$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa File: 4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa (raw, json) Hash identifier: XUj76mhgx7/4AWJ5W6jyb4Nx2B8QCXsKVx4De2fclWM= Subject key identifier: CC:C4:CE:81:F2:0A:F4:E8:93:32:B8:E8:69:CF:21:1A:F5:9E:92:E5 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584726D089BE88EB51BCE194FF00 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa Signing time: Mon 09 Sep 2024 01:00:31 +0000 ROA not before: Mon 09 Sep 2024 01:00:31 +0000 ROA not after: Sun 08 Dec 2024 02:00:31 +0000 asID: 35847 IP address blocks: 66.33.120.0/21 maxlen: 24 66.132.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:26:d0:89:be:88:eb:51:bc:e1:94:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Sep 9 01:00:31 2024 GMT Not After : Dec 8 02:00:31 2024 GMT Subject: CN=ab73e58c-ec04-4588-a43c-609baea590e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:6f:29:6e:96:a5:93:d0:36:37:dd:b4:d7: 83:30:83:c0:40:dd:76:9c:ef:8e:a6:ad:58:25:6d: dc:9e:df:44:fd:e7:2e:08:40:34:4d:06:19:f7:aa: ee:da:e5:91:7e:79:eb:89:03:0d:79:0a:b6:da:eb: 3a:8d:b1:fd:32:e3:6b:c2:62:7a:58:44:9a:c3:98: 60:0a:5c:3c:55:e4:55:a2:dc:5a:2b:ed:5b:32:b6: 8b:82:8f:89:08:f3:3d:b1:98:1d:b9:30:e5:9d:4c: aa:a6:f3:9a:7e:e0:e7:6b:8a:1b:f1:26:a2:44:56: 0e:b7:28:84:a3:0b:08:c8:ba:f8:2d:31:a6:7e:dd: fb:6a:e3:c7:b2:53:95:5d:fb:5b:c9:eb:d4:48:38: 5b:69:f3:4e:6d:b3:31:e4:75:c0:78:03:08:c5:a4: a2:dd:8f:77:70:2e:de:28:58:fa:8b:30:a9:04:95: 0f:5b:47:db:79:1f:ac:94:73:23:f4:35:e6:99:dd: ec:31:33:56:02:c6:65:3a:a4:9f:9e:bf:c5:ed:01: f7:45:ad:af:f7:05:ad:d0:92:d8:c9:8e:bf:e8:cf: 63:93:15:8d:49:17:76:14:79:08:c0:0e:99:33:fd: e9:48:d0:c8:4e:ab:2a:37:fd:56:22:48:78:bc:30: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C4:CE:81:F2:0A:F4:E8:93:32:B8:E8:69:CF:21:1A:F5:9E:92:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/4d8e90d5-0ed5-372a-a340-fd182b6e3e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 66.33.120.0/21 66.132.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:43:e2:5f:55:18:e0:b1:24:21:e1:40:46:d8:19:dc:53:ad: 54:9c:35:20:c2:5e:94:9a:18:1d:92:c5:6a:85:7e:7e:98:47: de:1f:eb:55:68:a3:09:ec:d2:47:14:91:a7:03:b5:11:99:76: 7a:b2:b6:d5:a6:92:f4:cc:c5:54:61:9f:14:32:b9:95:4d:fd: 5d:07:48:a9:44:36:13:3f:d1:e6:92:06:5b:5b:1a:3d:fa:c9: 52:2f:32:68:83:5e:b2:a6:48:5a:e5:02:61:31:d3:72:2f:3d: 5a:c0:59:1e:ac:95:14:03:41:d9:f2:50:c5:76:f8:f9:fc:06: 51:e0:c5:7e:49:93:3c:f0:fc:87:e1:5a:ec:ff:7c:59:cf:12: 27:85:05:43:2f:14:17:1c:e1:94:f1:45:0b:6a:5a:b6:69:d4: 4f:b4:a1:e2:50:3f:82:ea:4b:ac:1c:02:83:82:b9:61:44:14: 4f:7b:8b:72:93:2d:00:72:c5:9d:f0:99:a5:65:cf:9e:47:2c: 65:c9:93:b8:03:96:7d:49:9a:a4:53:73:a1:7b:80:da:62:b1: 65:61:75:92:61:f5:83:ba:67:77:24:ae:d2:08:5c:e9:fb:dd: 02:ed:5f:6c:99:63:6a:7d:76:d2:13:be:a2:09:cc:67:41:30: e7:65:20:fa -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEcm0Im+iOtRvOGU/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI0MDkwOTAxMDAzMVoXDTI0MTIwODAyMDAzMVowLzEtMCsGA1UEAxMk YWI3M2U1OGMtZWMwNC00NTg4LWE0M2MtNjA5YmFlYTU5MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi71vKW6WpZPQNjfdtNeDMIPAQN12nO+Opq1Y JW3cnt9E/ecuCEA0TQYZ96ru2uWRfnnriQMNeQq22us6jbH9MuNrwmJ6WESaw5hg Clw8VeRVotxaK+1bMraLgo+JCPM9sZgduTDlnUyqpvOafuDna4ob8SaiRFYOtyiE owsIyLr4LTGmft37auPHslOVXftbyevUSDhbafNObbMx5HXAeAMIxaSi3Y93cC7e KFj6izCpBJUPW0fbeR+slHMj9DXmmd3sMTNWAsZlOqSfnr/F7QH3Ra2v9wWt0JLY yY6/6M9jkxWNSRd2FHkIwA6ZM/3pSNDITqsqN/1WIkh4vDDbkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMzEzoHyCvTokzK46GnPIRr1npLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvNGQ4ZTkwZDUtMGVkNS0z NzJhLWEzNDAtZmQxODJiNmUzZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQiF4AwQD QoSgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJhD4l9VGOCxJCHhQEbYGdxTrVScNSDCXpSaGB2SxWqFfn6Y R94f61Voowns0kcUkacDtRGZdnqyttWmkvTMxVRhnxQyuZVN/V0HSKlENhM/0eaS BltbGj36yVIvMmiDXrKmSFrlAmEx03IvPVrAWR6slRQDQdnyUMV2+Pn8BlHgxX5J kzzw/IfhWuz/fFnPEieFBUMvFBcc4ZTxRQtqWrZp1E+0oeJQP4LqS6wcAoOCuWFE FE97i3KTLQByxZ3wmaVlz55HLGXJk7gDln1JmqRTc6F7gNpisWVhdZJh9YO6Z3ck rtIIXOn73QLtX2yZY2p9dtITvqIJzGdBMOdlIPo= -----END CERTIFICATE-----Generated at Sun Nov 24 18:28:58 2024 by rpki-client on console-ams.rpki-client.org