$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa File: fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa (raw, json) Hash identifier: z+fiKaWcvxtad0kzt207QtGXiTHv2yw5vJKTqhT5/18= Subject key identifier: 5C:C9:AA:37:EB:68:40:9F:F7:FE:15:A9:BB:9B:FB:C7:2F:35:B9:84 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858473FF0A9416DB765FB01070FC0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 399439 IP address blocks: 66.115.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:a9:41:6d:b7:65:fb:01:07:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=e96f3573-bcc7-44f6-9974-01c36dd34906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:ec:ce:72:1d:0e:51:32:b1:f4:7f:c1:82: cb:8b:ca:f1:6a:21:63:e4:17:8d:da:8b:81:f2:f8: 66:78:56:22:45:ce:92:0f:db:18:7e:ec:52:a1:b8: 73:21:a7:15:c0:fa:29:cd:08:be:02:f1:23:5d:a1: eb:04:7b:1f:08:44:f0:55:07:04:77:2f:71:14:97: 29:f8:cf:ab:47:1b:09:c5:ca:3d:5e:95:63:ac:c1: df:0c:4d:f9:36:3f:55:c8:a6:00:13:8a:82:3a:b2: c5:72:05:24:72:0c:3c:e9:90:c5:b7:39:32:ed:f6: cf:83:02:2b:b6:a3:b0:94:ae:f8:5e:9d:fc:52:e3: 06:f6:ad:04:9b:a0:78:14:2a:e1:5b:19:64:09:37: c7:42:52:85:bc:39:55:0e:3b:78:4d:45:74:2f:40: 0d:3e:12:d9:61:54:f0:b2:b3:c8:ce:50:67:14:4a: 0a:72:b8:e8:f9:45:69:a3:76:9e:12:b9:12:7b:87: 86:8e:39:25:43:ec:23:2b:5e:9b:a5:ed:62:c3:7a: 5d:fd:b8:3e:e8:6a:9b:ab:92:26:39:a7:ab:a3:b9: df:da:8f:1a:38:8d:6d:44:60:a3:c9:85:cf:d5:fc: d1:d6:67:cc:a3:45:d6:80:35:42:1b:82:0b:79:cc: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C9:AA:37:EB:68:40:9F:F7:FE:15:A9:BB:9B:FB:C7:2F:35:B9:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fc09f15c-d58a-3bf2-9205-77c740fc3b59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.115.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b0:7f:ea:db:dc:45:cf:3e:88:15:97:35:5c:ef:2a:af:4f: d5:74:05:61:08:4c:78:fd:8b:5e:6a:1c:69:3a:52:1a:af:19: 78:ed:8c:ba:2c:61:14:df:59:4f:f4:73:ca:d1:94:d2:11:ee: 2e:2d:33:1c:fb:ec:83:2a:aa:7f:72:f2:27:ef:b4:bc:53:7b: 9f:2c:f3:0d:77:ba:49:99:a4:56:7d:4a:77:43:1b:13:91:e0: ae:50:49:fd:a8:67:9e:91:77:62:28:81:44:1c:d1:59:0c:db: 4c:22:3d:64:81:d3:eb:22:16:01:33:c8:c7:4a:ea:f0:49:e7: 86:ac:5d:eb:c7:96:a2:5e:77:a4:a7:e8:32:0a:c6:82:eb:98: 54:bd:38:a8:b9:34:95:06:64:c7:03:6e:a7:98:82:82:99:e4: 31:4d:c0:e3:ef:1d:12:9d:1e:3b:c7:22:a2:a7:a7:c5:bf:5c: 88:73:45:a3:ca:87:b0:c7:c3:97:2b:9c:dc:78:d9:62:5c:d9: 5c:11:07:90:a7:7b:6f:c9:53:55:f9:ae:5b:72:e4:e1:29:8e: 06:5d:a5:6b:50:f3:18:74:d8:75:e9:d1:d8:17:58:ba:43:e4: 05:60:19:17:7a:e2:10:a7:1a:80:de:9b:3e:b1:70:09:ce:30: 9e:6d:f9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8KlBbbdl+wEHD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk ZTk2ZjM1NzMtYmNjNy00NGY2LTk5NzQtMDFjMzZkZDM0OTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH3sznIdDlEysfR/wYLLi8rxaiFj5BeN2ouB 8vhmeFYiRc6SD9sYfuxSobhzIacVwPopzQi+AvEjXaHrBHsfCETwVQcEdy9xFJcp +M+rRxsJxco9XpVjrMHfDE35Nj9VyKYAE4qCOrLFcgUkcgw86ZDFtzky7fbPgwIr tqOwlK74Xp38UuMG9q0Em6B4FCrhWxlkCTfHQlKFvDlVDjt4TUV0L0ANPhLZYVTw srPIzlBnFEoKcrjo+UVpo3aeErkSe4eGjjklQ+wjK16bpe1iw3pd/bg+6Gqbq5Im Oaero7nf2o8aOI1tRGCjyYXP1fzR1mfMo0XWgDVCG4ILecz3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzJqjfraECf9/4Vqbub+8cvNbmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZmMwOWYxNWMtZDU4YS0z YmYyLTkyMDUtNzdjNzQwZmMzYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQnP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKwf+rb3EXPPogVlzVc7yqvT9V0BWEITHj9i15qHGk6UhqvGXjtjLos YRTfWU/0c8rRlNIR7i4tMxz77IMqqn9y8ifvtLxTe58s8w13ukmZpFZ9SndDGxOR 4K5QSf2oZ56Rd2IogUQc0VkM20wiPWSB0+siFgEzyMdK6vBJ54asXevHlqJed6Sn 6DIKxoLrmFS9OKi5NJUGZMcDbqeYgoKZ5DFNwOPvHRKdHjvHIqKnp8W/XIhzRaPK h7DHw5crnNx42WJc2VwRB5Cne2/JU1X5rlty5OEpjgZdpWtQ8xh02HXp0dgXWLpD 5AVgGRd64hCnGoDemz6xcAnOMJ5t+SE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:36 2024 by rpki-client on console-ams.rpki-client.org