$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa File: e242c2b3-77a9-3afd-b359-a2a88e22709d.roa (raw, json) Hash identifier: +DkscuYlK0CAMkkEzF4Z4TODuxjIbnesxRIVfBj3Q5Y= Subject key identifier: 80:5E:A6:23:FA:21:EA:76:1B:16:C4:95:A8:2D:E5:D3:08:76:E8:87 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F432858459A634A89894CA965C6304340 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa Signing time: Sat 20 Apr 2024 01:00:26 +0000 ROA not before: Sat 20 Apr 2024 01:00:26 +0000 ROA not after: Fri 19 Jul 2024 01:00:26 +0000 asID: 40627 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:9a:63:4a:89:89:4c:a9:65:c6:30:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Apr 20 01:00:26 2024 GMT Not After : Jul 19 01:00:26 2024 GMT Subject: CN=d2420403-aa7c-45d5-935f-51212d22dd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:81:fb:1d:80:4f:a5:25:c4:45:0f:4c:f5: f2:b9:07:cf:66:ea:e9:12:e2:28:55:8a:13:05:fe: f6:10:86:e4:3b:a0:82:04:be:df:1c:a5:47:6c:8c: ba:c5:bc:86:51:70:4b:61:47:7e:85:1e:02:33:2e: 7a:b1:27:c8:5b:f3:f1:1c:81:b3:e1:4b:e7:13:81: 15:69:39:5e:3a:7d:1a:1a:b6:56:83:76:46:2d:bd: 88:b3:03:58:32:a4:4b:32:be:d7:6f:71:45:38:0b: c3:05:90:66:c5:55:71:f6:bc:f7:80:72:35:45:03: 6f:b1:ae:a3:7f:2b:12:55:5c:23:b0:b2:41:8a:7c: 4a:99:84:9f:e9:e8:20:87:22:08:92:b9:ec:80:3c: 01:b9:a5:24:c4:9f:ac:9c:9a:5b:eb:3d:46:ed:9a: 12:3e:35:14:2f:79:67:8e:5f:11:13:59:2d:fc:3f: 52:64:a3:e4:f1:d5:a0:29:b6:3f:85:3a:40:3c:61: 82:ea:7d:e8:63:11:97:ce:f7:50:cf:09:b1:55:a8: 2b:a7:41:4c:71:ec:d2:df:af:30:f3:4f:cf:07:30: ce:e6:d8:3c:91:83:41:5c:99:43:70:f1:d5:0f:8d: 27:38:4c:85:77:19:21:77:b7:70:c1:9e:5c:e2:79: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5E:A6:23:FA:21:EA:76:1B:16:C4:95:A8:2D:E5:D3:08:76:E8:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e242c2b3-77a9-3afd-b359-a2a88e22709d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2f:f3:9e:ea:73:48:ec:da:17:84:99:1c:de:cd:d1:4b:53: 31:5b:5f:25:ce:a5:a7:64:b8:27:00:ff:d1:d4:6c:96:22:3c: 36:81:ad:b0:29:07:a8:64:a5:fa:34:28:34:0e:8c:06:29:81: f2:eb:12:3e:0e:b4:d9:a6:26:5a:e9:d6:e5:e0:04:c8:ab:90: 98:4d:44:9f:0b:ab:56:3e:96:ed:14:33:9d:7d:24:e2:47:05: 25:e0:09:f9:0f:f0:33:7d:70:e2:6f:fa:a5:c7:cf:86:1e:6f: 25:7f:d9:59:68:eb:b7:a5:8a:26:5e:a5:e3:49:c0:cc:ba:75: 70:89:92:dd:8b:a9:80:74:cf:ca:93:a6:5d:16:47:5a:3d:4f: 95:db:47:fc:8c:d1:9d:85:3b:50:9d:c7:50:a7:e8:35:66:c5: a6:ee:9c:b6:87:3a:63:85:87:98:07:4c:1d:b7:97:70:d4:12: b6:65:79:fb:8c:42:61:31:fe:5d:ca:b2:dd:86:84:68:57:99: f2:46:ba:fd:fe:70:ab:48:91:2b:ec:73:3d:4f:9d:98:9c:f3: 5c:df:e4:5c:af:cd:d8:76:97:97:30:32:eb:a3:2f:f9:d9:d9: e5:b4:07:24:02:b8:4c:40:6f:9a:90:11:28:71:45:58:a1:c1: 9e:ba:f9:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWaY0qJiUypZcYwQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI0MDQyMDAxMDAyNloXDTI0MDcxOTAxMDAyNlowLzEtMCsGA1UEAxMk ZDI0MjA0MDMtYWE3Yy00NWQ1LTkzNWYtNTEyMTJkMjJkZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS+B+x2AT6UlxEUPTPXyuQfPZurpEuIoVYoT Bf72EIbkO6CCBL7fHKVHbIy6xbyGUXBLYUd+hR4CMy56sSfIW/PxHIGz4UvnE4EV aTleOn0aGrZWg3ZGLb2IswNYMqRLMr7Xb3FFOAvDBZBmxVVx9rz3gHI1RQNvsa6j fysSVVwjsLJBinxKmYSf6egghyIIkrnsgDwBuaUkxJ+snJpb6z1G7ZoSPjUUL3ln jl8RE1kt/D9SZKPk8dWgKbY/hTpAPGGC6n3oYxGXzvdQzwmxVagrp0FMcezS368w 80/PBzDO5tg8kYNBXJlDcPHVD40nOEyFdxkhd7dwwZ5c4nlcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBepiP6Iep2GxbElagt5dMIduiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTI0MmMyYjMtNzdhOS0z YWZkLWIzNTktYTJhODhlMjI3MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQv857qc0js2heEmRzezdFLUzFbXyXOpadkuCcA/9HUbJYiPDaBrbAp B6hkpfo0KDQOjAYpgfLrEj4OtNmmJlrp1uXgBMirkJhNRJ8Lq1Y+lu0UM519JOJH BSXgCfkP8DN9cOJv+qXHz4YebyV/2Vlo67eliiZepeNJwMy6dXCJkt2LqYB0z8qT pl0WR1o9T5XbR/yM0Z2FO1Cdx1Cn6DVmxabunLaHOmOFh5gHTB23l3DUErZlefuM QmEx/l3Kst2GhGhXmfJGuv3+cKtIkSvscz1PnZic81zf5Fyvzdh2l5cwMuujL/nZ 2eW0ByQCuExAb5qQEShxRVihwZ66+Vk= -----END CERTIFICATE-----Generated at Mon May 13 19:41:06 2024 by rpki-client on console-fra.rpki-client.org