$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/90a16cc6-c906-37e6-9a02-609e41f06cdc.roa File: 90a16cc6-c906-37e6-9a02-609e41f06cdc.roa (raw, json) Hash identifier: qmBNDxgPC2YRq3yfdsB/7UALzoAjlsvI2gF2of38XxY= Subject key identifier: C6:BC:12:D6:C2:1F:48:3C:01:8E:EE:AE:6A:73:81:2B:07:8F:A8:1F Certificate issuer: /CN=e4b7d875-ab48-4302-be86-14ecc49104bb Certificate serial: 010D0C9F43285847CA3F7F294251859C14C1E380 Authority key identifier: B4:B1:E9:7F:80:D2:BB:F8:9D:87:46:68:05:2E:A7:20:A8:78:27:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/90a16cc6-c906-37e6-9a02-609e41f06cdc.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 64296 IP address blocks: 66.220.42.0/23 maxlen: 23 66.220.42.0/24 maxlen: 24 66.220.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/e4b7d875-ab48-4302-be86-14ecc49104bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/e4b7d875-ab48-4302-be86-14ecc49104bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7f:29:42:51:85:9c:14:c1:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b7d875-ab48-4302-be86-14ecc49104bb Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=515fe506-b4fd-49fd-9fe2-1f4ec5a95795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:ab:ca:5c:b1:aa:49:78:d4:89:26:f0:99: 26:f5:86:8e:83:a6:c5:af:b9:a9:02:e0:d2:bc:27: f5:f2:d2:53:cd:6b:8a:7e:51:0a:85:69:32:85:ba: 28:60:f9:90:86:5b:ed:0c:10:0f:ca:f8:b9:96:d1: 55:5c:4f:ce:b0:c7:48:92:b5:e0:1e:58:67:d4:c2: 54:52:08:2f:44:a8:c9:d2:1c:b4:0b:fe:8e:51:2f: 8e:bb:11:b5:5c:5e:1c:c7:79:3d:a3:04:90:79:4f: da:e2:07:db:dd:cd:02:f4:15:11:2d:8f:5d:ad:21: dc:91:87:86:0c:bb:f4:8a:d3:80:ad:d8:dc:cb:98: 06:b5:76:52:46:83:e9:3a:2f:b4:0b:ce:d7:29:61: 66:bf:36:81:54:39:9b:cf:a1:8d:58:46:57:3a:d1: 2d:c6:d5:25:8f:f1:c4:8f:8b:82:de:a1:4d:a3:65: c1:6f:3a:ba:9c:52:79:fd:a5:54:88:9b:78:b8:b8: 16:8c:e7:db:38:72:65:54:f6:4f:99:34:a1:0e:02: ed:4b:e7:0d:5a:b9:34:05:ce:6e:58:e4:fd:05:bc: 1a:57:3d:4b:f0:4e:d5:ff:ab:9c:55:d8:80:02:ab: a9:f2:7c:a5:45:22:6b:6f:d7:52:84:1e:7b:9f:26: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BC:12:D6:C2:1F:48:3C:01:8E:EE:AE:6A:73:81:2B:07:8F:A8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/90a16cc6-c906-37e6-9a02-609e41f06cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb/e4b7d875-ab48-4302-be86-14ecc49104bb.crl X509v3 Authority Key Identifier: keyid:B4:B1:E9:7F:80:D2:BB:F8:9D:87:46:68:05:2E:A7:20:A8:78:27:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4b7d875-ab48-4302-be86-14ecc49104bb.cer sbgp-ipAddrBlock: critical IPv4: 66.220.