$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa File: faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa (raw, json) Hash identifier: UBzkc/XrWcqSiJ/FSN2SDqQZLPjLrucd4RoHY8gnzCw= Subject key identifier: 9C:27:B0:F9:1E:9C:42:7A:AE:1A:A4:23:AD:6A:7E:18:84:E7:2E:AA Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285847213B1AF764DA3440B7C18200 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa Signing time: Sat 07 Sep 2024 01:00:31 +0000 ROA not before: Sat 07 Sep 2024 01:00:31 +0000 ROA not after: Fri 06 Dec 2024 02:00:31 +0000 asID: 5511 IP address blocks: 66.112.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:3b:1a:f7:64:da:34:40:b7:c1:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Sep 7 01:00:31 2024 GMT Not After : Dec 6 02:00:31 2024 GMT Subject: CN=df745e68-7e1c-4509-8848-5d59ceddd562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:79:1f:4d:f4:f7:09:e3:86:62:35:d6:d0: 29:27:49:4d:2e:69:d3:1d:15:f1:0f:67:d5:10:60: 7f:4e:e9:f2:e7:ed:b9:ac:b7:c7:39:78:14:2e:75: e9:49:a3:50:d3:50:cb:25:74:37:2d:f8:14:15:49: 96:b0:e1:40:94:59:21:17:64:89:66:00:e7:3c:63: 78:f1:ab:15:2b:1d:8a:84:8d:3e:80:43:f3:42:37: 8d:d2:23:99:08:c1:78:47:49:8e:a2:42:e5:bb:95: 44:09:d8:18:ca:c0:90:e4:df:03:5c:8f:38:32:f6: 62:2f:31:af:ac:77:1a:c5:93:9e:52:cc:0c:64:61: 2d:f9:a6:4e:5d:cb:9a:7e:ac:6f:85:75:cf:4e:92: 56:9d:bd:ee:b6:ea:98:78:a9:11:56:1b:86:50:b5: d3:cd:1f:11:ac:64:d0:a5:41:e9:9f:f3:68:67:12: 5d:bd:4f:66:31:81:ad:40:0f:19:63:d3:df:ba:05: 6d:56:17:66:59:55:cf:04:b0:ee:87:fd:2f:79:26: 0c:f9:9f:be:71:72:fa:0e:6b:e3:b1:dc:9b:32:01: ce:4f:bf:fa:56:eb:83:ba:3a:3c:b9:7a:eb:9c:b3: 0f:36:38:2d:b9:ce:9a:8e:bd:1c:01:96:aa:fa:75: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:B0:F9:1E:9C:42:7A:AE:1A:A4:23:AD:6A:7E:18:84:E7:2E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/faaf9488-75a7-3612-b5b6-a65a9e4f6a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 66.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:94:6a:4b:29:31:ca:c1:95:48:02:4d:5a:35:00:1e:8d:56: ab:16:2b:37:1d:42:d7:ed:55:8e:f1:14:3f:4f:96:1c:c3:ba: 3a:ce:94:f7:c0:d2:37:0d:bd:20:38:da:0e:c4:8a:41:80:78: 00:69:b4:de:76:ec:c0:d4:74:bc:a0:82:a9:1c:45:ab:1e:77: b3:e5:8b:a0:ac:a7:0d:ef:c8:da:e3:8f:d2:e7:80:31:44:63: fb:89:5b:f7:34:8c:c4:fb:5a:72:94:ce:70:b0:db:61:32:1a: 91:bd:be:97:0c:fa:7c:47:2d:43:14:94:b5:45:3e:0f:c1:c0: 55:2e:89:7d:32:2d:29:b6:d9:07:3a:06:4f:be:5e:6f:9c:18: 96:ad:14:7d:b3:86:0e:2f:c5:3c:30:31:85:1c:d9:29:37:f9: cb:3d:f1:7b:7a:52:8e:ab:aa:2e:52:ee:07:dc:4b:fc:33:0f: 71:21:e2:09:5b:30:99:23:b7:ca:d4:5c:a3:b0:83:e5:d0:3f: 48:9b:0e:b3:a5:a3:5f:22:c3:d4:f1:da:21:bf:05:a8:dc:eb: d4:3b:ab:98:af:4d:fb:4f:df:4e:ea:50:41:f6:10:bb:13:40: 55:93:59:77:aa:5e:7b:e6:ce:33:06:45:b9:f7:d6:18:a7:61: b7:25:fa:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEchOxr3ZNo0QLfBggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI0MDkwNzAxMDAzMVoXDTI0MTIwNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGY3NDVlNjgtN2UxYy00NTA5LTg4NDgtNWQ1OWNlZGRkNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1h5H0309wnjhmI11tApJ0lNLmnTHRXxD2fV EGB/Tuny5+25rLfHOXgULnXpSaNQ01DLJXQ3LfgUFUmWsOFAlFkhF2SJZgDnPGN4 8asVKx2KhI0+gEPzQjeN0iOZCMF4R0mOokLlu5VECdgYysCQ5N8DXI84MvZiLzGv rHcaxZOeUswMZGEt+aZOXcuafqxvhXXPTpJWnb3utuqYeKkRVhuGULXTzR8RrGTQ pUHpn/NoZxJdvU9mMYGtQA8ZY9PfugVtVhdmWVXPBLDuh/0veSYM+Z++cXL6Dmvj sdybMgHOT7/6VuuDujo8uXrrnLMPNjgtuc6ajr0cAZaq+nWrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwnsPkenEJ6rhqkI61qfhiE5y6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvZmFhZjk0ODgtNzVhNy0z NjEyLWI1YjYtYTY1YTllNGY2YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQnCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyUakspMcrBlUgCTVo1AB6NVqsWKzcdQtftVY7xFD9PlhzDujrOlPfA 0jcNvSA42g7EikGAeABptN527MDUdLyggqkcRased7Pli6Cspw3vyNrjj9LngDFE Y/uJW/c0jMT7WnKUznCw22EyGpG9vpcM+nxHLUMUlLVFPg/BwFUuiX0yLSm22Qc6 Bk++Xm+cGJatFH2zhg4vxTwwMYUc2Sk3+cs98Xt6Uo6rqi5S7gfcS/wzD3Eh4glb MJkjt8rUXKOwg+XQP0ibDrOlo18iw9Tx2iG/Bajc69Q7q5ivTftP307qUEH2ELsT QFWTWXeqXnvmzjMGRbn31hinYbcl+rQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:02 2024 by rpki-client on console-fra.rpki-client.org