$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa File: f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa (raw, json) Hash identifier: DBvB0iUld3Y5x+Px34Hi2PMbfoSMCKUihcaRqoM7fJE= Subject key identifier: 44:FF:D7:D7:E1:33:91:AA:29:05:17:AA:BD:02:E2:8F:73:27:22:C6 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F43285848405CEA619254C845D3F4EFB8 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa Signing time: Wed 18 Dec 2024 21:25:50 +0000 ROA not before: Wed 18 Dec 2024 21:25:50 +0000 ROA not after: Tue 18 Mar 2025 20:25:50 +0000 asID: 14618 IP address blocks: 66.114.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:5c:ea:61:92:54:c8:45:d3:f4:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Dec 18 21:25:50 2024 GMT Not After : Mar 18 20:25:50 2025 GMT Subject: CN=5cdd69cd-8121-4895-a0e9-da69571f1d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:96:89:c1:2b:1e:30:40:8b:52:38:8e:06: 05:6a:ea:68:f8:e0:99:3e:d5:37:fe:06:e8:cb:4b: a1:62:e6:40:48:4d:5b:a5:1e:c3:72:32:e9:9d:87: 92:26:01:48:49:94:b0:4e:92:26:24:d9:af:ad:9b: 09:97:fa:26:bc:84:ee:cf:92:0d:49:ba:45:7e:da: 2f:76:90:0e:42:45:2c:79:73:6b:d4:b3:f9:41:b6: 39:d6:4f:61:cc:fa:46:74:a5:dc:9c:a3:ba:af:b6: 0c:72:4e:86:f4:49:a4:17:a1:87:0a:53:b2:32:c6: 82:4b:59:7b:9f:76:c8:4e:44:62:29:0e:c9:11:c6: 39:3b:d6:43:29:db:7d:26:47:65:6b:91:9d:e5:23: 36:8e:e3:9d:64:55:75:cc:88:dd:91:67:fd:59:e7: 8c:98:7e:8c:46:40:1b:7d:dd:78:3f:e9:f8:89:83: ad:c3:2c:43:61:72:ad:21:70:7e:06:f8:f1:37:20: 29:1a:a7:98:02:8f:13:80:10:4c:92:3d:cb:ee:60: 4d:e6:75:a4:b9:73:3a:2f:6b:fb:90:6c:02:7e:c9: f3:99:6f:28:9e:1d:46:08:18:0d:1d:d6:49:00:32: a6:bd:88:78:9c:9b:3e:be:22:dc:04:fa:0f:21:34: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FF:D7:D7:E1:33:91:AA:29:05:17:AA:BD:02:E2:8F:73:27:22:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/f8b9e90b-cc80-3bbd-b475-11cb7e7cd6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv4: 66.114.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:15:8a:4e:e6:48:ad:c4:9e:6f:57:67:5b:df:42:ef:0e:2b: 1c:e8:42:86:88:c3:0c:f7:04:ab:86:20:d6:c4:48:0a:fe:ec: ab:05:aa:66:78:ba:0c:c3:12:f1:5d:ae:04:21:a4:b1:73:e5: 4c:f8:05:71:24:7f:90:66:64:7c:bf:6f:c4:7d:19:fa:ab:86: 47:2d:2d:6b:07:a0:f3:31:a3:42:9c:5a:f7:1d:ce:ed:bf:7f: 66:14:b7:42:3e:54:f2:dd:cf:19:71:f1:0a:22:a2:d4:48:06: 68:4f:88:8a:ec:e2:fa:7d:de:05:d6:d1:32:37:e3:8f:9d:d8: 49:32:af:5a:bb:01:ee:49:02:3c:a0:cf:83:56:89:a6:6e:26: 68:51:2f:bd:8d:49:90:75:c6:1a:39:5d:c7:04:5e:7e:0f:5a: 27:8a:a3:0f:da:1e:b7:d9:a5:58:a1:50:58:ef:ba:8a:45:9e: 78:ba:05:6b:6e:3e:0b:7b:5f:6f:87:d4:a7:64:24:cd:1c:8b: cb:9b:89:86:ce:7a:1d:d6:0e:f1:46:7b:18:e0:81:24:b0:73: 89:d7:2d:d4:f4:2f:06:2e:a0:96:bb:de:ab:6f:4c:f0:49:19: 31:e7:3e:be:2a:1a:0a:8c:f6:29:23:1a:f4:43:ea:ed:01:d7: 54:0e:64:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhAXOphklTIRdP077gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI0MTIxODIxMjU1MFoXDTI1MDMxODIwMjU1MFowLzEtMCsGA1UEAxMk NWNkZDY5Y2QtODEyMS00ODk1LWEwZTktZGE2OTU3MWYxZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeyWicErHjBAi1I4jgYFaupo+OCZPtU3/gbo y0uhYuZASE1bpR7DcjLpnYeSJgFISZSwTpImJNmvrZsJl/omvITuz5INSbpFftov dpAOQkUseXNr1LP5QbY51k9hzPpGdKXcnKO6r7YMck6G9EmkF6GHClOyMsaCS1l7 n3bITkRiKQ7JEcY5O9ZDKdt9Jkdla5Gd5SM2juOdZFV1zIjdkWf9WeeMmH6MRkAb fd14P+n4iYOtwyxDYXKtIXB+BvjxNyApGqeYAo8TgBBMkj3L7mBN5nWkuXM6L2v7 kGwCfsnzmW8onh1GCBgNHdZJADKmvYh4nJs+viLcBPoPITSsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET/19fhM5GqKQUXqr0C4o9zJyLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZjhiOWU5MGItY2M4MC0z YmJkLWI0NzUtMTFjYjdlN2NkNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIVik7mSK3Enm9XZ1vfQu8OKxzoQoaIwwz3BKuGINbESAr+7KsFqmZ4 ugzDEvFdrgQhpLFz5Uz4BXEkf5BmZHy/b8R9GfqrhkctLWsHoPMxo0KcWvcdzu2/ f2YUt0I+VPLdzxlx8QoiotRIBmhPiIrs4vp93gXW0TI344+d2Ekyr1q7Ae5JAjyg z4NWiaZuJmhRL72NSZB1xho5XccEXn4PWieKow/aHrfZpVihUFjvuopFnni6BWtu Pgt7X2+H1KdkJM0ci8ubiYbOeh3WDvFGexjggSSwc4nXLdT0LwYuoJa73qtvTPBJ GTHnPr4qGgqM9ikjGvRD6u0B11QOZMA= -----END CERTIFICATE-----Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org