$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa File: c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa (raw, json) Hash identifier: 6Fxg6eUfDt/n6SpLwD7LnH1T83k0tpYnF/KkHxN6YWs= Subject key identifier: FA:43:0B:CE:4E:52:33:00:F5:E6:A7:EB:A1:D5:7A:0B:7A:6D:65:06 Certificate issuer: /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Certificate serial: 010D0C9F432858475EA62C83A9CA06E474E71F00 Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 394310 IP address blocks: 66.179.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:2c:83:a9:ca:06:e4:74:e7:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=4eb4f96f-5bbe-4502-9d5b-41c27e32a5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:9f:90:f0:c7:00:03:6e:38:69:49:88:c0: c5:6f:0f:dc:e6:e5:e1:01:31:d2:a2:6b:0f:36:1b: fe:e2:d9:94:5b:2e:44:5f:9d:c7:48:c7:47:0c:7e: f0:2f:43:ad:8b:fc:b3:b5:e4:5a:0d:04:3e:8e:85: 64:4b:64:1e:af:53:4d:82:31:ba:95:9c:70:7c:ac: f6:86:74:c7:c4:59:86:1d:88:b7:eb:75:79:da:64: 2d:fa:64:af:25:01:71:22:98:13:64:25:6a:86:6e: f0:a8:69:f1:32:8d:94:dc:7b:43:4b:94:10:b4:26: 9d:f8:25:b0:e9:9e:f6:28:11:3a:46:34:0c:5f:a9: 63:13:4c:f4:00:77:cf:02:00:35:ae:9b:64:be:e2: 07:b6:a1:37:d3:07:59:28:c1:7f:29:ff:74:bc:27: 6f:47:28:39:68:7a:8d:e5:87:d6:cd:b6:50:6d:b5: 5c:6d:f7:3a:e4:2d:83:d2:55:55:e8:a1:31:ce:1e: d5:72:a1:25:cc:61:50:a5:a8:a3:fc:42:26:d8:06: 7f:13:b9:ef:ad:1a:d1:55:3a:79:12:05:4c:f6:74: a2:dc:25:93:6a:69:a6:9b:e0:42:e9:77:49:e6:e4: 02:fb:db:5d:1e:77:12:26:58:4c:02:e8:78:77:81: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:43:0B:CE:4E:52:33:00:F5:E6:A7:EB:A1:D5:7A:0B:7A:6D:65:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/c9904f5f-4c5b-3c5e-b2b3-f87d7becd72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl X509v3 Authority Key Identifier: keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer sbgp-ipAddrBlock: critical IPv4: 66.179.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f0:2e:87:59:8c:fd:dd:a8:38:a2:42:9d:da:50:15:d1:8b: e1:d1:eb:4b:ca:b7:4d:c1:83:67:2b:78:5e:3b:c9:21:ed:57: d7:28:c9:b7:17:92:b2:96:aa:6a:18:38:eb:79:fc:91:69:80: c6:bf:57:19:7f:94:49:dd:0e:97:41:cf:95:e7:dc:7e:5a:68: 4b:53:95:94:d5:7f:66:cb:37:fd:08:93:e7:4e:de:0f:82:54: 25:a3:cb:2d:f7:6c:eb:d7:7a:40:4d:c8:a9:36:33:bc:26:21: 16:3e:66:60:9d:1f:93:20:2e:8e:c6:9c:b2:c8:94:51:78:4e: c5:bc:ca:9a:5b:92:92:6a:af:f4:df:53:5a:22:41:e2:b0:05: 83:b7:17:0f:5f:66:de:67:b2:6e:63:44:ec:e3:32:e6:fa:37: 9a:71:c5:06:6f:26:f6:96:7a:4d:15:73:cb:73:8e:4c:f2:a6: df:65:ec:62:46:40:99:46:70:4c:7b:01:aa:40:6b:83:1e:5b: e3:a8:24:f7:bb:6f:c3:00:d7:79:d4:b6:f0:3b:5f:e1:9a:dd: e5:bc:70:d2:74:58:81:b4:13:b5:7c:75:0e:91:44:ff:30:6d: d8:ef:01:cc:29:5b:52:5a:b5:5a:35:83:9d:82:20:30:92:cc: fb:68:e8:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepiyDqcoG5HTnHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5 ZTlhMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk NGViNGY5NmYtNWJiZS00NTAyLTlkNWItNDFjMjdlMzJhNWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WCfkPDHAANuOGlJiMDFbw/c5uXhATHSomsP Nhv+4tmUWy5EX53HSMdHDH7wL0Oti/yzteRaDQQ+joVkS2Qer1NNgjG6lZxwfKz2 hnTHxFmGHYi363V52mQt+mSvJQFxIpgTZCVqhm7wqGnxMo2U3HtDS5QQtCad+CWw 6Z72KBE6RjQMX6ljE0z0AHfPAgA1rptkvuIHtqE30wdZKMF/Kf90vCdvRyg5aHqN 5YfWzbZQbbVcbfc65C2D0lVV6KExzh7VcqElzGFQpaij/EIm2AZ/E7nvrRrRVTp5 EgVM9nSi3CWTammmm+BC6XdJ5uQC+9tdHncSJlhMAuh4d4FlJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpDC85OUjMA9ean66HVegt6bWUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjlj MzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvYzk5MDRmNWYtNGM1Yi0z YzVlLWIyYjMtZjg3ZDdiZWNkNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI5YzM4YmUtZGI1MS00ZDkxLWEz NjEtOTRiYTNiZmQ5ZTlhLzQyOWMzOGJlLWRiNTEtNGQ5MS1hMzYxLTk0YmEzYmZk OWU5YS5jcmwwHwYDVR0jBBgwFoAUOwreAHVyImja/ScA8cgfi8oFlzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJh M2JmZDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbwLodZjP3dqDiiQp3aUBXRi+HR60vKt03Bg2creF47ySHtV9coybcX krKWqmoYOOt5/JFpgMa/Vxl/lEndDpdBz5Xn3H5aaEtTlZTVf2bLN/0Ik+dO3g+C VCWjyy33bOvXekBNyKk2M7wmIRY+ZmCdH5MgLo7GnLLIlFF4TsW8yppbkpJqr/Tf U1oiQeKwBYO3Fw9fZt5nsm5jROzjMub6N5pxxQZvJvaWek0Vc8tzjkzypt9l7GJG QJlGcEx7AapAa4MeW+OoJPe7b8MA13nUtvA7X+Ga3eW8cNJ0WIG0E7V8dQ6RRP8w bdjvAcwpW1JatVo1g52CIDCSzPto6L8= -----END CERTIFICATE-----Generated at Sun Nov 24 18:29:21 2024 by rpki-client on console-ams.rpki-client.org