvYTk0MGRiMzktOGI5NC0z YTQ1LThmNTgtYzU5N2RlNmFjNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2KMA8E AgACMAkDBwAmB/OgoAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMAaYERKhNew0XChmHmUOBq+z9NScZ2Yn qu0AVnt9FMuIugZHEPRJqfZDqd+iWfyi7ScwfZvaT2tgSmq4b3v6T3gKRQ28ndD5 XZVbuQ7u7+Ie380Bx/duqn5mtex6vadZb8948poNiVB6hjVjEWeE/jb9tu42spn+ 9BXhLg4AT56EJpLOTTWUYY32ntFIjA9zO+WakUXm/nXZ2fPmgHbGIeQ2Befvnxdj 6d1j2G6IiaYyG5/hGdhbIm1S+BygrcVRgOIos5vzJRrIMoOzwsvBP0/TKGE2FHn8 UC8/T9cw6HGIv2/LYnQyVC2DSL1fQnOQ2vlDOOkScL1qhqMI4WFD2w== -----END CERTIFICATE-----Generated at Sun May 28 13:48:49 2023 by rpki-client on console-ams.rpki-client.org