$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/522cf3f1-9244-36ad-9226-a2eac4e3d654.roa File: 522cf3f1-9244-36ad-9226-a2eac4e3d654.roa (raw, json) Hash identifier: sRUF3255JofbrgT9fv5oq/t9RrKDDo3K0c3qXBupETc= Subject key identifier: B5:82:CB:96:C5:3F:F5:97:C4:1D:B0:F4:9E:26:CF:3A:B8:B4:BE:A1 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858474DE61ABFACDF72425626D3E0 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/522cf3f1-9244-36ad-9226-a2eac4e3d654.roa Signing time: Mon 23 Sep 2024 01:00:31 +0000 ROA not before: Mon 23 Sep 2024 01:00:31 +0000 ROA not after: Sun 22 Dec 2024 02:00:31 +0000 asID: 212238 IP address blocks: 108.165.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4d:e6:1a:bf:ac:df:72:42:56:26:d3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 23 01:00:31 2024 GMT Not After : Dec 22 02:00:31 2024 GMT Subject: CN=bb46a0a8-9064-4ec5-ad9e-efdba472f6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:fa:bb:15:9f:f7:21:d5:3b:08:83:4f:6b: e9:ea:f6:f9:3c:8d:27:ce:86:9e:3a:d2:92:f1:1a: b6:92:e4:3a:12:dc:75:d6:9c:21:a0:81:b6:69:6d: 49:e6:bd:ad:04:8d:a0:65:9d:03:ae:9b:54:0d:68: db:2e:2d:41:2f:62:f0:b6:7b:9f:db:bc:84:93:9c: a6:be:e3:91:81:ea:8c:b8:85:42:02:42:94:c5:f7: 9e:49:7b:22:74:af:87:99:6a:ea:dd:01:cc:bc:5a: 05:b7:b5:00:b4:a9:2f:40:15:b9:16:c5:2a:13:b8: 8f:0e:68:0c:90:33:fc:ef:ed:38:81:45:d3:33:58: 1c:be:c7:f1:96:bc:d4:bf:0c:ab:f5:06:b9:cc:b1: 9d:9b:97:b7:d7:dc:9a:21:50:97:d1:eb:3a:7b:70: 60:6a:c9:b0:3c:b0:23:16:12:8e:94:5c:06:75:02: 2d:0e:76:ce:19:f4:42:32:d7:e1:9f:a9:25:9c:77: a4:46:f5:96:62:39:7e:9f:a7:0e:cf:c4:62:8d:7a: 19:05:fe:5c:db:6f:da:ea:ee:20:65:0e:01:00:3a: 75:9a:6a:10:c5:79:a6:30:93:27:89:35:cf:e0:eb: 37:2a:f0:b1:b3:d9:19:e0:aa:9e:69:6f:e9:0e:32: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:82:CB:96:C5:3F:F5:97:C4:1D:B0:F4:9E:26:CF:3A:B8:B4:BE:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/522cf3f1-9244-36ad-9226-a2eac4e3d654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:17:21:f7:6c:fd:f5:12:51:e9:22:2c:5e:96:c4:98:c4:2a: 64:e0:7a:07:d4:3a:10:6b:6d:e6:7d:28:9b:c2:fd:35:0a:a0: 4f:e5:d3:d1:b4:3e:2d:70:de:a0:f4:64:ce:cb:93:bb:6d:3c: b3:5d:6e:3e:40:21:ec:ea:b2:74:5a:29:e0:9d:71:fb:20:b5: 22:88:67:42:1c:4b:8f:70:33:81:60:cc:55:1f:1d:af:4a:da: 1e:f2:c3:85:6f:b9:ae:d3:28:34:e0:81:fd:54:7a:3d:e5:5c: ff:70:20:80:40:ce:0c:03:07:ed:49:1f:3d:fa:56:a8:15:ca: 16:ac:e8:2c:29:ac:cb:4b:eb:82:75:24:8f:ad:86:b5:20:23: 55:34:20:3c:68:7d:41:5c:00:13:ef:10:e3:46:ce:b1:54:80: a0:6d:57:56:5e:2f:dd:57:36:d5:47:24:2d:00:16:01:a4:df: 7b:ef:71:ce:d4:e3:71:3b:af:ae:12:78:7c:d4:3c:6a:28:f7: cf:18:1d:9b:b5:8d:2f:d0:73:d1:ca:53:68:e9:48:1d:29:5e: 02:52:6e:43:11:a6:b9:6b:55:26:9c:83:c8:02:b1:88:dc:6c: bc:d5:26:21:00:c0:6a:20:b4:c8:90:dc:b2:cc:40:de:e0:2e: 7c:f5:10:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5hq/rN9yQlYm0+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk YmI0NmEwYTgtOTA2NC00ZWM1LWFkOWUtZWZkYmE0NzJmNmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j/6uxWf9yHVOwiDT2vp6vb5PI0nzoaeOtKS 8Rq2kuQ6Etx11pwhoIG2aW1J5r2tBI2gZZ0DrptUDWjbLi1BL2Lwtnuf27yEk5ym vuORgeqMuIVCAkKUxfeeSXsidK+HmWrq3QHMvFoFt7UAtKkvQBW5FsUqE7iPDmgM kDP87+04gUXTM1gcvsfxlrzUvwyr9Qa5zLGdm5e319yaIVCX0es6e3BgasmwPLAj FhKOlFwGdQItDnbOGfRCMtfhn6klnHekRvWWYjl+n6cOz8RijXoZBf5c22/a6u4g ZQ4BADp1mmoQxXmmMJMniTXP4Os3KvCxs9kZ4KqeaW/pDjJTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWCy5bFP/WXxB2w9J4mzzq4tL6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTIyY2YzZjEtOTI0NC0z NmFkLTkyMjYtYTJlYWM0ZTNkNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcXIfds/fUSUekiLF6WxJjEKmTgegfUOhBrbeZ9KJvC/TUKoE/l09G0 Pi1w3qD0ZM7Lk7ttPLNdbj5AIezqsnRaKeCdcfsgtSKIZ0IcS49wM4FgzFUfHa9K 2h7yw4Vvua7TKDTggf1Uej3lXP9wIIBAzgwDB+1JHz36VqgVyhas6CwprMtL64J1 JI+thrUgI1U0IDxofUFcABPvEONGzrFUgKBtV1ZeL91XNtVHJC0AFgGk33vvcc7U 43E7r64SeHzUPGoo988YHZu1jS/Qc9HKU2jpSB0pXgJSbkMRprlrVSacg8gCsYjc bLzVJiEAwGogtMiQ3LLMQN7gLnz1ELI= -----END CERTIFICATE-----Generated at Fri Nov 22 04:18:01 2024 by rpki-client on console-fra.rpki-client.org