$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa File: 66cb728c-d2d4-30fc-9ad1-2039318ab524.roa (raw, json) Hash identifier: JjyioRDaMyCzOicZ5br2WPveyF6RzE0615zHnzpawC4= Subject key identifier: 34:F8:25:8F:49:43:E8:60:31:F0:99:B1:5E:CD:78:9A:41:EF:B8:E2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858475EA62F741AA7C81A6CD3BE40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 20940 IP address blocks: 165.254.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:2f:74:1a:a7:c8:1a:6c:d3:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=1a2ad420-94f1-4953-abf2-de4e0bb06e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:1e:45:fe:80:2c:5a:54:cd:88:e9:e4:93: 01:07:e0:45:93:8c:85:bc:01:d1:b6:ed:13:bb:a3: 9f:46:ef:c0:79:f1:1f:f4:2b:de:a3:ce:fa:30:c7: b6:29:fb:fa:34:cf:51:77:a3:20:87:5f:6a:0e:39: fc:09:8c:cc:6c:1c:fa:c8:44:25:f2:3c:c8:47:ea: cc:d6:3e:1e:32:f7:72:56:c3:0c:8b:01:2a:ba:3a: 69:6e:ed:5d:45:bb:dd:c8:bd:85:e4:5f:47:14:21: 12:23:ac:fd:e6:4a:5b:26:66:d3:a8:a4:60:9b:61: 75:01:25:5a:b4:32:a8:9a:7d:48:0d:34:31:eb:33: db:25:a4:53:3b:7d:6e:bd:b7:4d:f4:f7:e1:ea:c4: d6:81:c4:8b:a0:f5:69:d5:01:2f:ea:f1:cc:c3:62: 44:c5:d6:50:c7:f4:0a:12:22:78:4f:7f:e2:85:ef: 1b:49:eb:8e:4a:8e:e7:ab:9e:b4:96:a6:00:52:c8: cb:51:83:52:76:ea:0a:f7:2b:f0:66:85:90:dc:74: c8:5b:ce:06:ab:81:19:99:1c:c4:22:0b:8d:e5:ac: d0:e3:5a:4a:36:84:d2:d5:cf:6c:cb:0a:e2:b6:96: 4d:e3:c4:aa:b6:d7:cb:ec:31:02:62:c7:41:b0:f2: c3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:25:8F:49:43:E8:60:31:F0:99:B1:5E:CD:78:9A:41:EF:B8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66cb728c-d2d4-30fc-9ad1-2039318ab524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:69:39:a3:34:e6:94:b2:0e:1d:da:5a:9e:3f:8a:d7:6e:c9: 79:cf:df:c3:c1:38:60:5d:77:99:8e:aa:b3:ee:9c:a8:14:b3: 70:f4:e9:71:01:f2:16:2e:59:ab:f7:d2:f6:53:d6:91:a4:b2: 7d:46:23:c0:44:27:96:95:d1:66:f4:83:2a:a4:fe:36:85:d3: 3a:04:be:5d:03:fe:56:72:12:94:82:6f:d2:7e:43:de:f7:77: 44:61:aa:bb:fb:25:02:c3:6b:0c:cd:95:08:61:0d:6e:c5:57: 6e:f9:d4:1e:97:5e:4d:0c:70:c7:cc:b3:4d:ae:6f:7c:d5:30: 1d:d5:65:c3:cb:81:07:62:01:d3:ab:cb:08:7d:81:ca:46:02: 32:c4:c4:12:32:4b:24:16:e3:6a:13:44:83:27:4c:c7:c0:b7: 72:a8:dc:4f:bc:f1:8f:9e:c6:80:48:e1:68:70:e7:78:ab:8e: da:7b:2b:f2:1e:d6:15:46:03:86:f1:f0:0a:58:61:17:68:dd: 58:4e:b8:b0:e9:d1:db:45:a0:83:f9:c7:a7:ca:9a:0e:64:87: 2d:46:11:fc:20:8d:c8:de:52:54:e9:bd:55:46:97:36:90:2d: 53:e0:ad:bd:c4:e7:46:3d:e9:5e:49:ae:06:80:04:a9:d2:d5: 32:72:cb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepi90GqfIGmzTvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk MWEyYWQ0MjAtOTRmMS00OTUzLWFiZjItZGU0ZTBiYjA2ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGceRf6ALFpUzYjp5JMBB+BFk4yFvAHRtu0T u6OfRu/AefEf9Cveo876MMe2Kfv6NM9Rd6Mgh19qDjn8CYzMbBz6yEQl8jzIR+rM 1j4eMvdyVsMMiwEqujppbu1dRbvdyL2F5F9HFCESI6z95kpbJmbTqKRgm2F1ASVa tDKomn1IDTQx6zPbJaRTO31uvbdN9Pfh6sTWgcSLoPVp1QEv6vHMw2JExdZQx/QK EiJ4T3/ihe8bSeuOSo7nq560lqYAUsjLUYNSduoK9yvwZoWQ3HTIW84Gq4EZmRzE IguN5azQ41pKNoTS1c9sywritpZN48SqttfL7DECYsdBsPLDjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT4JY9JQ+hgMfCZsV7NeJpB77jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZjYjcyOGMtZDJkNC0z MGZjLTlhZDEtMjAzOTMxOGFiNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFpOaM05pSyDh3aWp4/itduyXnP38PBOGBdd5mOqrPunKgUs3D06XEB 8hYuWav30vZT1pGksn1GI8BEJ5aV0Wb0gyqk/jaF0zoEvl0D/lZyEpSCb9J+Q973 d0Rhqrv7JQLDawzNlQhhDW7FV2751B6XXk0McMfMs02ub3zVMB3VZcPLgQdiAdOr ywh9gcpGAjLExBIySyQW42oTRIMnTMfAt3Ko3E+88Y+exoBI4Whw53irjtp7K/Ie 1hVGA4bx8ApYYRdo3VhOuLDp0dtFoIP5x6fKmg5khy1GEfwgjcjeUlTpvVVGlzaQ LVPgrb3E50Y96V5JrgaABKnS1TJyy5k= -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:12 2024 by rpki-client on console-ams.rpki-client.org