$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa File: fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa (raw, json) Hash identifier: G4JkLaTLPb4XO7nBAN/bPozYD9swWJNv5t1Ya6OBQs8= Subject key identifier: F3:D5:77:BE:71:7C:40:52:95:D2:F0:0F:85:E4:BC:C3:9D:90:62:8A Certificate issuer: /CN=ec9034a3-96a4-4b09-a2c9-7f75c1740d36 Certificate serial: 010D0C9F43285847D6CF4A3D51949952EAC14F80 Authority key identifier: D7:BE:84:9F:39:54:D9:00:21:0C:4F:C0:FD:CA:24:A1:7D:6E:47:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa Signing time: Mon 11 Nov 2024 02:00:27 +0000 ROA not before: Mon 11 Nov 2024 02:00:27 +0000 ROA not after: Sun 09 Feb 2025 02:00:27 +0000 asID: 27235 IP address blocks: 66.220.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d6:cf:4a:3d:51:94:99:52:ea:c1:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec9034a3-96a4-4b09-a2c9-7f75c1740d36 Validity Not Before: Nov 11 02:00:27 2024 GMT Not After : Feb 9 02:00:27 2025 GMT Subject: CN=5e77316d-40fa-4658-99a2-7d47e806d9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:8e:9e:8b:88:19:82:5b:6e:5e:e9:39:30: 1a:5b:12:4d:a5:0c:44:c7:07:0c:3d:51:df:ad:31: 30:cb:08:f3:6f:86:01:40:aa:a0:0a:13:64:ca:d1: 2c:60:53:35:cb:bf:5b:1f:1d:88:e5:8d:bd:5b:8d: 15:a1:87:f7:6e:48:5b:ed:8a:b5:96:15:a2:ee:fe: 1d:6a:03:73:5c:47:35:e8:02:9a:af:47:9c:f8:e0: ec:bb:57:fb:33:81:db:0c:cd:0e:07:5c:ac:e6:3e: e2:d9:19:76:b1:fd:f1:4e:95:eb:ed:ce:69:7b:0d: df:0e:e1:ce:08:0d:d4:fd:9c:fe:d5:25:b4:24:a6: 69:c8:e3:9b:6b:94:c6:7d:17:90:a1:cd:ea:1c:af: 97:f3:dd:fc:08:af:41:49:21:35:30:61:31:76:c8: 02:45:70:71:5f:ff:c4:36:f4:13:cc:bf:19:1a:1e: 9a:8b:88:cd:3e:27:fd:d3:d8:e6:2e:8f:1d:0b:a1: 04:42:4e:4d:5d:34:9a:e5:8a:96:35:26:b8:78:a2: 05:5f:73:c0:92:0b:66:a1:12:ba:c0:55:90:fb:57: 2f:83:83:39:bd:f4:be:d6:92:50:fa:2c:46:45:26: f7:89:77:90:ab:f5:e9:38:04:d1:e4:16:50:e6:97: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D5:77:BE:71:7C:40:52:95:D2:F0:0F:85:E4:BC:C3:9D:90:62:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/fee4cbf6-6a2b-3327-8a8a-f819c34b6e2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.crl X509v3 Authority Key Identifier: keyid:D7:BE:84:9F:39:54:D9:00:21:0C:4F:C0:FD:CA:24:A1:7D:6E:47:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec9034a3-96a4-4b09-a2c9-7f75c1740d36.cer sbgp-ipAddrBlock: critical IPv4: 66.