$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: pSX+C+5cWuAiTNCdmxKWOhcVMPMQhuufZ0fc0dem9ms= Subject key identifier: F4:7B:E1:C3:18:26:F9:E0:28:7A:4A:82:F7:0A:12:D2:20:F8:6C:0F Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F43285847D29F5A02C704D147582C0FE0 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Sat 09 Nov 2024 14:00:40 +0000 ROA not before: Sat 09 Nov 2024 14:00:40 +0000 ROA not after: Fri 07 Feb 2025 14:00:40 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d2:9f:5a:02:c7:04:d1:47:58:2c:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Nov 9 14:00:40 2024 GMT Not After : Feb 7 14:00:40 2025 GMT Subject: CN=1c1281a6-eee3-4562-90f7-d431d1b55f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:21:fc:56:2a:3d:df:7a:d4:8d:d0:03:6e: 5a:19:2e:9d:02:c5:23:79:b7:2b:e8:71:4c:8d:56: 8c:88:16:f9:ad:c0:08:96:60:3a:f0:ba:d9:8a:d7: 1e:d4:5d:52:90:a7:b1:9e:de:b5:f8:d8:d3:d6:24: 00:e9:25:fa:ed:73:f9:7d:c5:ef:26:28:92:f5:bf: 80:8d:26:77:9d:c8:28:3d:88:ee:24:02:3d:87:5f: 97:52:67:28:c7:42:c6:94:66:89:f4:be:48:67:aa: 60:a2:76:46:ac:b9:6f:04:2d:05:ab:d7:27:1b:e2: 99:bc:36:ca:91:47:ea:0f:51:c4:8b:b8:07:85:3a: cb:b0:37:aa:b1:c6:0e:f4:5f:c4:d7:c4:d8:20:92: c1:5c:f7:df:db:4a:5a:e3:c3:16:1c:32:1b:64:50: 05:fa:0a:4f:59:d3:5a:1b:0b:35:b5:04:f0:98:d5: 5b:d4:2b:0d:ad:b1:0a:ee:ca:90:f3:4e:fd:5f:7f: be:87:b3:35:1e:fa:17:58:7e:67:5f:e2:df:24:ef: 24:ea:bc:1a:c6:e1:7f:e9:65:01:30:5d:2a:a5:f0: a2:8a:a1:82:02:d5:4e:d1:f1:84:12:54:02:80:52: 9a:cb:f5:75:ff:93:4c:eb:e8:73:79:44:a6:d5:cf: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7B:E1:C3:18:26:F9:E0:28:7A:4A:82:F7:0A:12:D2:20:F8:6C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9d:1c:14:63:a6:66:88:34:9e:b7:9b:06:96:79:fb:c8:8a: c2:57:e7:79:cc:c2:a4:98:87:91:f2:15:45:b3:f5:0a:ad:8d: 4d:2f:e9:50:6d:89:f4:e3:8d:4b:88:0d:18:8c:83:2d:17:30: 5c:80:36:07:a0:9c:59:5f:4a:e5:7d:86:50:91:c6:e3:b4:5e: 89:4a:4d:c8:d8:18:ff:3d:cb:f2:20:63:f1:8b:1e:ed:42:32: 57:4c:4a:bb:b9:75:0d:2c:c9:29:81:ab:b6:71:5a:be:ce:52: 67:f5:ef:75:3d:a0:ba:79:e1:f5:23:9f:0c:50:4f:e3:0c:a5: c7:d9:d9:cd:c0:7d:fe:3f:3d:0c:bf:d5:b0:4a:0d:c7:62:23: 32:e8:41:37:fb:4b:33:2f:6c:60:01:1a:0b:7c:b6:95:29:8b: 4b:d8:43:0e:f6:97:b7:98:28:b6:5a:e6:df:df:6a:63:c7:8a: a2:99:bc:3e:0e:19:b1:8a:d1:c5:cc:26:97:3b:ce:55:3d:3d: 4e:29:00:2d:6e:37:fa:12:15:05:da:34:5b:3a:11:58:65:cf: 61:1e:f1:a1:ca:60:a6:6e:70:e1:bf:24:ee:8f:a4:34:12:d7: 37:ca:23:7e:2b:0f:0d:f2:d5:e3:d7:cc:c8:dd:99:a3:77:3b: bc:70:15:d8 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEfSn1oCxwTRR1gsD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk MWMxMjgxYTYtZWVlMy00NTYyLTkwZjctZDQzMWQxYjU1ZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO8h/FYqPd961I3QA25aGS6dAsUjebcr6HFM jVaMiBb5rcAIlmA68LrZitce1F1SkKexnt61+NjT1iQA6SX67XP5fcXvJiiS9b+A jSZ3ncgoPYjuJAI9h1+XUmcox0LGlGaJ9L5IZ6pgonZGrLlvBC0Fq9cnG+KZvDbK kUfqD1HEi7gHhTrLsDeqscYO9F/E18TYIJLBXPff20pa48MWHDIbZFAF+gpPWdNa Gws1tQTwmNVb1CsNrbEK7sqQ8079X3++h7M1HvoXWH5nX+LfJO8k6rwaxuF/6WUB MF0qpfCiiqGCAtVO0fGEElQCgFKay/V1/5NM6+hzeUSm1c+bNwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFPR74cMYJvngKHpKgvcKEtIg+GwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB2dHBRjpmaINJ63mwaWefvIisJX 53nMwqSYh5HyFUWz9QqtjU0v6VBtifTjjUuIDRiMgy0XMFyANgegnFlfSuV9hlCR xuO0XolKTcjYGP89y/IgY/GLHu1CMldMSru5dQ0sySmBq7ZxWr7OUmf173U9oLp5 4fUjnwxQT+MMpcfZ2c3Aff4/PQy/1bBKDcdiIzLoQTf7SzMvbGABGgt8tpUpi0vY Qw72l7eYKLZa5t/famPHiqKZvD4OGbGK0cXMJpc7zlU9PU4pAC1uN/oSFQXaNFs6 EVhlz2Ee8aHKYKZucOG/JO6PpDQS1zfKI34rDw3y1ePXzMjdmaN3O7xwFdg= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org