$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/34665fc4-950b-3047-8a49-3e67438a47ba.roa File: 34665fc4-950b-3047-8a49-3e67438a47ba.roa (raw, json) Hash identifier: oQXNX0vDgJHV3AczMVqwR8ukzfh/2mIZ4z+6jCDSufo= Subject key identifier: 4E:48:63:8F:5F:24:91:AE:7C:B2:FB:1C:C0:7B:22:B3:A5:33:24:46 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285847967BC4278E3252FA39FCEE00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/34665fc4-950b-3047-8a49-3e67438a47ba.roa Signing time: Sat 19 Oct 2024 01:00:33 +0000 ROA not before: Sat 19 Oct 2024 01:00:33 +0000 ROA not after: Fri 17 Jan 2025 02:00:33 +0000 asID: 4540 IP address blocks: 66.187.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:7b:c4:27:8e:32:52:fa:39:fc:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Oct 19 01:00:33 2024 GMT Not After : Jan 17 02:00:33 2025 GMT Subject: CN=34a3de03-41c5-4d83-bc69-3eba4c964e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:75:45:e7:3c:3a:e8:1e:21:b5:7c:1a:5f: cd:17:4e:9e:38:a4:4d:b4:62:af:b6:32:75:35:dd: 26:fe:82:a6:5b:4b:3f:c6:9a:d1:05:5d:bc:3b:35: 60:0f:9d:b6:df:b0:c8:be:ef:04:6a:10:8c:e0:15: 4f:f1:c0:09:de:d3:34:57:12:10:85:be:ca:0a:d4: db:99:cd:14:13:45:ad:30:1e:46:9e:97:2c:3b:b8: 29:27:46:e2:48:5c:22:a2:6e:e7:63:4b:fd:a6:a6: 43:e5:d4:cf:f0:06:91:c3:e2:38:2f:c4:74:db:83: fc:70:6f:1c:94:af:07:8d:34:dd:ba:9a:c2:50:b0: 57:ae:9c:3d:b1:0f:fa:26:0b:b9:bb:83:5c:c2:32: 96:79:9e:f8:1b:5f:d3:79:d0:98:c3:07:f4:c5:57: 1a:31:a8:78:42:0d:23:f9:b4:ea:27:62:ab:87:6e: 50:75:f7:4f:f4:04:b0:89:f1:8e:7b:a4:bc:6d:a3: 35:dd:2b:6c:32:fe:b8:71:47:a4:d1:fa:df:ec:eb: 3a:eb:df:cd:3c:ed:87:7f:17:27:2b:22:49:9e:61: 23:c1:83:06:b3:3a:be:c1:b7:01:80:45:16:11:4c: e0:7d:b3:f1:e2:85:b1:0c:d4:41:4c:af:32:61:eb: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:63:8F:5F:24:91:AE:7C:B2:FB:1C:C0:7B:22:B3:A5:33:24:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/34665fc4-950b-3047-8a49-3e67438a47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 66.187.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ac:a2:14:11:40:ef:02:57:bc:f3:44:f9:de:6d:24:75:66: 34:26:33:40:75:65:2d:de:fd:2d:5f:03:76:08:be:08:6d:2a: 7f:c5:97:b9:d2:f6:3c:0b:26:d9:59:c6:7c:61:11:64:62:46: 6a:ae:f6:60:0b:54:d2:ba:fc:6b:93:7f:ea:49:53:1a:1e:0c: 21:ae:0b:29:6b:b2:63:dc:79:06:8c:1c:79:f5:0e:bc:18:42: 47:31:58:73:e0:e0:0d:44:04:d9:b7:17:e1:e0:67:da:a0:5e: df:f7:c4:af:a4:d6:1c:e5:78:11:f1:21:b9:11:e6:22:46:ed: 7e:f3:59:44:6d:9b:e0:06:cc:b8:e2:3c:40:75:19:4f:75:42: e6:18:2b:fb:ce:5c:d9:2d:dc:1d:e7:1c:f1:7c:9c:e6:d2:15: 95:10:6c:33:29:5e:c6:7d:b8:56:61:6c:01:6d:c6:a7:a5:bc: 3f:97:a0:f1:22:1f:a5:ad:23:b0:b2:e3:87:00:8e:ab:47:84: bc:e2:12:73:06:98:fe:07:53:4c:44:5a:b6:09:97:bc:73:49: 40:05:8d:74:6c:6a:28:47:73:33:72:42:8f:6b:e0:92:ac:ab: 89:1a:76:c7:c4:c6:db:a5:1d:6e:36:7e:08:c0:76:27:06:1e: 43:2c:f1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeWe8QnjjJS+jn87gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI0MTAxOTAxMDAzM1oXDTI1MDExNzAyMDAzM1owLzEtMCsGA1UEAxMk MzRhM2RlMDMtNDFjNS00ZDgzLWJjNjktM2ViYTRjOTY0ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEJ1Rec8OugeIbV8Gl/NF06eOKRNtGKvtjJ1 Nd0m/oKmW0s/xprRBV28OzVgD52237DIvu8EahCM4BVP8cAJ3tM0VxIQhb7KCtTb mc0UE0WtMB5GnpcsO7gpJ0biSFwiom7nY0v9pqZD5dTP8AaRw+I4L8R024P8cG8c lK8HjTTduprCULBXrpw9sQ/6Jgu5u4NcwjKWeZ74G1/TedCYwwf0xVcaMah4Qg0j +bTqJ2Krh25QdfdP9ASwifGOe6S8baM13StsMv64cUek0frf7Os669/NPO2Hfxcn KyJJnmEjwYMGszq+wbcBgEUWEUzgfbPx4oWxDNRBTK8yYesBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5IY49fJJGufLL7HMB7IrOlMyRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMzQ2NjVmYzQtOTUwYi0z MDQ3LThhNDktM2U2NzQzOGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmsohQRQO8CV7zzRPnebSR1ZjQmM0B1ZS3e/S1fA3YIvghtKn/Fl7nS 9jwLJtlZxnxhEWRiRmqu9mALVNK6/GuTf+pJUxoeDCGuCylrsmPceQaMHHn1DrwY QkcxWHPg4A1EBNm3F+HgZ9qgXt/3xK+k1hzleBHxIbkR5iJG7X7zWURtm+AGzLji PEB1GU91QuYYK/vOXNkt3B3nHPF8nObSFZUQbDMpXsZ9uFZhbAFtxqelvD+XoPEi H6WtI7Cy44cAjqtHhLziEnMGmP4HU0xEWrYJl7xzSUAFjXRsaihHczNyQo9r4JKs q4kadsfExtulHW42fgjAdicGHkMs8To= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org