$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cecbdeed-8100-3f62-b3a9-d1c4d0397593.roa File: cecbdeed-8100-3f62-b3a9-d1c4d0397593.roa (raw, json) Hash identifier: vY77LF7SvmN8nR/ypfuDmfsf0fbVqXmjU/jEmI7DBVY= Subject key identifier: 2A:4D:B5:77:22:44:99:43:43:0E:7B:76:78:C6:8F:C1:6F:8C:5F:7D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F43285845D933CD957C42B6AD241530C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cecbdeed-8100-3f62-b3a9-d1c4d0397593.roa Signing time: Sun 12 May 2024 13:00:34 +0000 ROA not before: Sun 12 May 2024 13:00:34 +0000 ROA not after: Sat 10 Aug 2024 13:00:34 +0000 asID: 54288 IP address blocks: 66.220.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d9:33:cd:95:7c:42:b6:ad:24:15:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 12 13:00:34 2024 GMT Not After : Aug 10 13:00:34 2024 GMT Subject: CN=507885a9-8e54-4660-8960-58e1e6405d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:fe:4b:53:ef:64:49:91:36:c3:6a:3f:4f: 3e:51:f7:e4:c1:4c:a3:40:f4:b8:11:c7:85:cd:dc: 71:6f:09:1b:00:e1:74:2a:0e:cf:66:66:e0:5a:70: fb:85:c4:e1:25:01:ff:6b:cc:04:ab:aa:d4:98:7a: bb:04:24:da:8d:b6:9f:31:fb:65:2a:58:ac:b8:32: 2c:3e:03:d3:fc:69:a9:ba:15:85:3c:e3:fd:7c:07: 9e:df:ad:b3:22:b8:9b:88:e2:11:4f:ee:14:30:52: ad:16:05:53:96:7d:e6:22:a4:cc:3d:be:1e:dd:91: f0:05:97:d5:33:c9:b0:16:5d:70:4f:49:5c:df:f3: d9:e0:70:37:cb:cb:d2:5a:30:6c:e5:61:38:57:6c: 4b:b2:a6:5d:28:19:8d:58:ec:b5:4c:44:9e:34:a3: 5f:10:81:35:ab:6a:96:a6:6c:86:7f:20:50:45:89: 29:af:25:58:a7:a2:b2:6f:8f:e9:68:80:fc:21:e7: fe:15:f3:5f:5e:b9:46:99:9b:64:53:50:89:84:f5: 83:a9:12:e5:ed:72:04:7e:5e:ec:04:7e:11:4c:c3: 3b:61:19:e4:cb:7b:31:c0:c4:e6:f2:1a:07:d7:53: a8:e3:d8:17:bc:07:ba:09:d2:5d:5f:5d:83:53:a9: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4D:B5:77:22:44:99:43:43:0E:7B:76:78:C6:8F:C1:6F:8C:5F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cecbdeed-8100-3f62-b3a9-d1c4d0397593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.220.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:8e:57:18:41:dd:d0:8f:2c:b6:e4:12:64:c4:da:22:56:a7: aa:8c:c8:99:a8:c0:ed:76:f7:62:be:90:99:15:66:32:73:24: ad:07:2a:ae:38:40:53:88:23:f7:c3:c1:a9:d2:63:8f:dc:47: 04:c7:5e:80:54:e4:18:40:5a:ad:4c:f4:54:af:4a:23:d1:ec: e4:9e:38:54:43:97:13:23:e5:70:5a:36:df:03:8a:47:8e:6e: eb:bd:ab:2c:0e:65:66:11:64:54:61:53:e5:8c:51:dc:a2:32: b6:da:a2:62:7d:2b:89:a4:ea:b7:26:c2:3f:69:20:41:2e:c4: ae:c2:d7:e5:d9:e3:81:c0:7f:60:dd:5e:66:f0:c8:bb:c5:e4: 28:cb:87:50:86:66:50:55:38:e4:f0:94:8d:c0:93:a2:f3:1f: 3c:2c:4b:38:76:24:91:06:df:59:b5:07:8c:3e:e8:11:af:06: c5:e3:5e:1e:35:4d:4e:f3:fd:e2:b4:59:20:c2:92:bf:ce:49: f5:d8:07:d9:20:99:3b:bf:4a:30:9f:b6:34:7a:0f:3d:6a:41: 48:70:a6:83:99:43:ff:e5:e2:97:7f:85:e5:de:9c:71:1e:f9: 09:be:2c:dd:0a:4f:f9:69:66:72:44:16:47:62:78:32:cf:27: 3b:00:3e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM82VfEK2rSQVMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk NTA3ODg1YTktOGU1NC00NjYwLTg5NjAtNThlMWU2NDA1ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8j+S1PvZEmRNsNqP08+UffkwUyjQPS4EceF zdxxbwkbAOF0Kg7PZmbgWnD7hcThJQH/a8wEq6rUmHq7BCTajbafMftlKlisuDIs PgPT/GmpuhWFPOP9fAee362zIribiOIRT+4UMFKtFgVTln3mIqTMPb4e3ZHwBZfV M8mwFl1wT0lc3/PZ4HA3y8vSWjBs5WE4V2xLsqZdKBmNWOy1TESeNKNfEIE1q2qW pmyGfyBQRYkpryVYp6Kyb4/paID8Ief+FfNfXrlGmZtkU1CJhPWDqRLl7XIEfl7s BH4RTMM7YRnky3sxwMTm8hoH11Oo49gXvAe6CdJdX12DU6mjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpNtXciRJlDQw57dnjGj8FvjF99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2VjYmRlZWQtODEwMC0z ZjYyLWIzYTktZDFjNGQwMzk3NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKOVxhB3dCPLLbkEmTE2iJWp6qMyJmowO1292K+kJkVZjJzJK0HKq44 QFOII/fDwanSY4/cRwTHXoBU5BhAWq1M9FSvSiPR7OSeOFRDlxMj5XBaNt8DikeO buu9qywOZWYRZFRhU+WMUdyiMrbaomJ9K4mk6rcmwj9pIEEuxK7C1+XZ44HAf2Dd XmbwyLvF5CjLh1CGZlBVOOTwlI3Ak6LzHzwsSzh2JJEG31m1B4w+6BGvBsXjXh41 TU7z/eK0WSDCkr/OSfXYB9kgmTu/SjCftjR6Dz1qQUhwpoOZQ//l4pd/heXenHEe +Qm+LN0KT/lpZnJEFkdieDLPJzsAPng= -----END CERTIFICATE-----Generated at Mon May 20 01:52:20 2024 by rpki-client on console-ams.rpki-client.org