$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa File: ecff82b6-556f-3ccc-8045-cd50558517e5.roa (raw, json) Hash identifier: JsUCK1myjX5wh2MNsw85zD4qaxETyqoxyIVcbqdDwnY= Subject key identifier: B3:14:10:97:67:B3:DD:A6:08:B3:E1:8F:32:52:22:79:4E:89:9C:9D Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584790E662A1F6F0157F3E2D7180 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa Signing time: Thu 17 Oct 2024 01:00:32 +0000 ROA not before: Thu 17 Oct 2024 01:00:32 +0000 ROA not after: Wed 15 Jan 2025 02:00:32 +0000 asID: 14618 IP address blocks: 199.66.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:90:e6:62:a1:f6:f0:15:7f:3e:2d:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Oct 17 01:00:32 2024 GMT Not After : Jan 15 02:00:32 2025 GMT Subject: CN=deb28eb9-3dcd-4a7e-b5b5-6eacd4463bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:7c:52:79:ff:5f:c7:fe:f9:43:9a:f2:64: e8:9f:ce:b9:16:64:7f:bb:56:d9:0a:7d:ca:24:c0: d6:fc:08:93:43:1c:e3:f9:ae:ad:84:6e:35:3e:e5: 1d:b3:fe:98:cc:d0:46:d1:2a:6f:11:54:c5:2b:2e: 35:4c:1c:ff:a5:e3:cc:1e:39:96:5d:4c:e3:6c:d5: a0:d9:30:57:68:55:0a:63:fa:1e:d3:49:75:bc:db: ea:c4:1c:f7:5a:be:ba:e4:fb:36:c0:5d:3e:3a:5e: 34:a2:c7:e6:aa:b3:56:19:a7:b3:f0:19:47:8b:d4: 27:eb:e2:75:ce:91:5b:2e:de:9b:e7:df:2d:20:db: 3f:57:74:cb:52:97:01:9d:e1:1f:b4:59:5d:c7:a2: b4:78:24:5c:d1:3f:12:65:51:b6:83:0e:af:f0:5c: 1c:ae:27:a5:3d:fa:bd:e6:42:ea:b6:cc:22:48:b5: c5:6d:b8:7b:cb:e5:ad:52:24:1d:06:c6:e5:a1:bb: 01:7b:2e:38:83:2c:77:93:9b:3d:d4:57:d5:8e:59: f5:65:68:06:14:c0:22:ac:2d:6a:e0:48:5d:4e:01: 0d:b8:c1:a5:27:9e:c5:3f:85:b7:f8:1d:8b:d8:2f: ab:8d:1b:40:01:bd:46:b6:14:e7:7a:5f:80:aa:c8: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:14:10:97:67:B3:DD:A6:08:B3:E1:8F:32:52:22:79:4E:89:9C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/ecff82b6-556f-3ccc-8045-cd50558517e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a9:c4:61:c8:d6:ff:0c:95:79:ea:d9:76:5f:7e:0d:49:1b: f4:08:04:d9:e0:0a:36:03:37:8c:a8:2a:47:4e:fd:c3:bd:24: 10:a8:e6:ba:45:2c:4d:68:b6:cc:3a:a0:ff:1b:5b:de:e0:ee: f3:0c:5e:84:cd:bd:7a:5f:b0:22:c0:2d:f7:8c:ef:a3:6f:18: 87:33:c5:41:69:a5:c8:62:05:86:ea:33:91:78:b7:0d:12:c6: a3:91:5f:67:19:95:25:8e:24:e9:6a:6b:8e:a1:90:8b:5f:4b: bc:1b:d2:2f:62:7e:b2:02:39:63:18:cd:3c:d1:02:3b:54:91: d5:b4:14:24:b0:6a:01:af:87:3a:b8:d4:cc:89:05:67:12:68: 65:c4:ec:e0:46:4e:a4:57:d9:70:c0:08:d1:d6:17:f9:a3:aa: a5:09:10:52:2e:7c:d2:78:ad:2b:e1:07:12:d1:aa:fe:38:ff: 88:cb:16:f6:20:a6:de:63:b5:87:de:2c:7b:ce:33:38:00:33: df:67:84:89:54:b0:01:5c:86:a9:8a:82:c0:ef:80:f5:00:8b: a7:1a:1a:76:2a:e8:32:96:df:15:7e:2b:86:f4:e0:79:61:86: f7:78:d3:11:e1:40:03:81:1a:65:36:fd:d5:6b:e8:4c:a7:62: be:91:8a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeQ5mKh9vAVfz4tcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI0MTAxNzAxMDAzMloXDTI1MDExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZGViMjhlYjktM2RjZC00YTdlLWI1YjUtNmVhY2Q0NDYzYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/F8Unn/X8f++UOa8mTon865FmR/u1bZCn3K JMDW/AiTQxzj+a6thG41PuUds/6YzNBG0SpvEVTFKy41TBz/pePMHjmWXUzjbNWg 2TBXaFUKY/oe00l1vNvqxBz3Wr665Ps2wF0+Ol40osfmqrNWGaez8BlHi9Qn6+J1 zpFbLt6b598tINs/V3TLUpcBneEftFldx6K0eCRc0T8SZVG2gw6v8FwcrielPfq9 5kLqtswiSLXFbbh7y+WtUiQdBsblobsBey44gyx3k5s91FfVjln1ZWgGFMAirC1q 4EhdTgENuMGlJ57FP4W3+B2L2C+rjRtAAb1GthTnel+Aqsi8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMUEJdns92mCLPhjzJSInlOiZydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZWNmZjgyYjYtNTU2Zi0z Y2NjLTgwNDUtY2Q1MDU1ODUxN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGipxGHI1v8MlXnq2XZffg1JG/QIBNngCjYDN4yoKkdO/cO9JBCo5rpF LE1otsw6oP8bW97g7vMMXoTNvXpfsCLALfeM76NvGIczxUFppchiBYbqM5F4tw0S xqORX2cZlSWOJOlqa46hkItfS7wb0i9ifrICOWMYzTzRAjtUkdW0FCSwagGvhzq4 1MyJBWcSaGXE7OBGTqRX2XDACNHWF/mjqqUJEFIufNJ4rSvhBxLRqv44/4jLFvYg pt5jtYfeLHvOMzgAM99nhIlUsAFchqmKgsDvgPUAi6caGnYq6DKW3xV+K4b04Hlh hvd40xHhQAOBGmU2/dVr6EynYr6Rijo= -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:36 2024 by rpki-client on console-ams.rpki-client.org