$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa File: 34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa (raw, json) Hash identifier: dq3QrR5ASHeSnopnuEby4sI5YoDs1dFJsqohs9nLmzM= Subject key identifier: 44:EE:3B:8C:33:36:DB:A5:EE:04:E8:82:7B:DA:C9:09:5C:80:0C:0A Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F43285847A04139709C275C8FB1765434 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa Signing time: Tue 22 Oct 2024 13:00:40 +0000 ROA not before: Tue 22 Oct 2024 13:00:40 +0000 ROA not after: Mon 20 Jan 2025 14:00:40 +0000 asID: 63208 IP address blocks: 66.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:41:39:70:9c:27:5c:8f:b1:76:54:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: Oct 22 13:00:40 2024 GMT Not After : Jan 20 14:00:40 2025 GMT Subject: CN=02c1c8e0-e3bb-42a6-9e9e-4980f18e7669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:35:74:cd:5d:70:a2:3a:af:b7:f2:b1:f3:cc: 5e:2a:0b:c2:2e:c4:45:f7:2d:17:8d:45:b8:9d:d8: 67:a9:16:6a:7c:00:55:2d:d3:bb:fc:71:17:01:e5: fe:40:9b:2d:9d:2f:ed:4d:e7:48:20:c7:20:91:44: 00:6c:12:d9:01:d4:3e:ab:cb:63:33:0e:3e:c2:28: 3c:7e:2a:ca:f7:d4:82:c6:44:dd:f4:be:7a:6e:5b: 23:e7:9e:40:3f:9a:7f:1d:ee:f2:87:dd:77:42:51: ec:9d:b6:24:81:31:4e:6a:28:38:e2:b3:e4:37:ce: f1:3b:8e:52:30:ea:80:c8:65:4b:9f:99:32:65:57: cf:ca:cd:87:79:29:90:ba:65:08:bf:43:a4:52:f4: 1c:72:e4:32:a8:94:dd:64:0d:6e:6b:98:64:68:88: 7e:53:ca:f6:9c:a8:d0:cb:2e:73:8c:0b:93:29:57: 57:2d:9d:ad:f6:22:13:19:45:32:d8:65:e9:86:40: c0:dc:65:4d:a3:46:4a:61:9d:6f:b8:35:da:13:38: df:19:ca:9a:ca:e6:32:72:db:64:01:6f:e0:8b:d8: 7c:62:72:96:95:b3:8d:b4:0a:6d:57:ee:34:4d:fe: 93:c0:9e:8a:74:a5:da:42:96:f2:84:dc:c7:25:22: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EE:3B:8C:33:36:DB:A5:EE:04:E8:82:7B:DA:C9:09:5C:80:0C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/34a72a1e-125f-3775-a6a2-d1bd1a803c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv4: 66.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:12:46:2e:24:92:58:f7:97:62:a0:59:3c:08:c2:b6:f7:a8: f1:fe:e3:a9:2c:5c:67:5f:9a:a3:81:a5:0d:4c:f0:bf:32:e0: ab:98:d5:92:5b:cd:3d:d9:f8:9f:4d:c3:2d:48:ca:51:cb:bc: 2e:31:99:3f:ae:e4:1a:07:03:2f:91:b6:66:f4:15:9f:e7:72: 9b:a2:29:76:b4:87:25:01:47:0d:2e:2a:cb:07:ad:fd:70:0c: 19:c6:c6:29:8d:70:94:bf:4b:f4:51:b5:9b:6c:c8:50:b9:21: 11:b8:09:bc:a6:ca:ff:48:bd:a2:5d:31:79:6e:3b:c8:8b:0f: d7:1e:52:d9:c8:05:6a:09:c9:8b:a2:9a:8f:6b:d6:42:41:83: 3c:48:88:a3:61:73:62:12:d7:ca:e2:84:00:c5:14:cd:64:61: 6a:8f:3d:f1:3f:62:26:99:a1:83:23:dd:97:9e:84:50:4c:c2: d3:3a:26:93:94:14:0e:d5:cf:a5:e3:4b:8f:a6:3a:cc:bf:3d: c7:ac:d8:e0:44:c1:42:2f:9b:b4:2f:e0:84:06:42:96:7c:05: fc:1a:65:d2:e5:17:c0:cd:d7:73:e0:6a:2f:f2:f8:50:90:e9: ad:1c:e6:41:5c:82:97:b2:9c:9d:e2:34:89:eb:4c:68:33:2d: 16:c0:8e:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEegQTlwnCdcj7F2VDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI0MTAyMjEzMDA0MFoXDTI1MDEyMDE0MDA0MFowLzEtMCsGA1UEAxMk MDJjMWM4ZTAtZTNiYi00MmE2LTllOWUtNDk4MGYxOGU3NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jV0zV1wojqvt/Kx88xeKgvCLsRF9y0XjUW4 ndhnqRZqfABVLdO7/HEXAeX+QJstnS/tTedIIMcgkUQAbBLZAdQ+q8tjMw4+wig8 firK99SCxkTd9L56blsj555AP5p/He7yh913QlHsnbYkgTFOaig44rPkN87xO45S MOqAyGVLn5kyZVfPys2HeSmQumUIv0OkUvQccuQyqJTdZA1ua5hkaIh+U8r2nKjQ yy5zjAuTKVdXLZ2t9iITGUUy2GXphkDA3GVNo0ZKYZ1vuDXaEzjfGcqayuYycttk AW/gi9h8YnKWlbONtAptV+40Tf6TwJ6KdKXaQpbyhNzHJSIL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETuO4wzNtul7gTognvayQlcgAwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvMzRhNzJhMWUtMTI1Zi0z Nzc1LWE2YTItZDFiZDFhODAzYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYSRi4kklj3l2KgWTwIwrb3qPH+46ksXGdfmqOBpQ1M8L8y4KuY1ZJb zT3Z+J9Nwy1IylHLvC4xmT+u5BoHAy+Rtmb0FZ/ncpuiKXa0hyUBRw0uKssHrf1w DBnGximNcJS/S/RRtZtsyFC5IRG4Cbymyv9IvaJdMXluO8iLD9ceUtnIBWoJyYui mo9r1kJBgzxIiKNhc2IS18rihADFFM1kYWqPPfE/YiaZoYMj3ZeehFBMwtM6JpOU FA7Vz6XjS4+mOsy/Pces2OBEwUIvm7Qv4IQGQpZ8BfwaZdLlF8DN13Pgai/y+FCQ 6a0c5kFcgpeynJ3iNInrTGgzLRbAjlw= -----END CERTIFICATE-----Generated at Mon Nov 25 18:04:40 2024 by rpki-client on console-fra.rpki-client.org