$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa File: a608f793-5bc4-3f6e-a460-f0e592ab913e.roa (raw, json) Hash identifier: wXH6laGzBSwSceMi/K6SABpAay4jFyANfJssFbayIdA= Subject key identifier: E7:0D:7D:37:FC:42:7C:85:EB:F8:F4:0B:DC:16:13:CA:45:DF:1D:09 Certificate issuer: /CN=6396ecb5-3b91-4d1e-b787-089230813a23 Certificate serial: 010D0C9F432858479D76B51EAB55BACCC03EDC00 Authority key identifier: EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 400777 IP address blocks: 66.59.204.0/24 maxlen: 24 66.59.205.0/24 maxlen: 24 66.59.206.0/24 maxlen: 24 66.59.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b5:1e:ab:55:ba:cc:c0:3e:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6396ecb5-3b91-4d1e-b787-089230813a23 Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=07af1fe0-e89f-48ad-9408-2b54726846dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:b9:f1:7d:19:2c:07:94:db:ce:f3:a3:ce: 86:bb:7a:80:8b:00:9c:6c:41:fe:c4:ab:d3:ce:96: a9:3a:23:a2:4d:12:c6:0c:ff:8b:0f:c7:9e:44:d1: ea:75:65:7e:08:4e:74:80:48:01:13:c4:c6:d5:8b: a4:1a:89:1c:d4:96:c0:c9:c6:6f:1f:c9:4a:be:00: e0:bd:fd:5d:ae:18:11:81:3f:bd:cb:6f:84:1c:68: 89:95:78:da:04:18:54:d4:bc:0c:43:ba:4e:7d:09: 9c:78:f5:35:f2:59:82:3a:1c:a3:e8:93:9a:d4:5e: be:ac:0f:28:23:c8:41:c0:1b:c4:24:7f:de:6a:fd: 1a:69:0d:bc:ae:f1:7e:88:9b:06:34:3d:88:76:21: 35:97:fd:6f:42:0b:10:d8:b2:46:10:a4:23:fe:d7: 57:9c:84:30:68:24:6a:41:a6:97:00:dd:e3:12:91: 02:f6:c5:d9:3d:68:fa:8d:3f:d7:e0:24:5b:e1:d8: 22:95:1c:37:ff:e6:5e:39:3d:49:d2:39:7f:f0:f8: f3:8b:44:30:bd:ab:97:b4:29:50:89:d2:6e:ff:31: 46:2b:6f:1d:35:27:1f:8e:8a:f9:67:70:b8:e1:fd: 2d:40:e6:6c:82:69:09:25:dc:93:62:b7:0e:ea:0a: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0D:7D:37:FC:42:7C:85:EB:F8:F4:0B:DC:16:13:CA:45:DF:1D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/a608f793-5bc4-3f6e-a460-f0e592ab913e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23/6396ecb5-3b91-4d1e-b787-089230813a23.crl X509v3 Authority Key Identifier: keyid:EA:59:6F:96:0F:E3:60:24:00:29:A2:A4:4B:82:50:23:00:6B:15:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6396ecb5-3b91-4d1e-b787-089230813a23.cer sbgp-ipAddrBlock: critical IPv4: 66.59.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a5:e7:a9:00:b1:9a:dc:15:91:9f:44:20:60:3e:85:98:d1: b1:b1:5a:88:49:62:97:2c:4b:c9:d2:b7:35:2d:96:81:8f:07: b5:6b:77:cc:7a:bf:e7:2a:e5:1a:b4:b4:2a:9b:a5:f3:c2:bf: e2:71:5b:23:bb:ef:44:be:ab:de:6c:9f:01:b3:23:db:5e:1e: 2a:8e:17:01:66:43:7f:3d:5f:fd:66:f4:33:84:b7:2f:0e:b9: 32:e3:92:2e:cf:25:05:b1:62:cd:9b:74:6a:87:9f:be:c3:5e: 43:3e:ea:33:b6:e9:79:c8:3d:88:85:a8:60:b5:ee:88:73:90: bb:de:14:ca:f3:5d:24:97:72:df:7c:e8:b9:90:de:ae:6b:5c: 7e:f9:85:6b:59:b6:8a:64:51:78:d2:08:53:93:a2:ae:10:b0: 44:ce:71:16:7f:48:8a:b2:dc:5e:c8:a8:08:88:23:73:a9:92: ef:41:3e:b3:2a:bc:2a:68:0e:8d:89:10:97:a2:52:58:e5:c8: 49:3c:1b:4b:37:e7:2d:77:99:33:35:87:4a:df:c9:1f:ca:db: ec:ee:64:cc:52:d0:90:d0:86:48:5c:ae:e6:23:35:a6:f9:ef: db:b0:e0:a8:b4:cc:6a:e9:65:3c:7a:4c:7e:61:eb:99:e0:f1: 5c:b9:4b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrUeq1W6zMA+3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM5NmVjYjUtM2I5MS00ZDFlLWI3ODctMDg5MjMwODEz YTIzMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MDdhZjFmZTAtZTg5Zi00OGFkLTk0MDgtMmI1NDcyNjg0NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRy58X0ZLAeU287zo86Gu3qAiwCcbEH+xKvT zpapOiOiTRLGDP+LD8eeRNHqdWV+CE50gEgBE8TG1YukGokc1JbAycZvH8lKvgDg vf1drhgRgT+9y2+EHGiJlXjaBBhU1LwMQ7pOfQmcePU18lmCOhyj6JOa1F6+rA8o I8hBwBvEJH/eav0aaQ28rvF+iJsGND2IdiE1l/1vQgsQ2LJGEKQj/tdXnIQwaCRq QaaXAN3jEpEC9sXZPWj6jT/X4CRb4dgilRw3/+ZeOT1J0jl/8Pjzi0QwvauXtClQ idJu/zFGK28dNScfjor5Z3C44f0tQOZsgmkJJdyTYrcO6grdmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcNfTf8QnyF6/j0C9wWE8pF3x0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2 ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODkyMzA4MTNhMjMvYTYwOGY3OTMtNWJjNC0z ZjZlLWE0NjAtZjBlNTkyYWI5MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjM5NmVjYjUtM2I5MS00ZDFlLWI3 ODctMDg5MjMwODEzYTIzLzYzOTZlY2I1LTNiOTEtNGQxZS1iNzg3LTA4OTIzMDgx M2EyMy5jcmwwHwYDVR0jBBgwFoAU6llvlg/jYCQAKaKkS4JQIwBrFSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Mzk2ZWNiNS0zYjkxLTRkMWUtYjc4Ny0wODky MzA4MTNhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIal56kAsZrcFZGfRCBgPoWY0bGxWohJYpcsS8nStzUtloGPB7Vrd8x6 v+cq5Rq0tCqbpfPCv+JxWyO770S+q95snwGzI9teHiqOFwFmQ389X/1m9DOEty8O uTLjki7PJQWxYs2bdGqHn77DXkM+6jO26XnIPYiFqGC17ohzkLveFMrzXSSXct98 6LmQ3q5rXH75hWtZtopkUXjSCFOToq4QsETOcRZ/SIqy3F7IqAiII3Opku9BPrMq vCpoDo2JEJeiUljlyEk8G0s35y13mTM1h0rfyR/K2+zuZMxS0JDQhkhcruYjNab5 79uw4Ki0zGrpZTx6TH5h65ng8Vy5SwA= -----END CERTIFICATE-----Generated at Mon Nov 25 16:23:37 2024 by rpki-client on console-ams.rpki-client.org