$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa File: c1ec8d09-5670-3d88-8368-60f557c12759.roa (raw, json) Hash identifier: tjKKFCgvZoCZUgcY5o2U2sQFfMmzXtlISnvplZrUCYw= Subject key identifier: 44:47:69:59:49:3C:0B:7F:4B:97:7D:23:1B:10:69:AF:EC:B8:81:A1 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584789EBF7BC62E5DC71D3CF2E80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa Signing time: Mon 14 Oct 2024 13:00:47 +0000 ROA not before: Mon 14 Oct 2024 13:00:47 +0000 ROA not after: Sun 12 Jan 2025 14:00:47 +0000 asID: 13335 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:89:eb:f7:bc:62:e5:dc:71:d3:cf:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Oct 14 13:00:47 2024 GMT Not After : Jan 12 14:00:47 2025 GMT Subject: CN=bf6aa242-fb1f-4fd1-a68e-f15ba4e070aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:84:e2:8f:f0:a0:e1:f4:04:8c:8b:0a:24: 2f:86:f8:ac:d7:a0:f2:4e:9f:69:f2:88:43:fb:3b: 1a:70:d7:65:26:44:30:61:d6:19:6d:d0:48:bd:f4: 53:19:bd:5d:fb:43:7c:2c:1d:33:5b:00:96:ab:65: 2a:28:11:79:19:06:98:d3:e8:f5:22:f2:35:09:c6: 00:f7:33:55:f5:fc:21:91:86:87:b1:03:c6:5a:b3: de:32:c1:40:37:e4:46:dc:02:78:ba:ae:4a:2c:cc: 0f:06:22:a1:a7:39:76:18:2f:f1:3b:c3:8d:8e:fd: bb:3a:02:ec:e6:f5:ad:0c:24:aa:d2:36:81:df:0b: 89:74:b0:2b:55:64:65:a4:9c:e0:b9:25:c7:d2:8c: c3:4e:b6:ab:c9:35:e2:31:29:97:14:92:a6:29:da: 51:de:c7:b9:5c:9a:7c:a7:01:50:1a:53:e9:80:56: c6:0c:cd:a1:6c:33:39:5c:05:b5:1f:8d:9b:e6:d7: 1e:ea:50:80:25:b7:c7:20:a3:ae:1c:e2:92:47:5d: 96:35:49:42:db:01:c9:fc:61:c9:30:34:63:5d:4b: 9a:02:22:2e:35:8e:d1:20:a1:45:0a:e7:42:e1:7c: c7:f9:aa:01:da:66:15:30:a4:d8:9f:ee:86:c4:1d: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:69:59:49:3C:0B:7F:4B:97:7D:23:1B:10:69:AF:EC:B8:81:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:47:86:ae:5b:2b:f9:12:bc:c4:2f:7c:fb:c7:02:c0:7d:9a: 1b:a3:83:b9:f1:0b:f9:8a:56:fe:e0:ac:8a:3c:cc:f8:d3:12: 22:bd:9e:18:c5:11:a7:c7:40:1d:8e:f9:3a:bd:24:81:6a:a1: 1a:61:ac:ab:d5:3f:10:f6:de:a5:9d:2a:cd:bc:25:23:a4:ef: 3c:1f:c0:fa:56:a8:a1:3c:ec:6d:b8:6f:df:31:1b:7d:ed:15: cd:16:88:33:7c:d4:5a:18:21:58:bb:79:69:6c:a7:25:40:79: 2e:46:9e:80:ef:d7:4b:9c:bd:8f:c4:2e:c6:41:2f:30:8f:db: 72:22:46:7b:39:42:12:b3:f3:9a:a2:9c:7c:95:c7:3c:42:0c: c7:13:33:d1:3e:d3:14:33:b8:32:fc:60:8c:70:8d:c8:9f:98: 38:88:88:66:8a:47:cb:8e:68:7a:c8:cc:9a:ff:95:cb:d9:3b: 94:08:f2:e7:be:0d:33:7f:66:b0:f9:27:4f:a8:10:62:79:fc: c4:e5:f1:eb:83:95:ce:26:f9:bd:8f:6a:c8:64:03:7b:64:a9: 12:a6:1a:75:91:c7:be:47:46:41:30:79:74:08:03:d1:e4:25: 78:ae:29:f5:96:8e:34:05:b0:f8:24:de:51:65:1c:23:63:6c: 12:7d:a8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeJ6/e8YuXccdPPLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI0MTAxNDEzMDA0N1oXDTI1MDExMjE0MDA0N1owLzEtMCsGA1UEAxMk YmY2YWEyNDItZmIxZi00ZmQxLWE2OGUtZjE1YmE0ZTA3MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4uE4o/woOH0BIyLCiQvhvis16DyTp9p8ohD +zsacNdlJkQwYdYZbdBIvfRTGb1d+0N8LB0zWwCWq2UqKBF5GQaY0+j1IvI1CcYA 9zNV9fwhkYaHsQPGWrPeMsFAN+RG3AJ4uq5KLMwPBiKhpzl2GC/xO8ONjv27OgLs 5vWtDCSq0jaB3wuJdLArVWRlpJzguSXH0ozDTraryTXiMSmXFJKmKdpR3se5XJp8 pwFQGlPpgFbGDM2hbDM5XAW1H42b5tce6lCAJbfHIKOuHOKSR12WNUlC2wHJ/GHJ MDRjXUuaAiIuNY7RIKFFCudC4XzH+aoB2mYVMKTYn+6GxB25wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERHaVlJPAt/S5d9IxsQaa/suIGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYzFlYzhkMDktNTY3MC0z ZDg4LTgzNjgtNjBmNTU3YzEyNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBHhq5bK/kSvMQvfPvHAsB9mhujg7nxC/mKVv7grIo8zPjTEiK9nhjF EafHQB2O+Tq9JIFqoRphrKvVPxD23qWdKs28JSOk7zwfwPpWqKE87G24b98xG33t Fc0WiDN81FoYIVi7eWlspyVAeS5GnoDv10ucvY/ELsZBLzCP23IiRns5QhKz85qi nHyVxzxCDMcTM9E+0xQzuDL8YIxwjcifmDiIiGaKR8uOaHrIzJr/lcvZO5QI8ue+ DTN/ZrD5J0+oEGJ5/MTl8euDlc4m+b2PashkA3tkqRKmGnWRx75HRkEweXQIA9Hk JXiuKfWWjjQFsPgk3lFlHCNjbBJ9qCY= -----END CERTIFICATE-----Generated at Sun Nov 24 23:08:37 2024 by rpki-client on console-ams.rpki-client.org