$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa File: ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa (raw, json) Hash identifier: ttLTUeu6P1hUFA1KOoJAyBUv9tZcj7PoCOzXiklbGXE= Subject key identifier: E5:19:21:A8:57:6C:3C:35:9E:EB:12:33:67:0F:DF:E4:29:55:55:31 Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F43285847AB6C1608D102D12B4F07BE00 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa Signing time: Sat 26 Oct 2024 13:00:42 +0000 ROA not before: Sat 26 Oct 2024 13:00:42 +0000 ROA not after: Fri 24 Jan 2025 14:00:42 +0000 asID: 399916 IP address blocks: 66.118.0.0/22 maxlen: 22 66.118.0.0/24 maxlen: 24 66.118.1.0/24 maxlen: 24 66.118.2.0/24 maxlen: 24 66.118.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ab:6c:16:08:d1:02:d1:2b:4f:07:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Oct 26 13:00:42 2024 GMT Not After : Jan 24 14:00:42 2025 GMT Subject: CN=85203369-19a1-45c9-b014-6fc7a0aaa4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:66:3e:e8:28:d5:09:ff:cb:e1:29:e8:e6: 43:04:fd:25:55:72:6f:d1:5e:6d:90:bf:c7:e2:63: fc:76:29:a0:ac:84:ca:4f:9b:00:94:10:6c:63:01: 5e:28:eb:96:bb:04:1d:4d:bb:74:f6:b4:d7:2e:28: cf:f5:f3:73:cf:d0:fd:85:c9:85:1b:d6:88:af:ea: 67:72:4a:99:ff:be:28:07:67:bd:f6:10:89:ee:bd: ca:99:89:8b:bf:e3:10:e9:f4:f8:66:ef:09:30:56: 5f:81:cc:73:66:82:94:fe:fd:e8:77:f4:7c:73:0b: 35:99:af:da:ae:44:7d:8c:3b:81:d3:92:8a:0d:f7: ae:6e:41:82:52:4f:0d:d7:05:5e:2e:b5:e6:f2:7c: 39:9a:8d:bd:e1:e3:f1:79:3d:f8:e9:0e:2c:e3:7e: 03:24:ec:13:26:cf:3c:8c:ba:d9:e5:52:9b:b6:c8: 09:55:1a:4a:25:78:b8:e4:ea:6c:b9:01:ba:63:e9: cf:1c:cb:11:47:09:88:45:30:93:f3:dd:ea:f0:4b: 57:49:e4:db:d7:8f:13:63:7d:ad:a1:ee:44:cd:df: 13:9d:8a:69:64:4b:fc:77:2b:3f:9a:1e:07:b9:73: 2f:a0:c7:53:01:26:0c:c9:fa:e4:7c:b8:6c:a2:28: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:19:21:A8:57:6C:3C:35:9E:EB:12:33:67:0F:DF:E4:29:55:55:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e9:42:8b:19:7f:63:42:cc:3b:8f:4f:69:1f:f9:21:2c:7c: 94:81:bd:d1:5c:c6:38:62:fa:78:88:5b:ba:29:38:c5:12:db: c7:d5:ed:c0:42:50:d0:2c:ce:90:a1:ab:40:57:29:22:8f:5b: 13:b6:ed:00:45:82:7f:5c:73:07:62:f7:88:6f:8d:4c:4d:48: 95:f0:d8:07:ef:09:7e:e3:9b:8f:ba:b1:2d:37:68:56:58:b4: 6d:36:82:51:8d:fa:26:39:d5:61:c3:dd:c3:e7:23:2f:3c:30: c3:cc:b1:eb:7e:7e:27:0e:97:b0:1e:65:62:d4:a3:62:f8:9e: 63:13:03:9f:99:fd:53:62:65:58:e5:64:9f:e7:cc:fd:72:41: d3:dd:7f:d4:5d:02:0e:12:eb:04:e4:b9:c1:8e:9e:eb:9c:a6: df:c3:a5:ca:f5:80:de:86:56:81:52:06:a8:25:7f:9a:b2:96: 86:db:1c:01:49:94:71:32:f4:9e:3d:e4:cd:c3:c5:81:fc:36: a0:60:11:96:b9:ba:83:a3:ff:f2:a4:93:88:c1:5c:a8:66:19: 8a:6a:e2:8f:a8:52:9d:28:5c:5b:80:49:2d:04:69:75:c3:e6: d9:99:03:b0:71:89:3e:40:e9:be:69:4c:8f:a7:f8:b5:22:a4: 9b:39:84:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEerbBYI0QLRK08HvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI0MTAyNjEzMDA0MloXDTI1MDEyNDE0MDA0MlowLzEtMCsGA1UEAxMk ODUyMDMzNjktMTlhMS00NWM5LWIwMTQtNmZjN2EwYWFhNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLpmPugo1Qn/y+Ep6OZDBP0lVXJv0V5tkL/H 4mP8dimgrITKT5sAlBBsYwFeKOuWuwQdTbt09rTXLijP9fNzz9D9hcmFG9aIr+pn ckqZ/74oB2e99hCJ7r3KmYmLv+MQ6fT4Zu8JMFZfgcxzZoKU/v3od/R8cws1ma/a rkR9jDuB05KKDfeubkGCUk8N1wVeLrXm8nw5mo294ePxeT346Q4s434DJOwTJs88 jLrZ5VKbtsgJVRpKJXi45OpsuQG6Y+nPHMsRRwmIRTCT893q8EtXSeTb148TY32t oe5Ezd8TnYppZEv8dys/mh4HuXMvoMdTASYMyfrkfLhsoijpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUZIahXbDw1nusSM2cP3+QpVVUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvYmE5YWY3YzktNDE4OC0z YWVjLTgzY2EtMGU2MDI5OGE5OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfpQosZf2NCzDuPT2kf+SEsfJSBvdFcxjhi+niIW7opOMUS28fV7cBC UNAszpChq0BXKSKPWxO27QBFgn9ccwdi94hvjUxNSJXw2AfvCX7jm4+6sS03aFZY tG02glGN+iY51WHD3cPnIy88MMPMset+ficOl7AeZWLUo2L4nmMTA5+Z/VNiZVjl ZJ/nzP1yQdPdf9RdAg4S6wTkucGOnuucpt/Dpcr1gN6GVoFSBqglf5qylobbHAFJ lHEy9J495M3DxYH8NqBgEZa5uoOj//Kkk4jBXKhmGYpq4o+oUp0oXFuASS0EaXXD 5tmZA7BxiT5A6b5pTI+n+LUipJs5hOk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:22:57 2024 by rpki-client on console-fra.rpki-client.org