$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa File: d412494b-0d71-3291-9c4a-412759c45e5f.roa (raw, json) Hash identifier: 9sfv8oMpUVIdBGkiIPIWbjV7PQs0JCVcSzjLIO46Toc= Subject key identifier: 3C:EA:F8:26:90:DC:04:49:0E:0C:EC:D4:E7:0A:05:5D:56:C5:15:92 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F43285847CA3F873BC2F45489DE4D4800 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 21859 IP address blocks: 108.165.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:87:3b:c2:f4:54:89:de:4d:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=81367e2b-fee2-4877-8c13-38f12194fcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:ae:98:2e:68:9c:b9:68:72:74:c8:43:50: 8e:ca:18:ed:05:b0:58:ec:00:43:c4:bc:3f:09:da: 00:5b:99:8c:c0:66:47:57:f7:4a:dc:7c:34:66:ab: a9:b4:73:76:02:03:88:e0:50:06:c6:bb:b4:b1:df: 40:71:66:e3:47:58:41:57:ee:4b:83:19:b1:c3:87: be:4f:fd:81:d6:e1:3b:41:76:53:d5:8f:58:4d:92: 6b:f6:4b:fe:40:83:e0:cf:61:a2:98:c9:26:cb:c8: 1e:90:31:97:4a:9e:91:24:cc:c7:60:81:6d:f1:18: 08:59:68:24:7f:68:dd:86:d1:8e:a2:77:55:b3:33: 4c:27:80:30:d3:e2:06:5a:a7:21:a6:59:da:99:eb: 56:be:40:47:65:1e:49:bd:7b:0e:4e:24:91:8a:9e: ae:53:5a:c5:a4:4f:99:11:b3:64:c1:1a:a6:bc:e5: 39:5f:56:ae:36:fa:82:74:59:e3:59:ff:83:13:70: d9:6e:42:69:e4:a0:12:06:fb:1d:16:ee:0d:55:7e: 2a:52:71:78:01:75:0e:60:ad:f8:40:76:18:6c:e3: 4d:e8:36:df:62:db:98:04:bf:0c:19:bd:8e:87:af: 8b:33:6e:2d:67:81:89:1a:41:6c:98:6c:b1:c6:22: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:F8:26:90:DC:04:49:0E:0C:EC:D4:E7:0A:05:5D:56:C5:15:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d412494b-0d71-3291-9c4a-412759c45e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:70:6e:28:63:ab:c1:ba:3d:e4:b6:25:d3:17:92:a5:a7:ad: 49:85:3c:f4:5b:dc:5e:d1:f0:2a:07:6e:ee:e6:62:55:2d:11: fa:99:c4:a1:e2:46:b0:43:25:bc:4a:5c:1e:77:b1:01:6d:a7: 17:64:5d:75:f1:b6:fc:22:55:b5:32:0f:35:a7:7f:36:f6:80: 0b:1d:89:04:4a:f0:a7:19:b6:49:08:ce:2d:1b:9d:dc:ba:c4: 11:30:ca:34:c0:28:01:f5:55:94:92:d5:ee:ee:a8:9c:ab:fe: 4a:a3:47:5f:52:be:aa:d1:95:60:ac:16:97:bb:c8:7c:d2:e3: a9:ff:0d:92:11:1d:dc:12:7b:97:61:04:ba:7d:b2:6e:62:6a: e7:2d:d8:9a:be:04:da:90:b3:a6:f2:24:64:a7:a1:d2:af:a2: 96:dc:96:10:1f:37:6b:af:47:34:01:ca:22:c6:3d:60:95:fd: 47:ec:59:b8:64:17:e8:f8:89:06:82:09:ad:39:26:bf:65:b1: b9:cb:ec:a9:5f:3d:64:02:e3:73:54:32:78:b2:a1:31:5b:b3: 97:65:2d:a2:de:06:36:c3:57:02:62:62:59:cf:18:c4:f7:5f: 5c:7e:2b:dc:90:ed:24:26:0e:b4:2c:49:ca:d2:8b:5a:82:02: 57:e3:33:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4c7wvRUid5NSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODEzNjdlMmItZmVlMi00ODc3LThjMTMtMzhmMTIxOTRmY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnyumC5onLlocnTIQ1COyhjtBbBY7ABDxLw/ CdoAW5mMwGZHV/dK3Hw0ZquptHN2AgOI4FAGxru0sd9AcWbjR1hBV+5Lgxmxw4e+ T/2B1uE7QXZT1Y9YTZJr9kv+QIPgz2GimMkmy8gekDGXSp6RJMzHYIFt8RgIWWgk f2jdhtGOondVszNMJ4Aw0+IGWqchplnametWvkBHZR5JvXsOTiSRip6uU1rFpE+Z EbNkwRqmvOU5X1auNvqCdFnjWf+DE3DZbkJp5KASBvsdFu4NVX4qUnF4AXUOYK34 QHYYbONN6DbfYtuYBL8MGb2Oh6+LM24tZ4GJGkFsmGyxxiJUBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzq+CaQ3ARJDgzs1OcKBV1WxRWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZDQxMjQ5NGItMGQ3MS0z MjkxLTljNGEtNDEyNzU5YzQ1ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJwbihjq8G6PeS2JdMXkqWnrUmFPPRb3F7R8CoHbu7mYlUtEfqZxKHi RrBDJbxKXB53sQFtpxdkXXXxtvwiVbUyDzWnfzb2gAsdiQRK8KcZtkkIzi0bndy6 xBEwyjTAKAH1VZSS1e7uqJyr/kqjR19SvqrRlWCsFpe7yHzS46n/DZIRHdwSe5dh BLp9sm5iauct2Jq+BNqQs6byJGSnodKvopbclhAfN2uvRzQByiLGPWCV/UfsWbhk F+j4iQaCCa05Jr9lsbnL7KlfPWQC43NUMniyoTFbs5dlLaLeBjbDVwJiYlnPGMT3 X1x+K9yQ7SQmDrQsScrSi1qCAlfjMy4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:23 2024 by rpki-client on console-ams.rpki-client.org