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a6:c6:7a:a8:86:a5:61:9f:fe:46:35:83:0e:c5:0c:12:dd: f5:5a:95:2b:38:da:92:77:ee:28:a4:b1:af:99:94:81:a5:6b: 0d:ad:b4:7a:cf:28:48:e6:14:5e:14:fa:e1:28:72:13:44:07: 1d:1d:98:89:2e:69:19:b4:1f:39:7f:83:43:57:76:87:66:83: d3:9f:3a:47:35:c3:c2:47:49:1b:54:d6:11:f5:a8:e0:5e:dd: 8b:4b:6d:fe:e9:32:e9:f3:04:38:05:e4:06:97:05:95:7f:26: 43:23:b0:8c:1a:c0:28:46:99:0d:55:b5:86:9e:00:7e:4c:9c: 9f:26:b2:1e:0d:83:18:fc:ef:87:97:d9:1d:7a:69:92:e7:55: 25:9b:8f:67:7d:bd:6b:84:4a:1e:f6:03:cb:87:95:ee:c8:40: 44:58:bc:e2:6d:82:7b:7e:90:b6:78:a5:62:b0:74:ed:d6:f4: ce:a7:86:d5:ca:21:f1:c2:c3:1a:3c:c8:1f:61:3d:31:59:11: 98:79:3c:a7:37:b9:1d:77:28:8f:d2:bc:8a:c3:f2:40:eb:66: e0:cf:1b:b5:8e:6e:71:9e:de:23:9a:c2:52:cb:95:b5:c0:b9: d3:56:e0:55:15:21:c7:bd:a6:1b:d7:00:aa:18:23:21:63:c9: 55:94:c4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfWz0o9UZSZUurBT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM5MDM0YTMtOTZhNC00YjA5LWEyYzktN2Y3NWMxNzQw ZDM2MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk NWU3NzMxNmQtNDBmYS00NjU4LTk5YTItN2Q0N2U4MDZkOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMuOnouIGYJbbl7pOTAaWxJNpQxExwcMPVHf rTEwywjzb4YBQKqgChNkytEsYFM1y79bHx2I5Y29W40VoYf3bkhb7Yq1lhWi7v4d agNzXEc16AKar0ec+ODsu1f7M4HbDM0OB1ys5j7i2Rl2sf3xTpXr7c5pew3fDuHO CA3U/Zz+1SW0JKZpyOOba5TGfReQoc3qHK+X8938CK9BSSE1MGExdsgCRXBxX//E NvQTzL8ZGh6ai4jNPif909jmLo8dC6EEQk5NXTSa5YqWNSa4eKIFX3PAkgtmoRK6 wFWQ+1cvg4M5vfS+1pJQ+ixGRSb3iXeQq/XpOATR5BZQ5pfpnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPVd75xfEBSldLwD4XkvMOdkGKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzkw MzRhMy05NmE0LTRiMDktYTJjOS03Zjc1YzE3NDBkMzYvZmVlNGNiZjYtNmEyYi0z MzI3LThhOGEtZjgxOWMzNGI2ZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM5MDM0YTMtOTZhNC00YjA5LWEy YzktN2Y3NWMxNzQwZDM2L2VjOTAzNGEzLTk2YTQtNGIwOS1hMmM5LTdmNzVjMTc0 MGQzNi5jcmwwHwYDVR0jBBgwFoAU176EnzlU2QAhDE/A/cokoX1uR80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzkwMzRhMy05NmE0LTRiMDktYTJjOS03Zjc1 YzE3NDBkMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQtyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqmxnqohqVhn/5GNYMOxQwS3fValSs42pJ37iiksa+ZlIGlaw2ttHrP KEjmFF4U+uEochNEBx0dmIkuaRm0Hzl/g0NXdodmg9OfOkc1w8JHSRtU1hH1qOBe 3YtLbf7pMunzBDgF5AaXBZV/JkMjsIwawChGmQ1VtYaeAH5MnJ8msh4Ngxj874eX 2R16aZLnVSWbj2d9vWuESh72A8uHle7IQERYvOJtgnt+kLZ4pWKwdO3W9M6nhtXK IfHCwxo8yB9hPTFZEZh5PKc3uR13KI/SvIrD8kDrZuDPG7WObnGe3iOawlLLlbXA udNW4FUVIce9phvXAKoYIyFjyVWUxO8= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:27 2024 by rpki-client on console-ams.rpki-client.org