$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa File: ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa (raw, json) Hash identifier: sgaNuRZjkonHh3khEQHr8lo2S16w1m9yCrpPJSi5EmQ= Subject key identifier: C2:84:F8:AA:74:A7:6C:0F:07:88:94:6D:B0:58:19:78:74:36:6B:4C Certificate issuer: /CN=654e0ef8-ac77-456b-9a63-98fdb228488b Certificate serial: 010D0C9F43285847643B6EA1E10D31DDE983F7C0 Authority key identifier: 20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa Signing time: Tue 01 Oct 2024 01:00:31 +0000 ROA not before: Tue 01 Oct 2024 01:00:31 +0000 ROA not after: Mon 30 Dec 2024 02:00:31 +0000 asID: 400404 IP address blocks: 66.71.208.0/21 maxlen: 24 96.45.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:3b:6e:a1:e1:0d:31:dd:e9:83:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654e0ef8-ac77-456b-9a63-98fdb228488b Validity Not Before: Oct 1 01:00:31 2024 GMT Not After : Dec 30 02:00:31 2024 GMT Subject: CN=3ba81d1a-cbe8-4126-bafc-407b6e410874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:76:be:78:30:d5:88:74:1b:a5:01:57:9a: 0f:14:ae:2a:cf:ae:d8:b5:08:2c:92:af:51:6b:a6: bd:cc:25:81:4e:28:03:5a:8b:c9:a2:20:bb:19:f0: b5:d0:9d:b4:58:ed:5f:49:49:73:74:16:90:aa:45: 1a:e3:2a:5f:ec:08:20:09:d6:ab:bc:a8:65:a5:c2: 8a:aa:1f:4d:0b:74:d4:f2:ab:98:98:73:fe:07:78: 9e:73:3d:06:88:e7:3f:94:b7:e9:45:11:e1:25:4d: 0e:49:17:2a:80:69:48:5d:79:2b:61:85:a3:09:ea: 0c:d4:48:77:5e:cc:a7:91:1f:b7:2a:1f:55:ec:83: 42:c5:ad:bf:cf:7e:ba:da:da:52:c4:a8:62:12:73: ce:72:56:16:e4:06:17:39:71:7a:ae:3a:06:a5:6e: 12:a6:cd:ca:92:7f:a8:ca:3d:6d:be:33:e1:92:75: 13:6d:7c:98:f8:9a:11:d0:50:db:70:6f:47:62:92: bd:ec:d4:f3:40:57:d4:ce:27:71:55:3f:b5:a3:a6: 4c:29:eb:ab:f5:86:37:b1:89:27:4c:07:43:d4:9e: 1e:83:bb:21:23:9e:9b:03:64:69:64:b1:27:36:1e: 23:89:b6:b0:f6:87:74:bc:77:64:4d:db:f1:10:6e: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:84:F8:AA:74:A7:6C:0F:07:88:94:6D:B0:58:19:78:74:36:6B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/ffa34e15-4eca-341b-a5d1-96d5143b05b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b/654e0ef8-ac77-456b-9a63-98fdb228488b.crl X509v3 Authority Key Identifier: keyid:20:80:0A:96:BA:42:3C:E7:7D:BC:50:BB:B4:20:27:67:E2:88:5C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/654e0ef8-ac77-456b-9a63-98fdb228488b.cer sbgp-ipAddrBlock: critical IPv4: 66.71.208.0/21 96.45.