$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa File: 8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa (raw, json) Hash identifier: l+kKdPkpBie+qAfjIgbSA/HXPxiCvweQFiNcMTVZO2s= Subject key identifier: 38:DD:77:A1:B8:86:67:DA:18:03:39:AF:5F:1B:52:FF:39:CE:E6:64 Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F43285847B96171D39B167A54900D9B80 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa Signing time: Thu 31 Oct 2024 13:00:41 +0000 ROA not before: Thu 31 Oct 2024 13:00:41 +0000 ROA not after: Wed 29 Jan 2025 14:00:41 +0000 asID: 19381 IP address blocks: 66.85.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:61:71:d3:9b:16:7a:54:90:0d:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Oct 31 13:00:41 2024 GMT Not After : Jan 29 14:00:41 2025 GMT Subject: CN=143e075c-d98d-474e-9598-cbee0636092e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b8:e6:67:52:25:36:c5:25:98:66:e5:01:81: f5:e8:5c:01:f1:90:57:76:b1:71:b3:f5:c4:3f:bc: 6a:e3:04:92:15:28:a5:2b:d5:55:63:6d:8f:aa:1c: b6:c1:47:51:da:70:06:9f:ce:c9:a0:59:7a:09:5d: e8:9c:d5:b8:c0:52:55:13:01:d1:0d:de:10:be:09: 37:73:44:dd:e5:f6:d9:25:f7:28:80:1a:75:15:03: 58:80:5b:64:f4:73:4a:59:98:83:37:a5:9d:73:f1: ae:19:47:e9:f4:a6:fe:3a:56:36:ca:33:b6:53:8d: 68:ea:28:87:a2:a3:44:7a:34:ef:8e:44:e5:22:16: 30:e5:b4:59:80:fb:10:cb:34:34:7e:20:57:cf:66: 2f:f5:6a:18:f4:cb:52:00:67:36:ed:19:c4:81:d0: 98:b5:4f:78:71:10:1b:be:c7:25:a4:4c:90:21:22: 31:89:32:6a:4a:b3:a7:86:72:b9:2c:cf:2b:e8:da: 99:fa:80:5d:a4:29:59:dd:52:a1:b7:87:56:7e:71: 82:29:75:7c:8d:3f:56:be:c3:91:8c:55:51:c5:cb: e7:4d:3e:7f:6e:6e:92:39:b6:81:d4:23:28:0e:fe: 54:15:64:7e:b4:d6:7d:2c:52:62:e3:91:7f:8e:fb: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DD:77:A1:B8:86:67:DA:18:03:39:AF:5F:1B:52:FF:39:CE:E6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8ee0b24d-9b96-33a9-bcde-3ba92396e636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv4: 66.85.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f2:f2:1b:40:da:74:b4:75:1d:33:dd:27:8b:82:ac:6c:c5: c0:99:0c:4e:1f:c3:50:3b:6b:9b:6d:30:52:10:06:bb:b5:47: d4:2f:62:8b:1f:c6:ec:16:92:11:ef:69:ae:3e:b4:03:1e:0e: 9f:94:3b:d1:5b:f7:7c:95:3e:52:80:20:62:bc:9e:5b:b1:fa: 0e:6a:bd:92:bd:52:c3:6e:b2:1d:25:b8:67:00:44:ee:3c:3c: 48:94:ad:22:fc:c6:00:62:f4:93:66:b6:79:0f:ae:1f:48:5f: 16:b1:e0:f1:98:6d:7e:9b:5a:24:8e:a9:28:48:93:c8:d1:a2: b9:e7:82:89:b5:e5:77:9e:2c:88:da:f6:b3:a1:4f:fa:40:1c: f3:97:a2:49:59:6f:99:a1:de:fc:32:82:3b:24:e7:f7:73:d7: 9e:82:19:63:a5:f3:b4:fd:84:33:db:90:ac:40:2b:a4:a3:0e: 39:6f:09:a5:5a:22:5e:4b:9f:0c:5b:85:9b:cd:f1:77:44:eb: a4:f1:79:cb:47:7d:1c:fd:a0:d1:12:9d:67:e6:3a:37:59:b9: 51:19:e1:d7:b8:d7:17:9e:0a:f1:d5:f0:4e:31:06:d4:a9:5b: 05:ee:74:ca:0d:53:c3:75:c5:a0:97:3d:f0:73:7f:0b:c6:eb: 49:71:8c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe5YXHTmxZ6VJANm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI0MTAzMTEzMDA0MVoXDTI1MDEyOTE0MDA0MVowLzEtMCsGA1UEAxMk MTQzZTA3NWMtZDk4ZC00NzRlLTk1OTgtY2JlZTA2MzYwOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bjmZ1IlNsUlmGblAYH16FwB8ZBXdrFxs/XE P7xq4wSSFSilK9VVY22Pqhy2wUdR2nAGn87JoFl6CV3onNW4wFJVEwHRDd4Qvgk3 c0Td5fbZJfcogBp1FQNYgFtk9HNKWZiDN6Wdc/GuGUfp9Kb+OlY2yjO2U41o6iiH oqNEejTvjkTlIhYw5bRZgPsQyzQ0fiBXz2Yv9WoY9MtSAGc27RnEgdCYtU94cRAb vsclpEyQISIxiTJqSrOnhnK5LM8r6NqZ+oBdpClZ3VKht4dWfnGCKXV8jT9WvsOR jFVRxcvnTT5/bm6SObaB1CMoDv5UFWR+tNZ9LFJi45F/jvtB1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjdd6G4hmfaGAM5r18bUv85zuZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvOGVlMGIyNGQtOWI5Ni0z M2E5LWJjZGUtM2JhOTIzOTZlNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLy8htA2nS0dR0z3SeLgqxsxcCZDE4fw1A7a5ttMFIQBru1R9QvYosf xuwWkhHvaa4+tAMeDp+UO9Fb93yVPlKAIGK8nlux+g5qvZK9UsNush0luGcARO48 PEiUrSL8xgBi9JNmtnkPrh9IXxax4PGYbX6bWiSOqShIk8jRornngom15XeeLIja 9rOhT/pAHPOXoklZb5mh3vwygjsk5/dz156CGWOl87T9hDPbkKxAK6SjDjlvCaVa Il5LnwxbhZvN8XdE66TxectHfRz9oNESnWfmOjdZuVEZ4de41xeeCvHV8E4xBtSp WwXudMoNU8N1xaCXPfBzfwvG60lxjFs= -----END CERTIFICATE-----Generated at Sun Nov 24 15:19:10 2024 by rpki-client on console-fra.rpki-client.org