$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c4a76924-9abb-329d-8e90-9fafceb2b207.roa File: c4a76924-9abb-329d-8e90-9fafceb2b207.roa (raw, json) Hash identifier: /ucNvLNR3WOHVseoka5m4EV0s1Wjnsg2UmaK6xD2Qno= Subject key identifier: CB:66:BE:47:A2:22:6B:B9:CD:CA:F8:08:79:11:6F:55:0F:4C:D3:7A Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858478B5110512D40D3BAA63DFBB4 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c4a76924-9abb-329d-8e90-9fafceb2b207.roa Signing time: Tue 15 Oct 2024 01:00:35 +0000 ROA not before: Tue 15 Oct 2024 01:00:35 +0000 ROA not after: Mon 13 Jan 2025 02:00:35 +0000 asID: 13576 IP address blocks: 66.115.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8b:51:10:51:2d:40:d3:ba:a6:3d:fb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Oct 15 01:00:35 2024 GMT Not After : Jan 13 02:00:35 2025 GMT Subject: CN=7072559b-a0c0-4802-bf72-57aac8cfb1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:a9:e0:ff:5f:18:b3:9d:32:be:1a:bc:3d: 4f:7e:fe:a2:62:df:b3:e3:3c:f7:62:8c:30:42:61: aa:04:ef:6d:0a:5e:b3:d0:a5:27:d0:de:2f:47:ce: 4a:e6:37:3e:f0:4a:2a:1c:e6:28:79:69:f5:2d:40: d3:a6:07:48:0d:bc:1d:0f:9c:ed:f7:dd:bf:8b:33: c4:17:ff:9f:54:fe:60:c9:b8:1f:07:98:6a:e9:30: 19:13:f4:8a:d6:4b:3f:6c:18:01:56:3d:e9:5c:0f: 94:a5:be:81:ad:bd:cd:be:bc:27:67:c9:57:30:79: ea:99:bd:17:33:bb:d2:0f:92:f9:32:7f:e3:ec:21: 49:64:6d:68:e7:61:8b:52:dd:b7:84:19:64:ed:b5: 08:7d:f5:0f:c4:4d:4a:ba:fb:4b:39:c2:0f:e2:7b: 41:6e:ad:3e:75:de:44:25:b3:49:ff:70:1b:b3:8f: b5:2c:31:00:48:03:ea:f9:91:ab:65:e7:2a:f0:ac: 52:15:2e:03:e6:f6:03:a0:4b:6d:70:b8:8f:6e:31: f4:31:08:e7:2f:93:5a:d0:ac:f6:b2:bc:95:55:e6: ea:15:de:41:65:12:f4:5b:c5:46:ba:0c:91:71:ad: 8d:f4:c0:b9:bf:98:86:1d:ae:ab:50:ed:70:c5:6c: 96:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:BE:47:A2:22:6B:B9:CD:CA:F8:08:79:11:6F:55:0F:4C:D3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c4a76924-9abb-329d-8e90-9fafceb2b207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5e:89:d4:34:d3:21:56:a7:ed:2f:1d:6b:72:b7:cc:ae:76: 63:ff:80:15:53:60:68:b9:86:7c:11:1f:c2:d4:72:d1:b3:2b: 13:fb:22:22:54:23:66:22:77:3f:00:db:2f:55:05:9f:1d:63: c2:c8:0f:56:49:ed:a4:f9:73:c9:37:26:d3:9f:a3:b9:97:bf: b7:12:7b:92:ca:a7:2a:0d:d3:78:9d:6d:34:94:32:61:82:a0: 69:42:51:f7:c1:0d:70:d0:11:f0:f5:fe:52:1f:d7:79:08:fe: 07:74:12:ef:47:e5:c6:7a:77:3a:fa:5e:78:1f:3f:76:c0:1a: 01:ad:09:05:05:2b:5b:b8:01:ba:84:a7:f5:4d:f0:df:5d:64: 06:60:6f:71:2e:32:53:a8:e3:88:cd:d4:bf:cc:7e:57:0a:cd: cb:79:66:b1:d5:31:07:1c:4e:aa:82:10:54:8f:e6:9f:f7:12: 0c:b9:ad:3f:d3:c5:d9:61:27:f5:a1:73:c4:ae:e2:ed:64:6b: f6:70:39:f4:59:f3:c6:f2:3e:54:07:c9:04:20:7d:c4:d5:df: 9d:91:68:61:90:9a:91:4f:71:f8:54:7d:5f:1c:32:4d:a3:7d: fb:d2:37:a8:81:14:2c:86:f9:c4:9c:5c:48:30:31:da:39:e4: 56:e3:7d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeLURBRLUDTuqY9+7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MTAxNTAxMDAzNVoXDTI1MDExMzAyMDAzNVowLzEtMCsGA1UEAxMk NzA3MjU1OWItYTBjMC00ODAyLWJmNzItNTdhYWM4Y2ZiMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzGp4P9fGLOdMr4avD1Pfv6iYt+z4zz3Yoww QmGqBO9tCl6z0KUn0N4vR85K5jc+8EoqHOYoeWn1LUDTpgdIDbwdD5zt992/izPE F/+fVP5gybgfB5hq6TAZE/SK1ks/bBgBVj3pXA+Upb6Brb3NvrwnZ8lXMHnqmb0X M7vSD5L5Mn/j7CFJZG1o52GLUt23hBlk7bUIffUPxE1KuvtLOcIP4ntBbq0+dd5E JbNJ/3Abs4+1LDEASAPq+ZGrZecq8KxSFS4D5vYDoEttcLiPbjH0MQjnL5Na0Kz2 sryVVebqFd5BZRL0W8VGugyRca2N9MC5v5iGHa6rUO1wxWyWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtmvkeiImu5zcr4CHkRb1UPTNN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzRhNzY5MjQtOWFiYi0z MjlkLThlOTAtOWZhZmNlYjJiMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnPjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJeidQ00yFWp+0vHWtyt8yudmP/gBVTYGi5hnwRH8LUctGzKxP7IiJU I2Yidz8A2y9VBZ8dY8LID1ZJ7aT5c8k3JtOfo7mXv7cSe5LKpyoN03idbTSUMmGC oGlCUffBDXDQEfD1/lIf13kI/gd0Eu9H5cZ6dzr6XngfP3bAGgGtCQUFK1u4AbqE p/VN8N9dZAZgb3EuMlOo44jN1L/MflcKzct5ZrHVMQccTqqCEFSP5p/3Egy5rT/T xdlhJ/Whc8Su4u1ka/ZwOfRZ88byPlQHyQQgfcTV352RaGGQmpFPcfhUfV8cMk2j ffvSN6iBFCyG+cScXEgwMdo55FbjfQU= -----END CERTIFICATE-----Generated at Sun Nov 24 23:59:10 2024 by rpki-client on console-fra.rpki-client.org