$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa File: a8f35c59-b971-3d84-a662-b03a19638ac2.roa (raw, json) Hash identifier: ewnpAeKyjiXW48KpVsrZnzQU3k2ose7oRy+v9D5tGjA= Subject key identifier: 0D:0E:14:03:3F:C6:C2:D8:9A:BE:75:1E:F0:75:C3:22:F1:39:2A:21 Certificate issuer: /CN=cadf002a-d081-4e51-89c4-f7121259516d Certificate serial: 010D0C9F43285847EE8A243469509F70F12BC080 Authority key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 14877 IP address blocks: 166.66.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:24:34:69:50:9f:70:f1:2b:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadf002a-d081-4e51-89c4-f7121259516d Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=da6183cd-d689-4a12-af95-e57fbb6cfc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:a5:54:ed:bb:e0:d0:77:7d:2c:13:19:55: 4d:b3:6b:46:cd:3e:4d:76:ad:d6:70:a6:89:57:6b: 80:c9:e4:83:10:54:95:10:4f:59:f6:55:7a:f1:74: 64:c4:1f:e5:8c:e3:34:9a:4f:db:57:ba:7d:68:96: b3:e6:0d:e3:f1:6c:0b:a9:f7:9e:6d:0b:63:20:68: 8f:eb:d9:5d:54:42:ef:39:8c:3b:b9:1f:3a:69:10: ea:86:6f:97:18:70:f1:78:4b:4e:5d:1d:eb:5c:d6: 7c:44:33:34:a4:ae:d5:fd:f9:8d:b2:d4:cd:0e:a3: ea:c5:3f:03:81:b0:d2:43:4b:09:0b:35:9d:5f:b5: 55:3c:1f:78:19:f6:33:f2:8a:2e:12:31:52:d4:90: 3d:0f:d6:86:de:52:ec:41:39:75:01:ba:0d:9d:82: e3:ff:55:b9:f2:6a:ab:33:dd:13:07:f3:f7:25:e5: 17:ee:e7:1f:b5:f2:c1:6c:9d:f3:5e:71:cc:7a:73: 18:0e:36:b4:fb:27:75:e1:62:7c:dd:29:eb:7c:9b: 7f:95:66:35:34:e9:88:e2:5d:1c:22:b0:97:34:13: ab:52:f4:59:0a:77:0d:8f:13:ee:d8:8b:b6:9a:c0: 31:ae:b3:c7:52:e4:fb:d8:4b:2f:44:99:02:f7:51: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0E:14:03:3F:C6:C2:D8:9A:BE:75:1E:F0:75:C3:22:F1:39:2A:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/a8f35c59-b971-3d84-a662-b03a19638ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.crl X509v3 Authority Key Identifier: keyid:BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer sbgp-ipAddrBlock: critical IPv4: 166.66.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:a5:2f:ca:31:b6:3f:18:69:a4:4c:f2:28:5a:07:0e:b7: e6:da:a6:bc:7b:d3:bd:98:9b:18:d1:76:d1:c9:9a:6c:b7:58: 27:b9:7f:4a:f3:db:e6:0b:26:02:10:42:a8:fd:8a:51:89:d9: 1b:17:ec:89:59:c3:1d:1c:6d:e4:6b:33:76:da:a6:0a:c8:40: 9a:28:c5:90:be:94:38:a6:c7:ac:d3:28:7c:1c:ab:29:86:11: fb:04:59:9e:f8:75:90:aa:b2:95:6d:ec:87:b0:07:07:24:fa: f3:b5:86:8c:d9:61:a8:3b:4d:1d:51:31:f8:20:8c:ac:51:df: 60:f3:e3:ba:4e:78:6f:e5:0a:7e:d3:70:6b:b4:14:20:21:b7: f4:a6:d0:b9:fb:d4:50:a5:d9:55:4d:cf:72:54:92:2e:91:fb: 3e:95:9c:e5:3d:f8:ac:c8:cb:c5:74:26:e4:2d:09:e8:41:3a: 15:8d:18:99:2f:67:22:c9:ba:82:3b:19:b3:33:b7:f4:0d:cd: ba:58:ee:4f:c6:23:50:27:35:71:bb:8e:74:75:cc:27:08:82: 59:58:77:33:16:98:94:11:d3:41:68:6a:b8:70:de:0c:57:44: 55:06:cf:4d:c5:01:ea:5c:00:f5:c5:22:9c:80:49:82:35:aa: ae:45:27:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuiiQ0aVCfcPErwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1 MTZkMB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk ZGE2MTgzY2QtZDY4OS00YTEyLWFmOTUtZTU3ZmJiNmNmYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOmlVO274NB3fSwTGVVNs2tGzT5Ndq3WcKaJ V2uAyeSDEFSVEE9Z9lV68XRkxB/ljOM0mk/bV7p9aJaz5g3j8WwLqfeebQtjIGiP 69ldVELvOYw7uR86aRDqhm+XGHDxeEtOXR3rXNZ8RDM0pK7V/fmNstTNDqPqxT8D gbDSQ0sJCzWdX7VVPB94GfYz8oouEjFS1JA9D9aG3lLsQTl1AboNnYLj/1W58mqr M90TB/P3JeUX7ucftfLBbJ3zXnHMenMYDja0+yd14WJ83SnrfJt/lWY1NOmI4l0c IrCXNBOrUvRZCncNjxPu2Iu2msAxrrPHUuT72EsvRJkC91GA+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0OFAM/xsLYmr51HvB1wyLxOSohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRm MDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvYThmMzVjNTktYjk3MS0z ZDg0LWE2NjItYjAzYTE5NjM4YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2FkZjAwMmEtZDA4MS00ZTUxLTg5 YzQtZjcxMjEyNTk1MTZkL2NhZGYwMDJhLWQwODEtNGU1MS04OWM0LWY3MTIxMjU5 NTE2ZC5jcmwwHwYDVR0jBBgwFoAUukhTra5FpaDtmUiUa8Bn0qNDHa0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEy MTI1OTUxNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApkLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArspS/KMbY/GGmkTPIoWgcOt+baprx7072YmxjRdtHJmmy3WCe5f0rz 2+YLJgIQQqj9ilGJ2RsX7IlZwx0cbeRrM3bapgrIQJooxZC+lDimx6zTKHwcqymG EfsEWZ74dZCqspVt7IewBwck+vO1hozZYag7TR1RMfggjKxR32Dz47pOeG/lCn7T cGu0FCAht/Sm0Ln71FCl2VVNz3JUki6R+z6VnOU9+KzIy8V0JuQtCehBOhWNGJkv ZyLJuoI7GbMzt/QNzbpY7k/GI1AnNXG7jnR1zCcIgllYdzMWmJQR00Foarhw3gxX RFUGz03FAepcAPXFIpyASYI1qq5FJ0o= -----END CERTIFICATE-----Generated at Fri Nov 22 04:25:10 2024 by rpki-client on console-fra.rpki-client.org