$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa File: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (raw, json) Hash identifier: XFCE9s/bCWCzv0gmL4ApnWeMXEGg4sJ/9ktoELMLXo0= Subject key identifier: 3A:AA:DE:5A:80:57:78:C0:F6:F4:9B:F1:9D:8D:14:FA:90:42:44:01 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584795C15671F0AC6DECD44B3A68 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa Signing time: Fri 18 Oct 2024 18:44:57 +0000 ROA not before: Fri 18 Oct 2024 18:44:57 +0000 ROA not after: Thu 16 Jan 2025 19:44:57 +0000 asID: 46962 IP address blocks: 66.118.224.0/22 maxlen: 24 104.255.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:95:c1:56:71:f0:ac:6d:ec:d4:4b:3a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Oct 18 18:44:57 2024 GMT Not After : Jan 16 19:44:57 2025 GMT Subject: CN=90b2a6d7-e50b-484a-8e39-6731e00241fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:d0:a5:38:fe:86:40:fb:8d:11:32:ee:1e: bd:ce:dc:c9:d7:58:84:f8:02:5d:8a:1e:ca:d1:83: 06:b9:e7:5c:ad:f7:d8:f2:d0:05:01:72:51:c2:28: 1d:b1:4a:de:31:f7:6f:9f:8e:f1:53:fd:73:88:d0: 47:0f:e2:f4:55:37:d4:09:d3:2d:7a:d6:c3:a5:93: b2:16:14:82:80:05:85:62:10:3c:8d:e7:ca:2d:ba: 6d:04:c0:32:86:86:ec:3b:bb:b0:5b:26:7a:42:1b: 25:41:4f:ba:ec:84:e1:e6:8a:bc:2f:4e:0b:07:0a: 24:9c:12:ca:89:68:5e:fc:7d:ce:84:7f:f5:33:6a: bc:cf:c6:65:ec:38:32:fd:ca:33:6a:2f:78:6c:b3: 7e:58:d3:d9:6b:cb:49:94:c0:e9:8f:ea:90:cf:0b: e6:21:0d:5b:7f:b1:7a:61:3f:2a:8b:20:45:d0:58: 49:d3:52:69:8e:cb:7e:ce:e9:7f:63:5d:61:5a:70: 3c:0e:54:11:3c:6e:5a:36:9c:b5:6b:52:24:ad:7f: 7c:c6:e7:3b:39:f3:79:d9:90:f4:42:31:49:42:38: 2e:bd:41:9b:2e:4b:4b:ef:e5:d2:51:4a:4e:24:6d: a5:d9:1f:ec:a7:e9:32:94:dd:49:71:e4:84:97:a8: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AA:DE:5A:80:57:78:C0:F6:F4:9B:F1:9D:8D:14:FA:90:42:44:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 66.118.224.0/22 104.255.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:02:7d:8d:6c:39:a0:71:51:97:9d:96:6a:b7:60:1e:c4:24: 11:b3:80:c7:17:86:90:c5:a0:10:98:f1:8b:e1:86:bd:00:cd: 50:6e:53:72:c6:a9:a5:d6:7d:ad:00:f7:93:50:ac:95:a3:5a: 64:c2:3b:50:a2:66:3c:26:da:1f:67:64:8b:52:44:1f:64:78: 94:0d:97:14:12:66:fb:4a:04:e9:ea:07:63:52:b8:5c:97:69: 45:80:1c:10:16:e0:67:a6:b7:6d:21:a7:9c:96:a9:1c:db:ec: 24:76:af:ba:a2:fa:00:cb:14:d7:7d:6a:bf:a8:0a:71:34:45: 83:ff:46:2e:e6:40:51:2e:41:51:b7:93:fd:e0:52:06:12:0e: 3b:42:7e:2d:f4:24:8a:55:5b:34:14:6f:e4:92:27:db:f2:ed: 9e:31:b7:5b:84:b3:95:84:aa:b2:f4:84:6f:b3:7e:c9:92:09: 67:10:8f:18:8f:49:cc:94:4e:97:2e:fc:a9:3d:a1:d5:86:c0: 9a:a1:72:7a:c9:11:21:af:59:23:52:67:5d:f8:ea:2f:51:a9: af:ae:1d:32:e5:8f:58:73:aa:96:b7:f9:79:96:d7:94:66:e2: 0d:c3:15:72:e9:a8:f8:77:81:25:18:06:b9:3f:bd:c5:b0:9e: fe:8f:53:2d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEeVwVZx8Kxt7NRLOmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI0MTAxODE4NDQ1N1oXDTI1MDExNjE5NDQ1N1owLzEtMCsGA1UEAxMk OTBiMmE2ZDctZTUwYi00ODRhLThlMzktNjczMWUwMDI0MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvvQpTj+hkD7jREy7h69ztzJ11iE+AJdih7K 0YMGuedcrffY8tAFAXJRwigdsUreMfdvn47xU/1ziNBHD+L0VTfUCdMtetbDpZOy FhSCgAWFYhA8jefKLbptBMAyhobsO7uwWyZ6QhslQU+67ITh5oq8L04LBwoknBLK iWhe/H3OhH/1M2q8z8Zl7Dgy/cozai94bLN+WNPZa8tJlMDpj+qQzwvmIQ1bf7F6 YT8qiyBF0FhJ01Jpjst+zul/Y11hWnA8DlQRPG5aNpy1a1IkrX98xuc7OfN52ZD0 QjFJQjguvUGbLktL7+XSUUpOJG2l2R/sp+kylN1JceSEl6gPwQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDqq3lqAV3jA9vSb8Z2NFPqQQkQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjMwM2Q1NjYtYzIxZi0z MjQ0LThkNGMtNmQ4ZDMxNGM3OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQnbgAwQC aP+0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACQCfY1sOaBxUZedlmq3YB7EJBGzgMcXhpDFoBCY8Yvhhr0A zVBuU3LGqaXWfa0A95NQrJWjWmTCO1CiZjwm2h9nZItSRB9keJQNlxQSZvtKBOnq B2NSuFyXaUWAHBAW4Gemt20hp5yWqRzb7CR2r7qi+gDLFNd9ar+oCnE0RYP/Ri7m QFEuQVG3k/3gUgYSDjtCfi30JIpVWzQUb+SSJ9vy7Z4xt1uEs5WEqrL0hG+zfsmS CWcQjxiPScyUTpcu/Kk9odWGwJqhcnrJESGvWSNSZ1346i9Rqa+uHTLlj1hzqpa3 +XmW15Rm4g3DFXLpqPh3gSUYBrk/vcWwnv6PUy0= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:15 2024 by rpki-client on console-fra.rpki-client.org