$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa File: 4fa1c770-c015-3149-af43-e2902ca5a962.roa (raw, json) Hash identifier: 4R9MMF4EUkCLnVVnvtZwtVyAKc9zFSiQYez5qm4qL44= Subject key identifier: 40:75:74:CD:5D:8A:DD:7A:1C:CC:9A:01:3C:15:B3:D0:FD:1A:3A:20 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584558C83E8272BC3919FF6EAE80 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa Signing time: Wed 27 Mar 2024 13:00:35 +0000 ROA not before: Wed 27 Mar 2024 13:00:35 +0000 ROA not after: Tue 25 Jun 2024 13:00:35 +0000 asID: 13768 IP address blocks: 108.165.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:58:c8:3e:82:72:bc:39:19:ff:6e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 27 13:00:35 2024 GMT Not After : Jun 25 13:00:35 2024 GMT Subject: CN=6584aadd-a700-48a5-a0bf-665fbc822a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:b9:2c:a3:00:36:09:59:65:37:06:f4:41: d0:64:97:f4:d2:39:9e:50:99:21:63:86:c4:d8:27: 73:62:00:c7:08:d1:54:2e:22:1a:38:2a:f0:11:3a: 38:ba:fc:30:87:36:cc:d7:54:9a:64:1f:d1:38:24: 45:ec:ba:ce:48:ec:55:d4:04:5a:fc:62:9e:9c:6a: 0f:1d:45:6f:7a:b0:d9:a8:b7:2d:be:47:31:47:82: b8:50:85:c1:b5:6f:a1:df:ef:1d:55:21:a0:a5:4a: 4f:43:c7:0f:f7:49:32:35:9b:5f:18:1c:20:af:df: 9d:cd:a9:89:3e:7a:b9:fb:f0:0f:1c:16:55:15:19: 51:27:bb:19:8b:64:12:30:78:70:c2:8e:27:f6:ff: b0:18:40:53:2c:cf:fc:de:58:1e:2e:6a:23:45:2c: 24:14:66:d3:09:71:b8:95:74:6d:a5:56:30:1a:2a: f9:56:a6:2e:a7:d4:86:41:f0:98:8e:fe:a9:fe:60: 2e:6a:7f:d6:f2:db:05:d0:61:51:58:66:4c:59:3d: f2:05:52:ae:72:8c:f0:c1:6d:a2:ac:fe:1b:7b:41: 0a:9e:7e:dc:29:66:e2:b8:51:0b:a6:54:92:d6:83: a6:36:1d:a4:49:1a:95:32:49:37:00:5f:56:d0:51: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:75:74:CD:5D:8A:DD:7A:1C:CC:9A:01:3C:15:B3:D0:FD:1A:3A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:bb:c5:a3:61:c0:ae:e8:b2:2a:0e:62:87:cd:4b:0a:51:1f: 81:e2:23:40:7f:8a:3b:48:b0:41:ac:2a:b5:01:6b:52:82:56: 70:88:1c:90:1d:dc:52:fe:32:b4:73:fe:ff:7f:5e:73:e8:b5: ff:03:c6:15:d2:13:d9:6c:1c:f9:e3:7e:34:f2:92:f6:e5:e7: c2:80:44:4e:9b:80:d5:5e:af:08:f5:fd:c9:64:ee:87:25:ee: e9:48:6c:a4:dc:f3:e3:b5:15:83:21:29:d3:03:24:13:61:cb: a4:f5:ee:9a:ed:d7:99:7a:f9:09:d5:06:9f:f5:10:d5:40:25: f2:0c:a8:fb:49:52:72:9f:65:77:eb:41:14:39:08:88:af:6b: e4:5d:dd:47:b8:fe:93:c2:0c:1d:ec:6e:3c:67:93:75:02:53: 05:1e:d0:88:49:ba:0a:f0:fe:b1:1e:f8:54:b1:03:45:49:14: d4:37:7a:64:6c:d1:bb:55:57:e1:3e:8c:ee:59:ee:ea:01:d5: 21:a6:27:4c:5e:89:4d:ca:26:c2:cd:d5:4f:b5:1b:9e:f0:1b: 30:17:4e:27:f6:10:a6:ed:6d:1a:81:52:84:d9:14:1b:be:99: a7:10:70:a7:a0:26:a8:25:40:06:3d:5d:24:d5:96:d1:49:98: ed:94:01:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVYyD6Ccrw5Gf9uroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDMyNzEzMDAzNVoXDTI0MDYyNTEzMDAzNVowLzEtMCsGA1UEAxMk NjU4NGFhZGQtYTcwMC00OGE1LWEwYmYtNjY1ZmJjODIyYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1G5LKMANglZZTcG9EHQZJf00jmeUJkhY4bE 2CdzYgDHCNFULiIaOCrwETo4uvwwhzbM11SaZB/ROCRF7LrOSOxV1ARa/GKenGoP HUVverDZqLctvkcxR4K4UIXBtW+h3+8dVSGgpUpPQ8cP90kyNZtfGBwgr9+dzamJ Pnq5+/APHBZVFRlRJ7sZi2QSMHhwwo4n9v+wGEBTLM/83lgeLmojRSwkFGbTCXG4 lXRtpVYwGir5VqYup9SGQfCYjv6p/mAuan/W8tsF0GFRWGZMWT3yBVKucozwwW2i rP4be0EKnn7cKWbiuFELplSS1oOmNh2kSRqVMkk3AF9W0FGh4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB1dM1dit16HMyaATwVs9D9GjogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGZhMWM3NzAtYzAxNS0z MTQ5LWFmNDMtZTI5MDJjYTVhOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC27xaNhwK7osioOYofNSwpRH4HiI0B/ijtIsEGsKrUBa1KCVnCIHJAd 3FL+MrRz/v9/XnPotf8DxhXSE9lsHPnjfjTykvbl58KARE6bgNVerwj1/clk7ocl 7ulIbKTc8+O1FYMhKdMDJBNhy6T17prt15l6+QnVBp/1ENVAJfIMqPtJUnKfZXfr QRQ5CIiva+Rd3Ue4/pPCDB3sbjxnk3UCUwUe0IhJugrw/rEe+FSxA0VJFNQ3emRs 0btVV+E+jO5Z7uoB1SGmJ0xeiU3KJsLN1U+1G57wGzAXTif2EKbtbRqBUoTZFBu+ macQcKegJqglQAY9XSTVltFJmO2UATE= -----END CERTIFICATE-----Generated at Sat May 4 02:55:47 2024 by rpki-client on console-fra.rpki-client.org