$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/68cf5ac7-9f4d-3f17-a760-5bba7b54dc71.roa File: 68cf5ac7-9f4d-3f17-a760-5bba7b54dc71.roa (raw, json) Hash identifier: QBI/IGp1asWZ0WqONJp4nOoUBCSLfGmbPjp/COsv8d8= Subject key identifier: D2:BE:66:F2:62:F3:AA:99:70:0D:E1:56:0C:FA:B2:A5:B5:AA:55:68 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285847CA9ABA5CD25863FA5383FD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/68cf5ac7-9f4d-3f17-a760-5bba7b54dc71.roa Signing time: Wed 06 Nov 2024 17:05:00 +0000 ROA not before: Wed 06 Nov 2024 17:05:00 +0000 ROA not after: Tue 04 Feb 2025 17:05:00 +0000 asID: 203 IP address blocks: 66.54.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:9a:ba:5c:d2:58:63:fa:53:83:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 6 17:05:00 2024 GMT Not After : Feb 4 17:05:00 2025 GMT Subject: CN=3f7414ca-afc2-46f4-b523-5ff70a421e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:4a:ed:8f:5b:44:88:2c:67:3f:d2:fc:41: b5:0e:05:86:e1:d3:d6:12:3c:bb:ed:3f:14:39:75: 92:86:79:d6:bf:aa:03:33:60:0f:96:06:a5:89:86: 6d:23:d6:c6:c6:b4:fc:63:21:3a:c6:f5:51:4e:d2: ba:21:84:7e:7b:ac:e1:2c:9c:af:e4:4f:36:b2:f0: af:cf:22:3d:df:25:8b:1c:a7:16:25:ce:1d:88:4b: c3:3b:33:56:ab:d9:15:5b:a5:7d:98:fa:cd:f6:ac: e7:4f:f9:11:2a:1e:ef:70:76:51:94:62:75:99:98: 10:c5:4b:17:9e:e9:01:a1:ae:4c:48:74:88:15:c2: fb:b1:32:1f:6e:fd:c2:01:41:b6:0d:b8:b3:ea:eb: 5b:36:2a:47:1b:ea:d1:cf:08:df:4d:bc:f0:a7:50: b7:64:76:e4:ef:70:1d:ad:25:29:fe:48:7b:17:39: f1:6d:49:f7:25:50:cf:26:a2:7f:94:73:b1:61:b1: 36:a4:6a:a7:ce:be:5e:49:dd:26:5c:a7:12:5e:c4: fa:a5:83:c1:d0:cc:62:42:51:92:6e:c5:21:b7:7a: aa:3e:d3:5a:88:ba:33:0b:86:79:84:92:86:48:f1: 6c:98:09:d3:a2:39:83:3b:00:d4:8f:7c:02:9a:9b: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:66:F2:62:F3:AA:99:70:0D:E1:56:0C:FA:B2:A5:B5:AA:55:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/68cf5ac7-9f4d-3f17-a760-5bba7b54dc71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:24:14:1f:bd:a1:a2:72:3a:62:62:49:6c:6c:8e:1f:4a:83: 7f:10:43:64:57:8b:dd:1f:8f:ad:f7:c5:20:ef:2c:a3:b6:b7: d3:44:f6:9a:5a:cf:02:45:66:a6:58:d0:3a:5f:f6:35:23:c3: a2:a8:95:1f:90:95:d6:0d:d2:84:cf:56:04:91:ea:63:21:e1: b8:22:1c:03:e9:a5:89:3b:77:13:9e:5c:42:8b:71:e9:39:ee: b2:df:65:30:7d:ba:cd:d1:46:7c:92:c4:29:58:a6:7e:12:c7: 29:d3:ef:28:c7:16:ed:b5:c0:51:ea:72:23:66:5b:24:6e:27: 8e:16:5e:7c:22:24:df:d4:5f:4f:04:85:63:41:b6:b3:0b:cf: c0:94:20:2d:a4:d8:b7:f4:29:98:d2:ae:9f:fe:80:25:9b:09: f8:0d:67:a7:74:73:a4:52:9e:a2:41:b2:5d:8d:52:41:57:41: 29:35:6f:b8:3d:c4:4b:e9:07:c7:bc:69:79:3f:c7:32:b7:77: a4:7e:8e:d2:0b:79:6c:a9:64:dd:6b:0f:1d:06:b8:63:04:7f: cf:54:b9:c2:5c:e5:5d:8f:04:59:54:f2:b1:fa:2c:4c:1c:59: de:1a:3a:b4:ca:f5:14:ab:17:89:bf:a7:81:75:73:75:c9:8b: 6c:5f:f8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKmrpc0lhj+lOD/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTEwNjE3MDUwMFoXDTI1MDIwNDE3MDUwMFowLzEtMCsGA1UEAxMk M2Y3NDE0Y2EtYWZjMi00NmY0LWI1MjMtNWZmNzBhNDIxZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7RK7Y9bRIgsZz/S/EG1DgWG4dPWEjy77T8U OXWShnnWv6oDM2APlgaliYZtI9bGxrT8YyE6xvVRTtK6IYR+e6zhLJyv5E82svCv zyI93yWLHKcWJc4diEvDOzNWq9kVW6V9mPrN9qznT/kRKh7vcHZRlGJ1mZgQxUsX nukBoa5MSHSIFcL7sTIfbv3CAUG2Dbiz6utbNipHG+rRzwjfTbzwp1C3ZHbk73Ad rSUp/kh7FznxbUn3JVDPJqJ/lHOxYbE2pGqnzr5eSd0mXKcSXsT6pYPB0MxiQlGS bsUht3qqPtNaiLozC4Z5hJKGSPFsmAnTojmDOwDUj3wCmps2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK+ZvJi86qZcA3hVgz6sqW1qlVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjhjZjVhYzctOWY0ZC0z ZjE3LWE3NjAtNWJiYTdiNTRkYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgkFB+9oaJyOmJiSWxsjh9Kg38QQ2RXi90fj633xSDvLKO2t9NE9ppa zwJFZqZY0Dpf9jUjw6KolR+QldYN0oTPVgSR6mMh4bgiHAPppYk7dxOeXEKLcek5 7rLfZTB9us3RRnySxClYpn4SxynT7yjHFu21wFHqciNmWyRuJ44WXnwiJN/UX08E hWNBtrMLz8CUIC2k2Lf0KZjSrp/+gCWbCfgNZ6d0c6RSnqJBsl2NUkFXQSk1b7g9 xEvpB8e8aXk/xzK3d6R+jtILeWypZN1rDx0GuGMEf89UucJc5V2PBFlU8rH6LEwc Wd4aOrTK9RSrF4m/p4F1c3XJi2xf+KY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:43 2024 by rpki-client on console-fra.rpki-client.org