$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de290d4e-58a9-374b-963f-17ccd577cb58.roa File: de290d4e-58a9-374b-963f-17ccd577cb58.roa (raw, json) Hash identifier: AH2F+thDpspiJVcwxTcRhV8Q1xW6DjF/CWj5SxIiG5I= Subject key identifier: BA:60:6D:40:EA:A8:23:1E:CA:60:3E:A1:67:58:3F:3B:94:73:D1:D7 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584554981DAAEBC66B86125C3200 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de290d4e-58a9-374b-963f-17ccd577cb58.roa Signing time: Tue 26 Mar 2024 01:00:25 +0000 ROA not before: Tue 26 Mar 2024 01:00:25 +0000 ROA not after: Mon 24 Jun 2024 01:00:25 +0000 asID: 200017 IP address blocks: 166.0.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:54:98:1d:aa:eb:c6:6b:86:12:5c:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Mar 26 01:00:25 2024 GMT Not After : Jun 24 01:00:25 2024 GMT Subject: CN=7f9ad8a2-d4f0-431b-9f52-636516229b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:72:78:1a:79:47:cf:c3:dd:80:56:f6:fd: 02:a1:35:02:b8:08:6e:70:21:7f:2e:b6:04:3a:67: 8b:94:f9:da:ff:29:18:af:5b:69:8a:46:b7:6a:39: 67:a3:b0:c8:8e:a7:f1:ee:4c:12:70:3c:e2:a4:88: 6c:f0:9e:74:f8:40:41:dd:e7:8f:54:57:e8:10:d2: b2:ce:f5:44:60:38:ee:50:ee:11:9a:19:9c:b4:98: 29:d0:f8:ae:85:ab:85:05:e8:5a:8f:97:12:a8:3c: a4:60:03:55:c3:80:dd:f8:2c:5b:51:50:6a:49:b8: 59:92:0f:a9:90:ec:4a:08:7a:ac:e6:0d:9a:e6:c5: 11:79:e0:e7:30:57:5a:23:06:be:9a:24:58:34:bc: 8b:c9:86:9b:4c:cb:bb:44:1e:ba:a1:38:63:cb:bd: 92:f5:f5:3d:53:a8:59:65:d7:2a:8c:42:54:22:a4: 3b:63:3f:cc:16:ec:57:49:0f:13:ba:30:c2:63:c7: b9:9a:71:74:36:e1:e3:ae:b0:44:f1:5e:0b:f9:1f: 19:a0:e4:49:77:28:af:de:7a:f7:d6:2b:4a:69:28: cc:6d:3f:57:e6:b9:19:b1:37:e1:30:8a:5d:42:ae: 5e:33:3d:95:5c:19:b0:93:1d:5a:c2:2b:7a:ff:e9: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:60:6D:40:EA:A8:23:1E:CA:60:3E:A1:67:58:3F:3B:94:73:D1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/de290d4e-58a9-374b-963f-17ccd577cb58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:87:3c:a0:dd:94:6f:8e:83:a2:1a:c2:dc:5c:cc:09:db:a6: a1:29:d8:e3:b6:33:86:c8:3b:63:2f:a1:44:4e:70:50:ea:82: 3d:c7:6b:3e:13:65:44:39:64:00:75:6a:2d:0c:d4:92:f9:38: aa:bb:5e:ff:29:0b:4b:29:06:96:66:4c:d0:94:23:e8:17:84: 47:f0:87:fa:f2:06:14:ab:5e:82:a4:2f:56:fc:17:c1:6b:e2: 3c:5d:7a:85:a6:0f:51:80:c9:f6:71:0f:ac:fb:ff:99:91:98: 97:9a:12:31:17:93:29:01:fb:26:be:e8:c8:86:de:fe:7e:a0: 8e:7f:a4:fd:c3:9e:c8:e0:5c:78:48:d7:0d:dd:6d:22:ad:4c: 8e:e6:cf:35:e8:41:94:ab:ad:2c:63:ff:31:92:7a:65:14:38: 3d:0f:0d:47:ec:0d:3e:7a:f0:3d:7a:f2:5d:cb:85:3b:92:dc: 91:a3:9c:12:9b:79:f0:7a:6d:cd:c8:13:5e:3e:85:b1:1b:cc: 2c:69:0a:16:93:48:4e:08:f9:a0:00:31:fc:67:db:9b:85:87: e6:dc:87:ca:51:89:2f:50:c0:44:81:8b:f8:02:da:66:cf:7f: 95:5a:04:54:4c:c5:91:6d:7c:a6:c9:f9:91:07:08:2e:74:60: c2:5f:c0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVUmB2q68ZrhhJcMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI0MDMyNjAxMDAyNVoXDTI0MDYyNDAxMDAyNVowLzEtMCsGA1UEAxMk N2Y5YWQ4YTItZDRmMC00MzFiLTlmNTItNjM2NTE2MjI5Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsVyeBp5R8/D3YBW9v0CoTUCuAhucCF/LrYE OmeLlPna/ykYr1tpika3ajlno7DIjqfx7kwScDzipIhs8J50+EBB3eePVFfoENKy zvVEYDjuUO4RmhmctJgp0PiuhauFBehaj5cSqDykYANVw4Dd+CxbUVBqSbhZkg+p kOxKCHqs5g2a5sUReeDnMFdaIwa+miRYNLyLyYabTMu7RB66oThjy72S9fU9U6hZ ZdcqjEJUIqQ7Yz/MFuxXSQ8TujDCY8e5mnF0NuHjrrBE8V4L+R8ZoORJdyiv3nr3 1itKaSjMbT9X5rkZsTfhMIpdQq5eMz2VXBmwkx1awit6/+n+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpgbUDqqCMeymA+oWdYPzuUc9HXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGUyOTBkNGUtNThhOS0z NzRiLTk2M2YtMTdjY2Q1NzdjYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiHPKDdlG+Og6IawtxczAnbpqEp2OO2M4bIO2MvoUROcFDqgj3Haz4T ZUQ5ZAB1ai0M1JL5OKq7Xv8pC0spBpZmTNCUI+gXhEfwh/ryBhSrXoKkL1b8F8Fr 4jxdeoWmD1GAyfZxD6z7/5mRmJeaEjEXkykB+ya+6MiG3v5+oI5/pP3DnsjgXHhI 1w3dbSKtTI7mzzXoQZSrrSxj/zGSemUUOD0PDUfsDT568D168l3LhTuS3JGjnBKb efB6bc3IE14+hbEbzCxpChaTSE4I+aAAMfxn25uFh+bch8pRiS9QwESBi/gC2mbP f5VaBFRMxZFtfKbJ+ZEHCC50YMJfwNg= -----END CERTIFICATE-----Generated at Fri May 3 21:45:47 2024 by rpki-client on console-fra.rpki-client.org