$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa File: d412494b-0d71-3291-9c4a-412759c45e5f.roa (raw, json) Hash identifier: KRjWZJdwjYl7C3TxZ8qs+GHhH2AmLPrf5B6QKKIAsEk= Subject key identifier: 16:FA:C6:FB:46:64:39:3D:1F:42:B2:2C:E4:96:A6:3B:66:A3:06:76 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F432858452C1D49430F6F67FB25D07900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa Signing time: Mon 11 Mar 2024 13:00:31 +0000 ROA not before: Mon 11 Mar 2024 13:00:31 +0000 ROA not after: Sun 09 Jun 2024 13:00:31 +0000 asID: 21859 IP address blocks: 108.165.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2c:1d:49:43:0f:6f:67:fb:25:d0:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 11 13:00:31 2024 GMT Not After : Jun 9 13:00:31 2024 GMT Subject: CN=49705f74-077b-46a4-a126-2a0505f99403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:cd:3f:c5:9d:c8:4e:fc:70:9d:76:12:b9: 4b:4e:49:53:ce:d8:00:b7:e7:d3:fc:99:41:6d:86: 6f:57:2b:45:47:7a:46:07:ad:9c:e5:e1:df:0b:75: 34:0f:97:71:ac:86:ca:48:1d:2f:d8:fe:bc:0b:3c: d3:2b:51:19:9d:e0:fc:68:d8:5a:70:a5:45:69:fe: f0:90:50:9f:06:21:d2:b1:00:e3:d1:d6:7f:3d:31: 3d:a2:4a:70:3a:a4:14:d7:91:8d:33:0a:4d:fd:f1: 88:87:78:02:ce:37:8e:c4:9b:aa:26:2f:a4:6e:18: e7:a4:f8:3d:73:10:40:5b:bb:fe:2a:25:ea:c1:2c: 09:d1:97:bd:1b:82:2e:0e:65:9a:30:53:21:76:90: e2:29:1c:d5:a3:57:a3:d7:f6:d9:4d:c3:e6:c9:8c: d7:f5:93:60:da:25:c6:80:3c:61:e3:95:94:96:5b: 3a:37:6d:f1:63:8e:2c:26:00:a8:e1:95:e4:e8:29: 7e:cc:05:e3:b6:16:75:13:65:d3:77:93:6e:ac:93: 2d:f1:82:a4:be:9b:ec:7d:6d:95:92:22:83:ce:c4: ff:b0:fb:8a:fb:be:53:18:41:98:d0:7e:c5:f0:d5: 5f:23:12:be:15:bb:b4:61:dc:ae:79:3b:3e:14:fc: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:C6:FB:46:64:39:3D:1F:42:B2:2C:E4:96:A6:3B:66:A3:06:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e1:b8:fd:25:76:d7:bc:f3:c2:be:6f:fd:67:cd:2f:6c:a7: 19:4a:ec:3c:5b:71:7a:27:99:e8:f8:d2:2a:b3:d6:b8:1b:8e: e0:c5:e3:77:e5:dc:ff:cc:d5:f2:f7:17:6f:7d:23:09:4b:cc: c6:e6:74:55:16:bd:2c:44:54:47:a0:58:ae:a3:64:03:74:28: 49:da:32:e2:5a:1f:0f:9c:ee:af:f9:d9:74:83:00:3d:a3:8e: b2:2b:a3:03:ce:d7:72:05:e4:14:14:30:dc:2c:71:71:19:f2: 77:aa:57:81:33:dc:d7:40:c8:56:2c:d7:24:cb:6d:49:c2:cf: 21:90:e7:be:c6:62:7e:2b:30:69:04:af:56:80:17:bc:8c:8c: 7a:a3:58:9b:59:9f:45:81:9d:d5:d4:44:8a:c9:2f:fd:ff:97: a8:23:1a:97:4b:da:f9:11:93:d8:ba:1e:ef:03:c3:cc:0d:2b: b9:f5:22:17:52:13:1a:0d:5e:05:f3:fb:b5:ab:27:d5:d4:28: b9:b8:91:81:7e:f9:7c:91:ad:9f:3b:3e:8a:37:94:8b:a9:55: 82:96:cc:a3:2f:e6:88:b2:f3:82:e2:57:9b:e0:66:38:bf:ad: 3e:fc:7f:87:2a:d2:49:e4:36:7d:03:92:dc:ad:ca:2d:25:6e: 99:ee:92:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUsHUlDD29n+yXQeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDMxMTEzMDAzMVoXDTI0MDYwOTEzMDAzMVowLzEtMCsGA1UEAxMk NDk3MDVmNzQtMDc3Yi00NmE0LWExMjYtMmEwNTA1Zjk5NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6nNP8WdyE78cJ12ErlLTklTztgAt+fT/JlB bYZvVytFR3pGB62c5eHfC3U0D5dxrIbKSB0v2P68CzzTK1EZneD8aNhacKVFaf7w kFCfBiHSsQDj0dZ/PTE9okpwOqQU15GNMwpN/fGIh3gCzjeOxJuqJi+kbhjnpPg9 cxBAW7v+KiXqwSwJ0Ze9G4IuDmWaMFMhdpDiKRzVo1ej1/bZTcPmyYzX9ZNg2iXG gDxh45WUlls6N23xY44sJgCo4ZXk6Cl+zAXjthZ1E2XTd5NurJMt8YKkvpvsfW2V kiKDzsT/sPuK+75TGEGY0H7F8NVfIxK+Fbu0YdyueTs+FPyelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb6xvtGZDk9H0KyLOSWpjtmowZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDQxMjQ5NGItMGQ3MS0z MjkxLTljNGEtNDEyNzU5YzQ1ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADThuP0ldte888K+b/1nzS9spxlK7DxbcXonmej40iqz1rgbjuDF43fl 3P/M1fL3F299IwlLzMbmdFUWvSxEVEegWK6jZAN0KEnaMuJaHw+c7q/52XSDAD2j jrIrowPO13IF5BQUMNwscXEZ8neqV4Ez3NdAyFYs1yTLbUnCzyGQ577GYn4rMGkE r1aAF7yMjHqjWJtZn0WBndXURIrJL/3/l6gjGpdL2vkRk9i6Hu8Dw8wNK7n1IhdS ExoNXgXz+7WrJ9XUKLm4kYF++XyRrZ87Poo3lIupVYKWzKMv5oiy84LiV5vgZji/ rT78f4cq0knkNn0Dktytyi0lbpnukuU= -----END CERTIFICATE-----Generated at Thu May 2 17:32:55 2024 by rpki-client on console-ams.rpki-client.org