$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa File: 6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa (raw, json) Hash identifier: uJk989dgn4bQN/wGIac2+RrDIz928gHn7bKDChlgai8= Subject key identifier: 33:06:08:22:66:11:F5:88:B4:B8:C2:C9:D4:AD:C6:4E:87:64:E3:6C Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F43285847D999F5FF61D7B6F510CD0E40 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa Signing time: Tue 12 Nov 2024 02:00:27 +0000 ROA not before: Tue 12 Nov 2024 02:00:27 +0000 ROA not after: Mon 10 Feb 2025 02:00:27 +0000 asID: 11273 IP address blocks: 208.66.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d9:99:f5:ff:61:d7:b6:f5:10:cd:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Nov 12 02:00:27 2024 GMT Not After : Feb 10 02:00:27 2025 GMT Subject: CN=89328a1f-569b-4c82-9184-feaa24f778f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:66:f7:2d:2c:40:d6:cb:4a:f7:04:42:47: f0:46:1a:bf:b7:f7:a5:79:8c:a5:6c:5e:a8:9a:7b: 30:64:87:35:05:f8:e3:4e:72:27:d6:7e:84:f0:3e: 89:a0:6b:0e:f0:52:7c:17:67:32:e0:cb:08:16:28: c7:30:11:f7:69:47:65:06:f6:6f:4b:ae:6d:50:d6: a6:d5:2f:f2:f6:79:ee:19:96:47:f4:d2:c6:1a:d6: 19:52:f1:f3:5e:a4:c1:86:44:66:7d:ac:e6:8e:7e: f2:1f:2a:de:00:09:34:55:92:18:ad:4e:32:de:75: 50:ef:59:0f:8d:b0:c5:43:dc:d5:d9:c9:33:06:fd: e5:6e:67:26:21:42:1d:18:3d:d4:5a:f7:65:18:c4: 30:4b:fe:8f:26:7d:85:27:db:d7:e6:bc:9c:f3:de: cc:d4:11:d8:34:9b:b5:92:db:3f:b8:5d:ed:f6:62: 36:26:6e:fb:bb:42:7e:56:70:02:b8:f7:74:b8:f3: 35:29:9f:d4:f3:60:71:c6:76:c0:cc:de:e6:2c:cb: c7:4d:9d:03:78:18:64:dc:a6:e6:4b:c1:07:bd:af: ab:c4:a0:f8:85:10:1e:56:67:52:29:8f:e0:3d:ff: 34:86:0f:b7:fc:93:fe:a2:1b:d1:aa:61:c2:f5:c5: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:06:08:22:66:11:F5:88:B4:B8:C2:C9:D4:AD:C6:4E:87:64:E3:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/6f7626b8-0bd7-33d9-8b81-3769c139acaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 208.66.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:36:9c:f2:99:de:17:06:eb:ec:76:4c:50:d6:b2:74:c5:3d: 13:2e:6b:39:26:b7:24:c1:00:62:33:79:ea:0f:13:b6:48:ff: c7:89:a6:78:c8:59:7d:d1:36:c1:38:92:59:63:8f:cd:6d:cd: 81:1b:4b:d1:34:30:1c:bb:c5:2e:27:54:c0:b9:03:60:96:fc: 29:03:e4:40:fe:f7:2a:ab:d3:ae:ea:7f:0e:ae:9e:52:96:7c: 8b:7a:d9:10:a1:65:e9:72:26:2b:f5:d9:b7:8f:58:be:92:30: c6:08:79:68:35:7d:e1:21:9b:54:5a:6b:8d:5e:45:7f:16:52: 78:d3:0a:ce:3b:7f:f8:d5:f9:0b:cb:e0:f3:13:28:43:49:91: 05:fd:55:d2:58:fd:29:95:df:36:03:c6:e0:83:db:e8:b8:7d: 83:e9:c9:14:fa:da:cc:5c:60:a7:7a:91:dc:cc:b9:ce:40:67: 73:66:53:c8:a2:d7:e3:1d:c4:3f:53:05:bc:39:a5:e6:3d:97: 13:ec:9d:8e:d4:3d:88:1a:d6:16:97:68:60:dd:48:71:30:e8: 00:7d:62:93:45:fb:9f:83:25:b3:37:b1:db:54:63:b8:19:12: 88:0d:3f:70:02:0d:f7:91:88:b4:2a:46:c0:ee:13:23:7a:54: 75:c6:0f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfZmfX/Yde29RDNDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI0MTExMjAyMDAyN1oXDTI1MDIxMDAyMDAyN1owLzEtMCsGA1UEAxMk ODkzMjhhMWYtNTY5Yi00YzgyLTkxODQtZmVhYTI0Zjc3OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUpm9y0sQNbLSvcEQkfwRhq/t/eleYylbF6o mnswZIc1BfjjTnIn1n6E8D6JoGsO8FJ8F2cy4MsIFijHMBH3aUdlBvZvS65tUNam 1S/y9nnuGZZH9NLGGtYZUvHzXqTBhkRmfazmjn7yHyreAAk0VZIYrU4y3nVQ71kP jbDFQ9zV2ckzBv3lbmcmIUIdGD3UWvdlGMQwS/6PJn2FJ9vX5ryc897M1BHYNJu1 kts/uF3t9mI2Jm77u0J+VnACuPd0uPM1KZ/U82BxxnbAzN7mLMvHTZ0DeBhk3Kbm S8EHva+rxKD4hRAeVmdSKY/gPf80hg+3/JP+ohvRqmHC9cXaPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMGCCJmEfWItLjCydStxk6HZONsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvNmY3NjI2YjgtMGJkNy0z M2Q5LThiODEtMzc2OWMxMzlhY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc2nPKZ3hcG6+x2TFDWsnTFPRMuazkmtyTBAGIzeeoPE7ZI/8eJpnjI WX3RNsE4klljj81tzYEbS9E0MBy7xS4nVMC5A2CW/CkD5ED+9yqr067qfw6unlKW fIt62RChZelyJiv12bePWL6SMMYIeWg1feEhm1Raa41eRX8WUnjTCs47f/jV+QvL 4PMTKENJkQX9VdJY/SmV3zYDxuCD2+i4fYPpyRT62sxcYKd6kdzMuc5AZ3NmU8ii 1+MdxD9TBbw5peY9lxPsnY7UPYga1haXaGDdSHEw6AB9YpNF+5+DJbM3sdtUY7gZ EogNP3ACDfeRiLQqRsDuEyN6VHXGD5E= -----END CERTIFICATE-----Generated at Fri Nov 22 04:26:07 2024 by rpki-client on console-fra.rpki-client.org