$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa File: 7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa (raw, json) Hash identifier: puIE/6ZOEjJiVkqbfxhISBITY9l8gb4Y3J1kMO9N8lo= Subject key identifier: EA:42:FC:63:C0:1D:9D:18:9C:EB:BD:EE:B8:CF:9D:95:39:65:D8:7B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285847DC649C7972B5846247BEF280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa Signing time: Wed 13 Nov 2024 02:00:28 +0000 ROA not before: Wed 13 Nov 2024 02:00:28 +0000 ROA not after: Tue 11 Feb 2025 02:00:28 +0000 asID: 852 IP address blocks: 66.222.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:64:9c:79:72:b5:84:62:47:be:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Nov 13 02:00:28 2024 GMT Not After : Feb 11 02:00:28 2025 GMT Subject: CN=e81fc62c-bd3a-46f7-b8ec-c005acca6cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:51:21:52:99:b1:2c:b0:6e:23:9b:98:64: 0b:98:59:06:11:6b:ca:b6:17:72:73:9c:5f:b4:56: 70:2e:78:99:a0:b2:f1:ad:bd:91:21:c0:ab:68:84: 71:69:8d:9a:e3:53:48:a1:6e:5f:88:ce:48:50:96: 26:56:0e:c2:e8:08:e0:10:6b:2b:b3:64:7f:c2:ef: 57:cd:32:f6:ed:0b:ce:48:ed:eb:81:ba:96:ad:84: f3:ed:1d:38:80:9d:2f:fc:18:67:6c:61:98:e9:c0: cc:27:c8:56:5c:e5:8d:c2:27:e8:ca:4b:f3:52:e6: 11:2f:99:61:f0:34:c6:d2:69:47:03:ee:26:e8:6c: b3:0b:2b:99:8c:79:3b:99:ff:7a:d6:92:42:9b:79: b6:92:00:84:28:0b:5c:b2:6a:4e:a5:9b:49:81:f3: 36:8d:98:16:2d:69:4f:f5:86:8c:9f:d4:b8:e4:84: da:db:97:49:14:d1:dd:dd:bf:39:64:b4:f6:a9:bd: 6c:15:98:46:41:33:93:31:f9:37:74:3f:c9:b6:f3: cd:10:3d:d7:85:26:26:49:44:76:3d:34:77:45:67: ba:41:39:5b:20:25:20:b0:54:2f:72:1f:c5:8b:67: d2:71:8f:f5:c2:b6:11:9d:5d:89:4d:eb:12:e3:67: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:42:FC:63:C0:1D:9D:18:9C:EB:BD:EE:B8:CF:9D:95:39:65:D8:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7dafc679-2b1e-3e19-8a8c-8fc838538a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 66.222.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e7:ba:e6:46:91:ac:8e:6e:1a:77:25:e9:ec:96:20:26:c8: 8f:5f:4c:e9:07:6b:e9:38:f5:c7:ca:da:47:e3:da:bc:e0:63: 15:1a:19:54:79:dd:11:ef:ed:ce:49:e7:89:62:70:24:ef:1c: b8:fb:cd:d4:58:db:ca:b9:03:1e:a1:8d:aa:5f:76:44:17:59: ce:be:04:8f:08:37:99:c5:4b:5f:dc:8d:78:cd:08:44:aa:df: 85:54:8b:cf:df:27:58:b9:6f:ab:14:19:84:69:99:f3:6c:33: 97:b3:13:6f:d0:2d:f5:f7:7e:d8:a8:87:91:18:6f:75:41:ce: db:db:b8:c4:53:af:cf:79:be:bb:c3:49:65:02:a8:c7:6b:86: 94:28:4b:51:3a:d5:df:76:2e:2b:f6:ec:ab:e1:7c:66:77:6b: ff:41:d8:35:4a:6c:7d:e2:37:6c:28:4a:46:ab:c5:fa:28:b6: 99:0a:16:06:29:d5:96:a5:5d:b4:84:17:e4:75:22:7e:d5:74: 2d:e9:88:b7:02:39:67:73:69:ca:c9:0c:04:93:06:95:2c:1a: b3:99:d7:27:f9:3f:c1:ea:2b:f6:3f:14:e5:3f:ce:34:8a:5d: 07:91:8d:5b:81:fa:8c:71:7a:f6:c2:0a:24:b4:be:23:bf:1c: f2:ce:af:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZJx5crWEYke+8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk ZTgxZmM2MmMtYmQzYS00NmY3LWI4ZWMtYzAwNWFjY2E2Y2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaRRIVKZsSywbiObmGQLmFkGEWvKthdyc5xf tFZwLniZoLLxrb2RIcCraIRxaY2a41NIoW5fiM5IUJYmVg7C6AjgEGsrs2R/wu9X zTL27QvOSO3rgbqWrYTz7R04gJ0v/BhnbGGY6cDMJ8hWXOWNwifoykvzUuYRL5lh 8DTG0mlHA+4m6GyzCyuZjHk7mf961pJCm3m2kgCEKAtcsmpOpZtJgfM2jZgWLWlP 9YaMn9S45ITa25dJFNHd3b85ZLT2qb1sFZhGQTOTMfk3dD/JtvPNED3XhSYmSUR2 PTR3RWe6QTlbICUgsFQvch/Fi2fScY/1wrYRnV2JTesS42fHvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpC/GPAHZ0YnOu97rjPnZU5Zdh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2RhZmM2NzktMmIxZS0z ZTE5LThhOGMtOGZjODM4NTM4YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQt6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbnuuZGkayObhp3JensliAmyI9fTOkHa+k49cfK2kfj2rzgYxUaGVR5 3RHv7c5J54licCTvHLj7zdRY28q5Ax6hjapfdkQXWc6+BI8IN5nFS1/cjXjNCESq 34VUi8/fJ1i5b6sUGYRpmfNsM5ezE2/QLfX3ftioh5EYb3VBztvbuMRTr895vrvD SWUCqMdrhpQoS1E61d92Liv27KvhfGZ3a/9B2DVKbH3iN2woSkarxfootpkKFgYp 1ZalXbSEF+R1In7VdC3piLcCOWdzacrJDASTBpUsGrOZ1yf5P8HqK/Y/FOU/zjSK XQeRjVuB+oxxevbCCiS0viO/HPLOryk= -----END CERTIFICATE-----Generated at Mon Nov 25 19:19:36 2024 by rpki-client on console-ams.rpki-client.org