$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa File: 421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa (raw, json) Hash identifier: y+uHaWTYziQOyfzUaxkYPilvCf1lNNxkFFkpmQizbRs= Subject key identifier: 14:DC:51:15:08:C7:15:AA:45:FC:36:67:CF:B5:9D:B2:BA:38:00:02 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F43285847C34493A47665BDACC38E3000 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa Signing time: Mon 04 Nov 2024 02:00:36 +0000 ROA not before: Mon 04 Nov 2024 02:00:36 +0000 ROA not after: Sun 02 Feb 2025 02:00:36 +0000 asID: 13768 IP address blocks: 66.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c3:44:93:a4:76:65:bd:ac:c3:8e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Nov 4 02:00:36 2024 GMT Not After : Feb 2 02:00:36 2025 GMT Subject: CN=2cb19c6c-b252-49f8-b9db-1d2dc4405adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bf:94:50:3a:5f:1b:5e:ca:55:80:f2:a6:d0: 92:ba:19:c5:ff:e5:bf:da:18:54:b3:14:a9:98:fa: 92:a5:03:bf:6b:66:8d:68:19:51:86:fc:83:65:20: 90:36:84:25:b6:a1:08:3d:da:fb:53:57:48:e0:08: 81:ca:a6:7c:dc:ab:d4:6a:c8:fc:6d:e4:0a:38:2a: d1:b1:d4:44:2e:7c:7d:08:6c:9b:d2:b5:d9:74:02: bc:99:a0:fe:b2:2e:de:5e:cd:59:74:fe:66:ab:76: 69:0e:9d:a1:36:07:f7:89:10:03:d3:76:74:58:b8: 42:3d:e0:65:b3:14:cf:fa:d2:30:96:98:51:c8:af: 29:27:3e:d4:d0:bc:5c:3f:49:0a:c8:d5:33:7d:50: a4:a5:5c:92:8a:0e:b0:a6:a4:d5:6f:d8:8a:53:a0: 63:f5:3a:4c:91:fa:b5:a3:21:a7:ad:a6:01:10:be: 42:d5:0e:cd:d5:07:9a:58:e4:cf:32:f3:06:00:87: 4c:d4:8c:e9:6a:6e:c0:9b:46:0e:01:aa:84:68:a6: 7c:3b:62:80:ed:45:d3:36:52:61:91:59:03:15:51: 15:e2:1c:59:ce:62:a9:b4:93:6e:9a:0d:19:72:12: 18:3b:52:07:51:9d:6d:65:a4:44:9b:e7:75:44:53: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DC:51:15:08:C7:15:AA:45:FC:36:67:CF:B5:9D:B2:BA:38:00:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/421d1b89-cb5c-3e42-b576-fa34e50f2eb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 66.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:27:53:a2:68:f1:dd:9a:0f:81:96:51:67:3a:55:64:3f:f8: 01:a3:9a:91:00:02:f9:68:8d:eb:6a:c3:68:e3:d8:6c:71:30: fe:d1:82:eb:10:ea:88:df:6e:49:6e:ad:d0:7c:28:ae:fd:24: 48:43:43:10:88:d8:0a:01:57:c8:cf:52:6a:8f:a5:5c:cf:ef: 6e:6b:aa:f4:ee:48:32:07:e3:0b:0e:98:46:24:ef:26:04:4e: e0:88:a2:41:3e:c3:37:41:bc:f7:65:a1:ab:a1:78:00:83:3f: 69:19:6d:04:ba:6a:20:c0:5e:44:68:63:14:8d:44:97:0c:15: 6f:da:9b:13:71:c0:26:96:18:4c:d9:3e:85:35:d9:7f:18:f8: 63:85:9f:8e:b5:17:00:6f:44:8f:c7:40:3e:ae:f8:3e:57:c9: a1:12:6b:63:bf:bd:20:85:dd:fa:0e:e0:22:81:30:8a:0f:6b: 4c:f7:0f:82:82:cc:3e:0b:06:f5:ae:89:c5:ab:73:3c:d0:b7: 4d:21:e3:32:88:b6:d4:57:58:68:67:1a:a7:4b:ec:3e:6e:14: 78:da:58:4e:b2:28:80:08:b6:97:92:99:0a:fc:c4:90:d5:0f: 0d:1e:fc:dc:a3:6e:55:dc:c8:99:ff:9e:42:7f:a2:60:98:8e: 10:b2:d9:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfDRJOkdmW9rMOOMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI0MTEwNDAyMDAzNloXDTI1MDIwMjAyMDAzNlowLzEtMCsGA1UEAxMk MmNiMTljNmMtYjI1Mi00OWY4LWI5ZGItMWQyZGM0NDA1YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7+UUDpfG17KVYDyptCSuhnF/+W/2hhUsxSp mPqSpQO/a2aNaBlRhvyDZSCQNoQltqEIPdr7U1dI4AiByqZ83KvUasj8beQKOCrR sdRELnx9CGyb0rXZdAK8maD+si7eXs1ZdP5mq3ZpDp2hNgf3iRAD03Z0WLhCPeBl sxTP+tIwlphRyK8pJz7U0LxcP0kKyNUzfVCkpVySig6wpqTVb9iKU6Bj9TpMkfq1 oyGnraYBEL5C1Q7N1QeaWOTPMvMGAIdM1Izpam7Am0YOAaqEaKZ8O2KA7UXTNlJh kVkDFVEV4hxZzmKptJNumg0ZchIYO1IHUZ1tZaREm+d1RFN1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTcURUIxxWqRfw2Z8+1nbK6OAACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDIxZDFiODktY2I1Yy0z ZTQyLWI1NzYtZmEzNGU1MGYyZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAnU6Jo8d2aD4GWUWc6VWQ/+AGjmpEAAvlojetqw2jj2GxxMP7RgusQ 6ojfbklurdB8KK79JEhDQxCI2AoBV8jPUmqPpVzP725rqvTuSDIH4wsOmEYk7yYE TuCIokE+wzdBvPdloauheACDP2kZbQS6aiDAXkRoYxSNRJcMFW/amxNxwCaWGEzZ PoU12X8Y+GOFn461FwBvRI/HQD6u+D5XyaESa2O/vSCF3foO4CKBMIoPa0z3D4KC zD4LBvWuicWrczzQt00h4zKIttRXWGhnGqdL7D5uFHjaWE6yKIAItpeSmQr8xJDV Dw0e/NyjblXcyJn/nkJ/omCYjhCy2bc= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:17 2024 by rpki-client on console-ams.rpki-client.org