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:61:c0:a9:27:fe:54:95:9f:3e:b9:00:df:fb:5b:9c:3f:85: 92:2d:ed:a9:ef:07:6f:6a:da:e4:b8:d3:bf:27:64:e7:50:b9: cf:03:42:f5:59:41:e6:fd:0e:c3:7b:d4:92:e7:cf:6c:d2:13: 5d:2b:1e:32:1d:a8:1a:75:03:b6:4b:89:68:b7:32:32:4a:71: 39:fc:c1:32:67:b7:e2:db:b6:17:8a:ca:e1:37:b0:0c:b9:9a: b5:9f:22:5e:14:85:14:05:7f:76:53:03:83:e7:7a:cd:b9:bf: 4b:d5:4c:5c:c5:a2:56:02:23:72:1c:b9:59:49:75:62:c0:c1: 4a:f5:b2:c4:d1:26:c5:d2:19:a3:f1:6c:e9:5e:9f:2d:82:17: c4:f6:e4:c8:a8:4f:50:9c:e7:10:3c:04:e1:b6:14:01:be:b4: 93:4c:08:f0:a2:73:ce:c1:2c:cb:e3:15:01:ba:23:da:42:2b: 13:69:21:5f:fa:0c:07:cc:22:d0:26:60:72:76:1c:f8:16:26: 3a:72:b6:1b:3f:a5:41:ff:14:0a:1a:03:5a:69:9a:53:fa:2d: e4:c8:66:03:dc:e1:7a:3b:ea:79:4b:67:a1:85:af:79:3e:e4: a1:fc:29:76:86:11:03:68:65:ec:3b:9a:3c:cb:c0:74:ac:71: 09:c4:0d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP38pQlGFnBTB44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiN2Q4NzUtYWI0OC00MzAyLWJlODYtMTRlY2M0OTEw NGJiMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTE1ZmU1MDYtYjRmZC00OWZkLTlmZTItMWY0ZWM1YTk1Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iirylyxqkl41Ikm8Jkm9YaOg6bFr7mpAuDS vCf18tJTzWuKflEKhWkyhbooYPmQhlvtDBAPyvi5ltFVXE/OsMdIkrXgHlhn1MJU UggvRKjJ0hy0C/6OUS+OuxG1XF4cx3k9owSQeU/a4gfb3c0C9BURLY9drSHckYeG DLv0itOArdjcy5gGtXZSRoPpOi+0C87XKWFmvzaBVDmbz6GNWEZXOtEtxtUlj/HE j4uC3qFNo2XBbzq6nFJ5/aVUiJt4uLgWjOfbOHJlVPZPmTShDgLtS+cNWrk0Bc5u WOT9BbwaVz1L8E7V/6ucVdiAAqup8nylRSJrb9dShB57nya04QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa8EtbCH0g8AY7urmpzgSsHj6gfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNGI3 ZDg3NS1hYjQ4LTQzMDItYmU4Ni0xNGVjYzQ5MTA0YmIvOTBhMTZjYzYtYzkwNi0z N2U2LTlhMDItNjA5ZTQxZjA2Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTRiN2Q4NzUtYWI0OC00MzAyLWJl ODYtMTRlY2M0OTEwNGJiL2U0YjdkODc1LWFiNDgtNDMwMi1iZTg2LTE0ZWNjNDkx MDRiYi5jcmwwHwYDVR0jBBgwFoAUtLHpf4DSu/idh0ZoBS6nIKh4JzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNGI3ZDg3NS1hYjQ4LTQzMDItYmU4Ni0xNGVj YzQ5MTA0YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQtwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhhwKkn/lSVnz65AN/7W5w/hZIt7anvB29q2uS4078nZOdQuc8DQvVZ Qeb9DsN71JLnz2zSE10rHjIdqBp1A7ZLiWi3MjJKcTn8wTJnt+LbtheKyuE3sAy5 mrWfIl4UhRQFf3ZTA4Pnes25v0vVTFzFolYCI3IcuVlJdWLAwUr1ssTRJsXSGaPx bOleny2CF8T25MioT1Cc5xA8BOG2FAG+tJNMCPCic87BLMvjFQG6I9pCKxNpIV/6 DAfMItAmYHJ2HPgWJjpyths/pUH/FAoaA1ppmlP6LeTIZgPc4Xo76nlLZ6GFr3k+ 5KH8KXaGEQNoZew7mjzLwHSscQnEDd8= -----END CERTIFICATE-----Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org