$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa File: 38b0deb3-ebb4-3576-86af-67255c5388ed.roa (raw, json) Hash identifier: Atj+2/jWuLmonQRKjlwue3pwKy/zPsSgtsm0ofiMuPY= Subject key identifier: D8:6F:0F:30:13:A2:E4:1B:B8:E4:0B:85:15:C9:AA:FF:D6:3F:62:20 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584742BB42C9A8344B08F73B4680 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 32181 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:42:c9:a8:34:4b:08:f7:3b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=ece00213-282d-4343-9499-cd477fa40668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5d:8f:e6:c9:75:d0:4a:09:5b:fd:ff:15:78: 5c:a1:75:31:c1:0f:27:e0:cd:a9:a7:d3:66:ae:e9: 6f:55:6e:f0:33:8a:3e:3a:07:83:e7:7e:cb:ec:f2: b2:76:45:98:d8:0f:f2:53:d4:5b:23:98:d3:8d:ef: 4b:53:c4:13:49:10:6f:db:28:2e:70:8d:86:3b:27: 3f:1f:6d:d2:25:ed:4c:bb:48:c8:9d:4b:a0:fe:bb: ef:cd:28:24:a2:b8:eb:ba:ab:31:66:b3:cf:99:28: 17:4e:eb:88:49:0d:76:0a:1e:4e:41:1d:95:77:48: ca:f0:aa:bf:73:a5:88:c1:fe:c4:2b:0b:7d:90:80: ea:8c:05:41:9f:16:eb:db:98:d7:e4:8b:55:a7:69: a5:3e:62:72:a6:f5:db:74:9d:4d:d6:3f:25:09:68: e3:bb:60:c6:07:81:1a:9c:9a:7f:81:0b:ae:91:dd: 52:bf:41:26:62:b0:bc:32:d1:ae:71:ad:13:52:8f: a8:98:f5:eb:28:7d:7b:8c:22:3e:69:8c:d3:e4:91: 72:46:9f:85:15:c5:bf:3a:c6:20:79:33:a3:e9:dc: 27:59:4c:44:ea:8f:69:fc:d2:d4:fc:95:28:fd:94: 34:a8:6d:4d:e6:1f:5d:b7:d3:d7:c6:6f:71:18:78: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:0F:30:13:A2:E4:1B:B8:E4:0B:85:15:C9:AA:FF:D6:3F:62:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/38b0deb3-ebb4-3576-86af-67255c5388ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ac:66:7f:8c:e1:b9:b4:63:46:1d:91:8f:6f:64:94:a8:06: 00:ca:cc:29:26:9c:cd:30:2c:c6:19:bb:7c:ed:13:68:79:29: cb:e2:76:fd:b5:f0:80:ba:46:c5:02:8f:a6:f7:e8:5b:3d:08: 94:ec:fb:00:78:4e:43:82:4b:75:1c:0d:e3:c3:6a:a4:aa:5d: e6:b9:e0:72:6b:e4:8e:44:b3:dc:fa:de:5c:97:09:e5:82:a2: 4c:83:4a:96:20:55:b2:34:b3:0b:79:b0:2a:f8:5d:54:23:84: 0d:34:f3:8a:f9:a2:1c:a8:84:b2:27:7b:c8:fe:82:5d:81:1b: bb:ba:07:ee:74:20:7c:a2:c1:0c:ec:e4:ea:0e:6a:ea:5e:77: 54:cb:da:ef:bc:83:94:8b:12:c5:55:37:79:51:01:27:17:e3: 71:6c:c6:ef:a2:0c:1a:cc:1e:99:7b:55:04:02:04:9e:71:4d: 75:7f:62:67:7b:9a:75:50:81:52:22:74:db:9b:43:3d:7e:7b: ce:96:a7:29:29:1d:d1:ee:2d:d5:4a:75:a9:b4:4d:59:f5:fa: 10:4c:97:0e:af:3d:3e:7c:c3:bc:b2:60:1b:9f:c2:57:06:ee: 8c:17:c7:fc:d4:5c:3a:08:44:a9:35:0d:82:e7:a1:af:9d:62: 6c:9f:0b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0LJqDRLCPc7RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk ZWNlMDAyMTMtMjgyZC00MzQzLTk0OTktY2Q0NzdmYTQwNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA712P5sl10EoJW/3/FXhcoXUxwQ8n4M2pp9Nm rulvVW7wM4o+OgeD537L7PKydkWY2A/yU9RbI5jTje9LU8QTSRBv2ygucI2GOyc/ H23SJe1Mu0jInUug/rvvzSgkorjruqsxZrPPmSgXTuuISQ12Ch5OQR2Vd0jK8Kq/ c6WIwf7EKwt9kIDqjAVBnxbr25jX5ItVp2mlPmJypvXbdJ1N1j8lCWjju2DGB4Ea nJp/gQuukd1Sv0EmYrC8MtGuca0TUo+omPXrKH17jCI+aYzT5JFyRp+FFcW/OsYg eTOj6dwnWUxE6o9p/NLU/JUo/ZQ0qG1N5h9dt9PXxm9xGHg5RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhvDzATouQbuOQLhRXJqv/WP2IgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvMzhiMGRlYjMtZWJiNC0z NTc2LTg2YWYtNjcyNTVjNTM4OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2sZn+M4bm0Y0YdkY9vZJSoBgDKzCkmnM0wLMYZu3ztE2h5Kcvidv21 8IC6RsUCj6b36Fs9CJTs+wB4TkOCS3UcDePDaqSqXea54HJr5I5Es9z63lyXCeWC okyDSpYgVbI0swt5sCr4XVQjhA0084r5ohyohLIne8j+gl2BG7u6B+50IHyiwQzs 5OoOauped1TL2u+8g5SLEsVVN3lRAScX43Fsxu+iDBrMHpl7VQQCBJ5xTXV/Ymd7 mnVQgVIidNubQz1+e86WpykpHdHuLdVKdam0TVn1+hBMlw6vPT58w7yyYBufwlcG 7owXx/zUXDoIRKk1DYLnoa+dYmyfCws= -----END CERTIFICATE-----Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org