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e7:a9:20:f5:f7:85:51:87:5a:aa:08:87:83:13:b0:51:69: 63:af:bc:2f:13:5c:30:e4:52:e2:96:8a:f3:af:74:d2:66:ae: ac:d8:c1:d5:ab:43:86:12:a7:34:d0:7e:8a:0f:4b:3e:ba:20: fa:af:04:df:4c:43:fc:5c:9a:58:9f:a5:37:00:a5:0b:98:0e: 44:45:b0:b4:55:0b:4b:a1:f1:13:83:1f:fa:85:f7:d4:72:05: e2:af:e9:29:87:44:84:18:c2:6e:87:13:c4:24:2e:63:30:d4: fd:20:dc:cf:d0:73:23:e2:00:3b:cf:89:07:47:ca:43:79:a6: 26:49:7b:f8:55:34:68:a5:53:e9:fb:b5:ec:0d:4d:db:e4:cd: 4a:a4:22:82:61:8d:06:8d:a8:21:03:4b:e4:c4:a2:68:f1:e6: 08:b4:0a:50:27:19:52:79:c8:63:b7:1d:c3:2d:68:31:df:f7: 26:fe:4a:b1:c2:1c:ce:2a:85:e0:b4:7d:f0:67:32:d0:61:8c: 29:1e:d8:dc:e5:11:60:58:a0:dd:22:18:92:a4:93:af:ff:de: 6b:ff:dd:0a:bc:92:11:09:98:e7:eb:3d:3e:4a:8a:3b:9f:f2: 3b:1b:70:4d:ef:fa:38:a7:c8:dd:38:83:b0:99:45:d6:89:2f: a8:84:16:dc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEdkO26h4Q0x3emD98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU0ZTBlZjgtYWM3Ny00NTZiLTlhNjMtOThmZGIyMjg0 ODhiMB4XDTI0MTAwMTAxMDAzMVoXDTI0MTIzMDAyMDAzMVowLzEtMCsGA1UEAxMk M2JhODFkMWEtY2JlOC00MTI2LWJhZmMtNDA3YjZlNDEwODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd12vngw1Yh0G6UBV5oPFK4qz67YtQgskq9R a6a9zCWBTigDWovJoiC7GfC10J20WO1fSUlzdBaQqkUa4ypf7AggCdarvKhlpcKK qh9NC3TU8quYmHP+B3iecz0GiOc/lLfpRRHhJU0OSRcqgGlIXXkrYYWjCeoM1Eh3 XsynkR+3Kh9V7INCxa2/z3662tpSxKhiEnPOclYW5AYXOXF6rjoGpW4Sps3Kkn+o yj1tvjPhknUTbXyY+JoR0FDbcG9HYpK97NTzQFfUzidxVT+1o6ZMKeur9YY3sYkn TAdD1J4eg7shI56bA2RpZLEnNh4jibaw9od0vHdkTdvxEG5IsQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMKE+Kp0p2wPB4iUbbBYGXh0NmtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRl MGVmOC1hYzc3LTQ1NmItOWE2My05OGZkYjIyODQ4OGIvZmZhMzRlMTUtNGVjYS0z NDFiLWE1ZDEtOTZkNTE0M2IwNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjU0ZTBlZjgtYWM3Ny00NTZiLTlh NjMtOThmZGIyMjg0ODhiLzY1NGUwZWY4LWFjNzctNDU2Yi05YTYzLTk4ZmRiMjI4 NDg4Yi5jcmwwHwYDVR0jBBgwFoAUIIAKlrpCPOd9vFC7tCAnZ+KIXMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTRlMGVmOC1hYzc3LTQ1NmItOWE2My05OGZk YjIyODQ4OGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQkfQAwQE YC2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABPnqSD194VRh1qqCIeDE7BRaWOvvC8TXDDkUuKWivOvdNJm rqzYwdWrQ4YSpzTQfooPSz66IPqvBN9MQ/xcmlifpTcApQuYDkRFsLRVC0uh8ROD H/qF99RyBeKv6SmHRIQYwm6HE8QkLmMw1P0g3M/QcyPiADvPiQdHykN5piZJe/hV NGilU+n7tewNTdvkzUqkIoJhjQaNqCEDS+TEomjx5gi0ClAnGVJ5yGO3HcMtaDHf 9yb+SrHCHM4qheC0ffBnMtBhjCke2NzlEWBYoN0iGJKkk6//3mv/3Qq8khEJmOfr PT5Kijuf8jsbcE3v+jinyN04g7CZRdaJL6iEFtw= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org