$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa File: d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa (raw, json) Hash identifier: FGAJtalCAOI/ZuWIWRR5EIE9V396y0ADlYTbJRL6Azs= Subject key identifier: 59:0E:45:35:EC:17:4F:EF:89:D4:61:F5:71:99:97:1A:6C:24:B4:03 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285847213B11C7361F51726CE0ED80 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 51964 IP address blocks: 66.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:11:c7:36:1f:51:72:6c:e0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=68b3c26d-5038-40e6-a18f-e6d04ea5e0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:bc:9a:f8:ce:ab:a0:79:96:c7:8e:66:79: 2d:bf:cc:39:bc:e8:31:5f:cd:bc:60:65:03:a9:d0: 69:0c:35:2a:30:8e:2b:dc:ac:15:cd:92:b2:fd:d8: 5a:7a:a4:da:32:c4:7f:ed:98:78:8b:4d:d6:8f:4b: b9:6e:2c:39:84:8d:b5:2e:3d:0e:66:e3:51:bb:49: 06:c6:ed:d3:e0:6a:b8:91:c1:1f:2c:5e:60:e2:cc: 92:e1:d1:1b:0b:ba:d7:1d:a2:b6:e5:d4:5c:99:eb: f0:dc:b9:43:e0:a4:ab:e9:d4:79:6c:ca:52:a1:53: 09:c7:61:ce:80:82:e2:07:42:85:3e:ba:8a:5e:21: 3d:d6:61:8d:90:87:e6:22:ef:53:36:0a:f6:75:dc: 10:21:70:90:aa:d5:de:14:70:42:4b:99:20:66:73: ba:6c:bb:4e:8c:bc:ef:29:19:31:74:54:df:0e:d4: 86:91:08:c7:c7:ed:69:dc:73:58:64:fe:72:b1:a0: d6:03:22:7d:49:f0:3a:3e:74:07:16:b5:fe:9f:35: 6d:50:95:ec:17:f5:08:8a:46:22:ef:d9:70:57:13: 3c:80:68:10:21:b7:17:fd:e0:f5:6a:a0:83:cc:b7: a7:6b:e3:52:45:3a:3a:6d:b3:04:bb:f1:a7:bc:69: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0E:45:35:EC:17:4F:EF:89:D4:61:F5:71:99:97:1A:6C:24:B4:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/d5a60f2f-ee67-34a2-a8fc-cbff25056f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2a:a1:e8:30:4e:70:9a:f7:7e:af:a1:a7:cc:3d:6a:18:31: 23:83:f0:2a:15:6b:67:e5:c0:69:b4:88:8c:7b:66:c4:c8:42: d8:9d:b3:cd:92:be:ae:5a:2e:33:64:fb:0e:c1:7f:02:43:a3: 85:bb:91:49:20:11:83:55:f8:39:b3:05:87:4a:b3:ae:fa:d0: de:97:e7:ce:d8:25:72:e5:a5:f6:ae:1a:ac:23:20:bb:a0:e4: d1:be:87:e4:6d:e9:16:99:27:1b:d0:11:01:53:e0:8e:d4:c0: 91:c9:f1:0a:43:83:ff:f2:7c:45:2b:25:b7:82:9c:fb:67:a4: bc:1b:7a:24:ac:e9:2e:1b:7e:28:b8:ff:ad:97:06:d7:d7:b1: 97:77:cb:67:9f:81:73:a6:5f:eb:5d:9d:a5:ad:7e:2a:e2:e2: 7d:0a:19:5e:f9:b2:87:70:46:bf:23:02:64:d5:06:ad:66:96: dd:17:8c:d9:4f:5f:29:93:9e:bd:40:91:79:2f:11:44:d8:3f: eb:90:e6:67:9c:56:2b:7f:a6:60:25:bf:e4:81:66:09:3b:dc: 31:3a:2c:8f:85:2f:d2:25:86:95:4d:49:84:e1:cc:c9:1e:cc: 45:49:e3:d0:64:42:f6:49:43:89:0f:fa:93:72:eb:7a:f7:cb: e6:b3:fa:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOxHHNh9Rcmzg7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk NjhiM2MyNmQtNTAzOC00MGU2LWExOGYtZTZkMDRlYTVlMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyi8mvjOq6B5lseOZnktv8w5vOgxX828YGUD qdBpDDUqMI4r3KwVzZKy/dhaeqTaMsR/7Zh4i03Wj0u5biw5hI21Lj0OZuNRu0kG xu3T4Gq4kcEfLF5g4syS4dEbC7rXHaK25dRcmevw3LlD4KSr6dR5bMpSoVMJx2HO gILiB0KFPrqKXiE91mGNkIfmIu9TNgr2ddwQIXCQqtXeFHBCS5kgZnO6bLtOjLzv KRkxdFTfDtSGkQjHx+1p3HNYZP5ysaDWAyJ9SfA6PnQHFrX+nzVtUJXsF/UIikYi 79lwVxM8gGgQIbcX/eD1aqCDzLena+NSRTo6bbMEu/GnvGkiuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkORTXsF0/vidRh9XGZlxpsJLQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZDVhNjBmMmYtZWU2Ny0z NGEyLWE4ZmMtY2JmZjI1MDU2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYqoegwTnCa936voafMPWoYMSOD8CoVa2flwGm0iIx7ZsTIQtids82S vq5aLjNk+w7BfwJDo4W7kUkgEYNV+DmzBYdKs6760N6X587YJXLlpfauGqwjILug 5NG+h+Rt6RaZJxvQEQFT4I7UwJHJ8QpDg//yfEUrJbeCnPtnpLwbeiSs6S4bfii4 /62XBtfXsZd3y2efgXOmX+tdnaWtfiri4n0KGV75sodwRr8jAmTVBq1mlt0XjNlP XymTnr1AkXkvEUTYP+uQ5mecVit/pmAlv+SBZgk73DE6LI+FL9IlhpVNSYThzMke zEVJ49BkQvZJQ4kP+pNy63r3y+az+ts= -----END CERTIFICATE-----Generated at Mon Nov 25 01:42:24 2024 by rpki-client on console-fra.rpki-client.org