$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa File: 4fa1c770-c015-3149-af43-e2902ca5a962.roa (raw, json) Hash identifier: UHjsXxFeOjnXqOqFuf3mQrLdtvgWpDkLtNlAhCk5pYs= Subject key identifier: 5B:72:5B:16:8A:48:74:F6:C6:47:62:C7:8E:40:42:4E:D0:E2:0E:6A Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858471775BFB0597AB77EE12BCA2C Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa Signing time: Tue 03 Sep 2024 13:00:42 +0000 ROA not before: Tue 03 Sep 2024 13:00:42 +0000 ROA not after: Mon 02 Dec 2024 14:00:42 +0000 asID: 13768 IP address blocks: 108.165.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:75:bf:b0:59:7a:b7:7e:e1:2b:ca:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 3 13:00:42 2024 GMT Not After : Dec 2 14:00:42 2024 GMT Subject: CN=4cb1c673-a88d-4aac-9e9a-3c1bbceb41c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:0d:42:54:ef:33:40:bb:4c:2a:94:72:e3: 48:69:8d:83:22:ed:81:70:84:bf:94:9f:8c:be:fc: c9:3b:c5:e3:b9:bf:02:7e:e5:ea:9c:83:f1:45:df: e6:c4:9a:91:18:b8:93:85:2d:03:45:90:98:2b:6b: a2:0c:12:5a:e2:ff:f9:1b:1a:aa:ca:ad:12:68:fe: cc:0f:c0:9b:d4:e5:c3:b7:f9:4e:51:f3:1e:08:2d: 7d:04:94:48:60:01:f2:c0:37:60:30:a9:f0:6c:1c: d6:30:95:53:e1:99:9e:71:1f:f4:ca:4a:ae:ce:91: 3c:43:35:ca:d1:16:d0:78:30:fa:4e:fa:21:fd:83: 05:76:d1:fa:ab:4f:a9:7b:c9:71:44:c1:67:dd:d8: 3f:94:26:35:18:f9:48:a2:0e:f0:38:da:19:7d:84: 92:8b:31:a3:b6:35:2a:95:05:8c:ea:e8:ae:29:a5: c9:09:70:94:95:fe:18:36:d7:ca:16:f0:d4:ba:2f: f4:56:d7:18:55:74:02:4a:04:68:0d:14:fd:af:b8: bf:1b:da:40:1a:1c:1d:60:74:41:cc:bd:1d:eb:a1: d6:aa:e9:84:6b:47:b9:32:08:2f:c3:65:5b:fa:c6: 73:dc:23:db:cf:45:27:74:f8:a9:e2:8b:6c:9a:d3: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:72:5B:16:8A:48:74:F6:C6:47:62:C7:8E:40:42:4E:D0:E2:0E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:84:b4:c2:17:83:1e:c6:5c:f9:70:ff:43:68:24:fb:b6:6d: 5e:f3:db:5f:7d:d1:2c:ed:dc:18:16:8e:b1:ea:a4:a3:45:6a: 1c:5b:65:64:1e:3b:a0:74:11:fe:18:17:87:0f:bf:69:bd:10: 2b:0f:b3:2b:3b:b4:8d:58:4c:5b:41:6e:af:7b:25:5e:d3:8a: 51:e5:14:41:cf:74:52:36:71:7c:75:7b:5d:54:79:3a:77:50: 53:09:cc:29:f5:23:b1:26:d4:cb:50:62:b3:6e:47:f6:51:c4: 9a:34:43:b7:80:fd:38:fb:fe:c9:68:ff:93:71:03:bd:f9:a2: e7:1a:c1:a3:fb:62:98:59:cd:99:1b:b8:9f:64:bf:db:6a:95: 4b:7d:94:6a:84:b8:a7:97:da:86:88:e2:e4:e8:cf:5f:f0:bb: a0:c8:90:d7:7a:e6:eb:4b:f9:8e:bd:2a:49:e6:7b:ad:3c:48: 57:53:55:59:5c:94:7a:e0:14:43:db:d2:30:0c:65:97:29:a5: b7:d4:4c:6f:27:49:72:60:65:b6:f2:3c:eb:73:ae:70:c1:53: 9b:63:54:ed:12:f1:8a:0c:22:ea:ed:6a:fa:fb:16:11:8a:ec: 01:d0:e1:12:b2:be:4d:20:f1:b0:10:86:ba:f4:20:3d:28:87: 64:31:98:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcXdb+wWXq3fuEryiwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDkwMzEzMDA0MloXDTI0MTIwMjE0MDA0MlowLzEtMCsGA1UEAxMk NGNiMWM2NzMtYTg4ZC00YWFjLTllOWEtM2MxYmJjZWI0MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK8NQlTvM0C7TCqUcuNIaY2DIu2BcIS/lJ+M vvzJO8Xjub8CfuXqnIPxRd/mxJqRGLiThS0DRZCYK2uiDBJa4v/5Gxqqyq0SaP7M D8Cb1OXDt/lOUfMeCC19BJRIYAHywDdgMKnwbBzWMJVT4ZmecR/0ykquzpE8QzXK 0RbQeDD6Tvoh/YMFdtH6q0+pe8lxRMFn3dg/lCY1GPlIog7wONoZfYSSizGjtjUq lQWM6uiuKaXJCXCUlf4YNtfKFvDUui/0VtcYVXQCSgRoDRT9r7i/G9pAGhwdYHRB zL0d66HWqumEa0e5Mggvw2Vb+sZz3CPbz0UndPip4otsmtMJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtyWxaKSHT2xkdix45AQk7Q4g5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGZhMWM3NzAtYzAxNS0z MTQ5LWFmNDMtZTI5MDJjYTVhOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmEtMIXgx7GXPlw/0NoJPu2bV7z21990Szt3BgWjrHqpKNFahxbZWQe O6B0Ef4YF4cPv2m9ECsPsys7tI1YTFtBbq97JV7TilHlFEHPdFI2cXx1e11UeTp3 UFMJzCn1I7Em1MtQYrNuR/ZRxJo0Q7eA/Tj7/slo/5NxA735oucawaP7YphZzZkb uJ9kv9tqlUt9lGqEuKeX2oaI4uToz1/wu6DIkNd65utL+Y69Kknme608SFdTVVlc lHrgFEPb0jAMZZcppbfUTG8nSXJgZbbyPOtzrnDBU5tjVO0S8YoMIurtavr7FhGK 7AHQ4RKyvk0g8bAQhrr0ID0oh2QxmJc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:18:01 2024 by rpki-client on console-fra.rpki-client.org