$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/a540069a-5db1-3f93-98a4-d652a0fc92ab.roa File: a540069a-5db1-3f93-98a4-d652a0fc92ab.roa (raw, json) Hash identifier: PvBehbXr8dhbPO54mn1fSsbBFCTKJ63WaXTkMdfZJEU= Subject key identifier: 76:84:9C:EC:46:25:65:90:4E:48:D1:C7:81:66:78:FC:7F:BD:1A:52 Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F432858479AABEE153CC44CAF50313F00 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/a540069a-5db1-3f93-98a4-d652a0fc92ab.roa Signing time: Sun 20 Oct 2024 13:00:42 +0000 ROA not before: Sun 20 Oct 2024 13:00:42 +0000 ROA not after: Sat 18 Jan 2025 14:00:42 +0000 asID: 16509 IP address blocks: 66.197.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9a:ab:ee:15:3c:c4:4c:af:50:31:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Oct 20 13:00:42 2024 GMT Not After : Jan 18 14:00:42 2025 GMT Subject: CN=24122b8b-4db5-47c0-b896-8dec9fb9e7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:bb:c9:cb:5b:df:b0:53:1c:a3:82:ac:44: 29:da:ab:ce:7b:48:23:ff:49:65:07:fe:f8:25:4c: c2:81:75:52:9b:27:4e:35:38:98:ce:a2:35:b8:f6: d8:ef:8e:1d:f1:cc:12:66:d8:0c:19:8d:a9:5b:62: 6e:76:d4:9e:e8:b0:ba:e4:1f:3b:e9:11:69:53:f4: 99:43:42:e1:c5:ee:4c:c3:10:9b:eb:f3:94:cb:bb: ce:65:85:0b:bc:da:8e:16:f1:04:5a:64:2f:0d:ca: 9b:a8:b8:bb:5a:55:58:1e:1b:3a:da:69:5e:8c:8d: b6:37:3b:20:25:c8:79:08:1c:f3:8a:d5:d8:19:b0: 5a:23:8f:b5:c3:5e:a4:39:24:62:06:c1:2e:74:f3: e0:5f:7c:e3:f1:a5:29:7b:69:2e:73:91:5b:b1:dc: ec:ee:51:e0:9f:da:63:60:20:1e:56:7f:14:37:46: d3:47:e3:1d:42:94:0d:b5:34:e3:d5:b7:2e:70:85: 64:e7:30:06:d3:14:d0:e7:31:3a:99:41:07:ab:7b: 00:b0:0f:27:5f:4e:35:36:90:ad:31:4e:f9:4b:42: 55:06:83:8f:48:59:00:97:89:b5:4b:ed:00:c1:6b: ee:08:3b:a5:16:c9:86:e5:e9:b6:b1:92:d7:c8:f0: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:9C:EC:46:25:65:90:4E:48:D1:C7:81:66:78:FC:7F:BD:1A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/a540069a-5db1-3f93-98a4-d652a0fc92ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 66.197.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2e:21:b9:1c:9e:8c:0b:65:9b:02:65:81:40:39:ad:72:84: 99:10:62:0d:05:64:5f:88:b3:01:8d:cd:34:00:dd:77:01:26: e3:a9:88:38:22:ff:4b:ae:89:2b:a0:8e:f3:dd:23:f6:9c:bd: 07:76:2e:2e:f1:ac:a8:4c:8f:89:f4:83:ad:5a:37:3d:1a:ce: b5:27:23:be:2b:00:3b:2f:42:53:eb:6e:71:40:de:a4:b8:07: 9a:d9:db:05:77:53:98:bf:db:04:2b:b2:d3:2a:ca:0e:7b:28: e8:00:97:ad:8a:dd:08:f1:5b:44:53:0c:c1:09:86:cf:e9:40: 65:6f:e9:e4:20:35:96:69:d7:95:55:36:09:09:81:76:03:76: c5:ae:d5:69:06:ce:6f:05:8a:c7:a1:4a:47:11:09:6e:fa:cc: 68:d0:57:a5:fc:61:a3:8e:a8:f5:64:4c:fc:3f:f3:e3:72:e8: b7:02:8c:ea:c2:d9:e2:bd:1a:0c:50:16:f8:9a:1b:9b:13:0c: 3f:e5:0a:45:dd:ea:ca:e4:90:20:52:2a:91:16:5f:8b:48:70: 2a:d7:60:f9:81:fd:ea:f1:f2:6b:4c:8a:de:4e:4f:a1:3e:ae: 7e:0b:8d:9d:62:87:d8:1e:55:e6:94:c1:38:84:7b:a1:27:2f: aa:79:5f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeaq+4VPMRMr1AxPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI0MTAyMDEzMDA0MloXDTI1MDExODE0MDA0MlowLzEtMCsGA1UEAxMk MjQxMjJiOGItNGRiNS00N2MwLWI4OTYtOGRlYzlmYjllN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe+7yctb37BTHKOCrEQp2qvOe0gj/0llB/74 JUzCgXVSmydONTiYzqI1uPbY744d8cwSZtgMGY2pW2JudtSe6LC65B876RFpU/SZ Q0Lhxe5MwxCb6/OUy7vOZYULvNqOFvEEWmQvDcqbqLi7WlVYHhs62mlejI22Nzsg Jch5CBzzitXYGbBaI4+1w16kOSRiBsEudPPgX3zj8aUpe2kuc5Fbsdzs7lHgn9pj YCAeVn8UN0bTR+MdQpQNtTTj1bcucIVk5zAG0xTQ5zE6mUEHq3sAsA8nX041NpCt MU75S0JVBoOPSFkAl4m1S+0AwWvuCDulFsmG5em2sZLXyPBMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaEnOxGJWWQTkjRx4FmePx/vRpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvYTU0MDA2OWEtNWRiMS0z ZjkzLTk4YTQtZDY1MmEwZmM5MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQsW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0uIbkcnowLZZsCZYFAOa1yhJkQYg0FZF+IswGNzTQA3XcBJuOpiDgi /0uuiSugjvPdI/acvQd2Li7xrKhMj4n0g61aNz0azrUnI74rADsvQlPrbnFA3qS4 B5rZ2wV3U5i/2wQrstMqyg57KOgAl62K3QjxW0RTDMEJhs/pQGVv6eQgNZZp15VV NgkJgXYDdsWu1WkGzm8FisehSkcRCW76zGjQV6X8YaOOqPVkTPw/8+Ny6LcCjOrC 2eK9GgxQFviaG5sTDD/lCkXd6srkkCBSKpEWX4tIcCrXYPmB/erx8mtMit5OT6E+ rn4LjZ1ih9geVeaUwTiEe6EnL6p5X4E= -----END CERTIFICATE-----Generated at Thu Nov 21 22:37:06 2024 by rpki-client on console-fra.rpki-client.org