$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa File: e242c2b3-77a9-3afd-b359-a2a88e22709d.roa (raw, json) Hash identifier: lBizIgur10xXE3CrF5tGZU2mpVnz7mUBzKOd4OGj0Sw= Subject key identifier: A8:6A:75:83:5D:75:D4:87:62:AA:A8:36:94:0A:57:0A:23:C0:98:46 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F432858475A762EFEEC346D0A3077ADC0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa Signing time: Fri 27 Sep 2024 13:00:41 +0000 ROA not before: Fri 27 Sep 2024 13:00:41 +0000 ROA not after: Thu 26 Dec 2024 14:00:41 +0000 asID: 40627 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5a:76:2e:fe:ec:34:6d:0a:30:77:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Sep 27 13:00:41 2024 GMT Not After : Dec 26 14:00:41 2024 GMT Subject: CN=4cd2cee4-76f4-43d9-8cea-f85be73215ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:60:41:47:92:ff:22:eb:f9:2a:93:f4:2a: 5d:69:cf:6d:b8:a7:06:d1:60:ae:e0:d2:cf:18:23: 34:a0:06:22:b3:2d:ad:e6:08:c4:56:f7:f3:d5:0c: 2e:b8:5f:f0:02:99:55:36:22:52:0e:58:01:93:81: 25:32:24:c4:69:fb:e8:9c:36:12:5f:73:0d:ab:60: a1:26:85:72:b1:c0:8a:ac:14:ab:3d:c6:88:ef:ec: f3:e9:fc:b3:66:4d:1a:bc:3c:ef:22:1b:8a:18:d7: 65:33:90:09:28:f9:89:9b:76:82:7d:c3:7d:4d:43: fc:1a:e6:34:c7:d8:76:a5:f8:75:a6:9f:92:d7:9a: 51:ac:ff:00:6b:22:6e:d7:e3:0b:71:13:37:31:be: c4:c7:14:82:9a:7c:be:de:87:e1:19:4b:6b:72:93: 83:43:eb:0c:3a:b6:e5:36:e5:8d:51:b7:05:62:7c: 55:f6:ef:26:ce:8a:70:c2:00:be:0e:6d:aa:62:9f: d7:07:c2:cb:ee:62:8e:a1:32:0e:c8:8d:4c:96:ce: 08:c7:e2:eb:a1:35:ae:f2:1e:28:31:23:77:58:d8: 85:aa:e1:be:06:43:50:26:38:22:80:5c:a4:3a:83: 97:4c:8c:c5:d0:f4:62:b3:54:fc:42:6d:41:d6:31: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6A:75:83:5D:75:D4:87:62:AA:A8:36:94:0A:57:0A:23:C0:98:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:44:4b:c4:2d:6e:74:79:f8:fb:62:c6:a9:23:ef:23:4a:4e: a3:40:fb:1e:fc:2f:5d:68:25:5f:09:bd:f4:c6:de:49:d7:db: 3e:3a:ef:94:63:03:16:c1:0b:86:ea:11:69:ec:e9:32:d5:67: 70:6c:40:d7:9d:39:b0:18:36:81:ee:25:8f:c0:ed:48:f6:98: d6:ae:a6:b1:13:ad:30:9e:81:87:2f:eb:59:6c:bf:df:fd:a9: 0e:76:5d:7c:e2:a3:c8:2a:02:84:ae:aa:f4:1f:15:aa:c0:5b: 90:db:4e:f9:28:0f:ed:5a:81:b8:97:16:66:95:0d:5f:4f:64: d4:43:99:f8:93:c4:95:cc:64:d0:12:6c:72:07:ae:3e:14:7f: 82:f3:d4:13:99:6a:dc:90:83:68:af:d7:90:71:9d:44:fd:55: 98:0c:ad:5e:74:8e:53:62:21:38:9a:04:34:ee:de:fd:17:5f: 25:50:57:ae:d6:83:26:ec:5c:44:c9:13:49:67:a7:9c:da:91: b9:76:3a:e3:10:12:90:c0:a8:9a:22:91:ef:8d:35:b3:78:39: cb:32:15:96:68:a9:98:14:de:5f:1c:80:27:f8:92:18:c5:e7: 5f:1a:09:33:f7:1c:d0:52:40:a3:e5:eb:6c:39:8c:81:06:4e: d3:e3:22:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdadi7+7DRtCjB3rcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI0MDkyNzEzMDA0MVoXDTI0MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NGNkMmNlZTQtNzZmNC00M2Q5LThjZWEtZjg1YmU3MzIxNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOlgQUeS/yLr+SqT9Cpdac9tuKcG0WCu4NLP GCM0oAYisy2t5gjEVvfz1QwuuF/wAplVNiJSDlgBk4ElMiTEafvonDYSX3MNq2Ch JoVyscCKrBSrPcaI7+zz6fyzZk0avDzvIhuKGNdlM5AJKPmJm3aCfcN9TUP8GuY0 x9h2pfh1pp+S15pRrP8AayJu1+MLcRM3Mb7ExxSCmny+3ofhGUtrcpODQ+sMOrbl NuWNUbcFYnxV9u8mzopwwgC+Dm2qYp/XB8LL7mKOoTIOyI1Mls4Ix+LroTWu8h4o MSN3WNiFquG+BkNQJjgigFykOoOXTIzF0PRis1T8Qm1B1jGIywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhqdYNdddSHYqqoNpQKVwojwJhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTI0MmMyYjMtNzdhOS0z YWZkLWIzNTktYTJhODhlMjI3MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRES8QtbnR5+Ptixqkj7yNKTqNA+x78L11oJV8JvfTG3knX2z4675Rj AxbBC4bqEWns6TLVZ3BsQNedObAYNoHuJY/A7Uj2mNauprETrTCegYcv61lsv9/9 qQ52XXzio8gqAoSuqvQfFarAW5DbTvkoD+1agbiXFmaVDV9PZNRDmfiTxJXMZNAS bHIHrj4Uf4Lz1BOZatyQg2iv15BxnUT9VZgMrV50jlNiITiaBDTu3v0XXyVQV67W gybsXETJE0lnp5zakbl2OuMQEpDAqJoike+NNbN4OcsyFZZoqZgU3l8cgCf4khjF 518aCTP3HNBSQKPl62w5jIEGTtPjIjA= -----END CERTIFICATE-----Generated at Fri Nov 22 02:02:36 2024 by rpki-client on console-ams.rpki-client.org