$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa File: 01e40dda-5eab-3214-9c08-7fdc40175580.roa (raw, json) Hash identifier: yBmOk4WklEWU0KJpeFTjvwwM8P0n0KF4QTzXHTOiM/I= Subject key identifier: CE:33:A1:AB:54:9D:8D:48:CA:D7:36:E1:15:B4:A4:94:E2:60:5D:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E8F4DAA05E56EA191FE37880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa Signing time: Sun 17 Nov 2024 14:00:38 +0000 ROA not before: Sun 17 Nov 2024 14:00:38 +0000 ROA not after: Sat 15 Feb 2025 14:00:38 +0000 asID: 15169 IP address blocks: 66.102.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e8:f4:da:a0:5e:56:ea:19:1f:e3:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 17 14:00:38 2024 GMT Not After : Feb 15 14:00:38 2025 GMT Subject: CN=a6bc07fd-834c-4eae-bc93-eb7b2a00153e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:0b:df:b6:71:09:1f:a5:e9:da:e7:40:cf: a9:71:ff:39:96:1a:15:f7:30:6d:cf:d0:7e:e0:00: 66:ad:b6:a5:90:dd:42:78:e7:2e:4f:6a:72:ea:42: fb:ad:62:a8:79:ab:6d:7c:ec:2a:9c:a6:8d:98:69: 30:42:84:19:6c:86:77:c9:cc:76:9a:0b:c0:ad:c9: 5e:31:a5:f1:bf:56:33:ab:2b:52:eb:47:57:84:49: 3c:5e:c6:df:68:15:ae:ff:a1:63:d8:b2:6c:39:0f: ab:6e:ef:96:1e:04:bf:1b:cc:81:2f:b2:88:9b:b9: 66:4f:38:79:d1:6d:9f:25:fe:54:b4:2d:a8:4d:26: 5d:3a:a7:e4:d1:37:40:70:20:77:fd:18:d2:0c:24: 0e:0c:72:b7:bf:9d:fd:7a:dc:36:66:f3:f8:ad:11: 48:00:b4:29:82:a7:f2:47:be:83:70:81:8f:cf:85: cd:c8:68:d9:c0:75:22:3b:cf:24:e0:2b:a9:c6:da: 57:a9:07:d0:1c:b1:41:1e:5a:70:b8:a5:c1:24:e3: 1f:93:b7:1b:e8:35:6c:b0:71:fc:22:57:df:d1:d8: 94:30:32:e0:26:54:cf:ee:9b:a3:28:1b:1b:9a:ff: 04:77:69:d3:52:f1:80:b4:19:f9:f4:d6:9f:cc:8e: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:33:A1:AB:54:9D:8D:48:CA:D7:36:E1:15:B4:A4:94:E2:60:5D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:36:57:79:79:af:0b:c3:a7:4b:41:23:ee:7b:e5:7e:3a:d1: fa:9b:a1:ce:b0:60:7d:80:79:bf:ef:88:b3:ba:97:0d:84:d4: e8:54:7c:62:65:e2:cc:28:4e:d5:76:44:34:a8:82:88:85:06: b3:17:75:3a:ac:f2:f2:da:87:c8:ce:0d:b7:65:c2:b2:7f:d9: 8d:98:48:d5:70:f3:69:36:f1:94:16:69:bc:d0:48:10:da:23: 52:40:81:6d:a6:48:b6:20:9c:d0:e1:31:e3:69:88:2e:24:bc: 50:ab:82:54:49:8a:25:ac:5e:b9:9f:f9:f9:b0:10:b8:d9:bf: 80:9a:a3:5d:f3:72:e6:20:8c:54:7a:af:b0:73:90:64:5a:bc: c7:4f:da:87:94:bd:3a:80:53:a0:6b:6c:f4:3b:b1:87:fb:ba: f1:a2:ff:69:1d:0c:a5:4a:65:70:9d:e1:77:23:d6:da:8f:e0: 8f:3d:a4:2a:92:f6:6b:05:0c:57:20:56:fe:39:55:ce:21:4f: 92:9e:df:a7:62:8b:8d:87:8d:f5:89:c8:95:5a:a5:b4:da:04: 80:bf:37:97:57:47:cf:98:bc:b4:cf:95:d9:10:ce:4e:29:ca: ec:29:19:d2:70:d0:23:99:a1:1b:b6:b4:83:1c:0e:04:c5:ff: 3c:0d:69:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9NqgXlbqGR/jeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk YTZiYzA3ZmQtODM0Yy00ZWFlLWJjOTMtZWI3YjJhMDAxNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6YL37ZxCR+l6drnQM+pcf85lhoV9zBtz9B+ 4ABmrbalkN1CeOcuT2py6kL7rWKoeattfOwqnKaNmGkwQoQZbIZ3ycx2mgvArcle MaXxv1YzqytS60dXhEk8XsbfaBWu/6Fj2LJsOQ+rbu+WHgS/G8yBL7KIm7lmTzh5 0W2fJf5UtC2oTSZdOqfk0TdAcCB3/RjSDCQODHK3v539etw2ZvP4rRFIALQpgqfy R76DcIGPz4XNyGjZwHUiO88k4CupxtpXqQfQHLFBHlpwuKXBJOMfk7cb6DVssHH8 Ilff0diUMDLgJlTP7pujKBsbmv8Ed2nTUvGAtBn59NafzI5rgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4zoatUnY1Iytc24RW0pJTiYF0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFlNDBkZGEtNWVhYi0z MjE0LTljMDgtN2ZkYzQwMTc1NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQmYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc2V3l5rwvDp0tBI+575X460fqboc6wYH2Aeb/viLO6lw2E1OhUfGJl 4swoTtV2RDSogoiFBrMXdTqs8vLah8jODbdlwrJ/2Y2YSNVw82k28ZQWabzQSBDa I1JAgW2mSLYgnNDhMeNpiC4kvFCrglRJiiWsXrmf+fmwELjZv4Cao13zcuYgjFR6 r7BzkGRavMdP2oeUvTqAU6BrbPQ7sYf7uvGi/2kdDKVKZXCd4Xcj1tqP4I89pCqS 9msFDFcgVv45Vc4hT5Ke36dii42HjfWJyJVapbTaBIC/N5dXR8+YvLTPldkQzk4p yuwpGdJw0COZoRu2tIMcDgTF/zwNabw= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:14 2024 by rpki-client on console-fra.rpki-client.org