$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa File: 5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa (raw, json) Hash identifier: YxhkHWme6yhDFeIqSEtJZqSa9l7SfJFUf0aJPAvBOTs= Subject key identifier: F3:D3:49:21:E9:38:14:64:09:4D:05:9F:6D:8E:3C:24:39:2D:22:05 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584742BB42B4856B6A828A072800 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa Signing time: Thu 19 Sep 2024 01:00:31 +0000 ROA not before: Thu 19 Sep 2024 01:00:31 +0000 ROA not after: Wed 18 Dec 2024 02:00:31 +0000 asID: 23522 IP address blocks: 66.252.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:42:bb:42:b4:85:6b:6a:82:8a:07:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Sep 19 01:00:31 2024 GMT Not After : Dec 18 02:00:31 2024 GMT Subject: CN=1a685b26-4c1a-4b30-a394-58bf86e2212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:f3:57:d8:c0:99:fc:b7:0f:af:10:c3:d2: 97:54:76:bf:26:88:f7:4f:c7:5a:14:94:27:21:2b: be:b8:58:07:c7:3f:87:08:9d:a8:2f:05:a4:aa:e2: b5:8a:5f:d5:04:56:f0:24:f0:72:e0:7e:0b:27:f0: 23:33:15:84:5b:9e:40:e6:e1:81:68:fe:10:53:ef: 54:22:13:25:74:17:b7:8d:5a:2b:d3:cb:9b:26:5b: 58:ab:11:61:06:86:63:6b:4a:a2:b7:74:72:ba:98: 5c:58:2e:08:9e:39:e3:ea:8c:43:93:8c:9a:b8:8f: b0:3a:29:0b:5a:ad:19:f6:ca:73:9b:60:dc:92:d9: 05:2c:f2:51:98:cb:31:81:fa:31:68:e5:19:c6:61: ae:7d:e1:a1:45:9a:9f:f1:0a:df:be:c2:9c:ba:be: 2b:79:ef:8a:ea:d1:91:14:71:e8:8d:9f:c2:08:9d: c4:8e:7e:b6:6d:34:92:f8:65:ac:0a:f4:bf:12:cd: b5:c7:ce:81:5d:46:c8:1e:01:da:e1:c2:52:c8:36: fc:09:55:17:6b:03:1b:ac:39:c0:ba:79:29:59:42: 2a:4c:c2:fe:30:c4:0d:68:5e:e5:8c:e1:9a:df:01: 1e:10:8a:d3:99:71:a9:32:0b:07:af:f4:30:a1:59: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D3:49:21:E9:38:14:64:09:4D:05:9F:6D:8E:3C:24:39:2D:22:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/5d708eb2-b7bc-3ea1-a7d5-2e18f0f66f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv4: 66.252.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c8:2f:02:3b:2e:81:98:8b:19:28:60:1f:a0:da:15:13:cf: 6b:15:59:84:d8:89:ff:7e:5b:96:59:8c:86:44:04:ac:d1:28: 84:e8:91:59:3d:d1:ee:f6:08:9c:ef:55:db:51:e8:78:cc:1c: 5f:39:1f:7f:cc:45:28:43:58:ca:55:35:f1:48:03:43:b7:e7: 17:67:20:3e:09:89:a1:80:a6:40:e0:cb:73:16:e9:49:3e:4a: 54:c1:e0:c3:34:8e:5c:79:44:b3:ae:cb:86:b4:b7:9a:ac:ab: ad:33:02:6d:d4:35:0c:7a:c1:05:6e:61:c7:26:53:50:f9:7c: cb:80:5c:7e:3c:98:54:22:37:cf:2f:51:67:89:10:6e:33:65: 3f:46:56:56:46:7b:74:54:49:28:57:25:67:6f:67:3e:e5:e0: a9:b5:e4:8a:29:45:fb:d8:70:8a:35:68:09:b2:a7:53:9b:70: 1a:58:6e:43:28:10:ba:60:e0:b7:2f:a6:37:25:13:a8:ea:5f: 44:7c:b8:a2:c3:d0:d7:de:c8:43:11:91:fd:cc:42:ca:cd:20: 51:51:b6:30:c9:77:e0:0c:1f:ea:0a:24:4f:31:2e:23:04:f4: be:e4:f0:87:9e:44:e2:87:be:e2:d1:6c:65:80:df:5b:cf:27: 29:1a:1a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCu0K0hWtqgooHKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI0MDkxOTAxMDAzMVoXDTI0MTIxODAyMDAzMVowLzEtMCsGA1UEAxMk MWE2ODViMjYtNGMxYS00YjMwLWEzOTQtNThiZjg2ZTIyMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5TzV9jAmfy3D68Qw9KXVHa/Joj3T8daFJQn ISu+uFgHxz+HCJ2oLwWkquK1il/VBFbwJPBy4H4LJ/AjMxWEW55A5uGBaP4QU+9U IhMldBe3jVor08ubJltYqxFhBoZja0qit3RyuphcWC4Injnj6oxDk4yauI+wOikL Wq0Z9spzm2DcktkFLPJRmMsxgfoxaOUZxmGufeGhRZqf8QrfvsKcur4ree+K6tGR FHHojZ/CCJ3Ejn62bTSS+GWsCvS/Es21x86BXUbIHgHa4cJSyDb8CVUXawMbrDnA unkpWUIqTML+MMQNaF7ljOGa3wEeEIrTmXGpMgsHr/QwoVkv7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPTSSHpOBRkCU0Fn22OPCQ5LSIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNWQ3MDhlYjItYjdiYy0z ZWExLWE3ZDUtMmUxOGYwZjY2ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/ILwI7LoGYixkoYB+g2hUTz2sVWYTYif9+W5ZZjIZEBKzRKITokVk9 0e72CJzvVdtR6HjMHF85H3/MRShDWMpVNfFIA0O35xdnID4JiaGApkDgy3MW6Uk+ SlTB4MM0jlx5RLOuy4a0t5qsq60zAm3UNQx6wQVuYccmU1D5fMuAXH48mFQiN88v UWeJEG4zZT9GVlZGe3RUSShXJWdvZz7l4Km15IopRfvYcIo1aAmyp1ObcBpYbkMo ELpg4LcvpjclE6jqX0R8uKLD0NfeyEMRkf3MQsrNIFFRtjDJd+AMH+oKJE8xLiME 9L7k8IeeROKHvuLRbGWA31vPJykaGk0= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:53 2024 by rpki-client on console-fra.rpki-client.org