$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/e9a72a96-2956-3e57-bccf-68af4aef7e21.roa File: e9a72a96-2956-3e57-bccf-68af4aef7e21.roa (raw, json) Hash identifier: Gt3Z5iMj+yMRiGVzNsMPFJzEEZ0PPP8mNsBDHzwBqCo= Subject key identifier: A8:C7:19:AE:1C:34:E4:F3:8B:33:F8:06:C1:48:FA:E5:02:F5:E0:6A Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Certificate serial: 010D0C9F432858479C112506B941C2CF587D7C00 Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/e9a72a96-2956-3e57-bccf-68af4aef7e21.roa Signing time: Mon 21 Oct 2024 01:00:31 +0000 ROA not before: Mon 21 Oct 2024 01:00:31 +0000 ROA not after: Sun 19 Jan 2025 02:00:31 +0000 asID: 396032 IP address blocks: 66.114.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:11:25:06:b9:41:c2:cf:58:7d:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16 Validity Not Before: Oct 21 01:00:31 2024 GMT Not After : Jan 19 02:00:31 2025 GMT Subject: CN=fd9afd63-6ab6-4a32-b8d8-5dbb1196a8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:49:ed:03:c9:9b:2f:36:94:12:1f:9c:66: f1:a1:e1:5a:72:d5:e1:6b:0a:bb:5b:ca:5c:09:1d: c8:1c:31:af:0e:a4:5d:81:07:5b:80:5c:44:e2:4e: bd:cf:dc:19:58:3b:23:a8:a3:4e:15:f7:a0:c8:cb: 89:9b:0b:aa:75:b6:99:87:7d:d2:6a:fd:af:4d:d3: 7b:52:8b:9e:4d:67:36:a9:fe:04:f6:71:4b:0e:e6: 5e:9c:03:38:9e:43:5c:ce:7a:b8:37:6c:81:ba:59: e4:20:a8:d1:6c:54:60:ea:c7:f3:83:f0:a4:33:bb: 4c:a8:d9:0e:75:98:fc:4d:ac:8d:45:1d:19:e7:47: 99:76:be:df:c2:c2:6e:d1:14:a0:c2:89:bf:d7:f0: c8:a1:45:53:18:9a:4b:58:cb:78:92:3b:eb:2c:cb: c5:28:81:35:f6:10:09:09:d2:55:9c:d0:99:e6:b9: e7:61:56:d9:dc:9b:05:11:6c:4e:cd:46:bc:b5:a7: 29:bb:1c:50:34:f6:e0:8e:32:c9:4a:56:65:a2:b9: 9d:a4:ea:9a:c5:96:76:71:24:72:19:17:a0:21:c5: 84:f7:31:13:91:d5:bc:a6:da:2d:e8:b2:95:ab:09: 02:37:fe:81:77:1e:52:28:80:bc:0d:c6:5b:8a:eb: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C7:19:AE:1C:34:E4:F3:8B:33:F8:06:C1:48:FA:E5:02:F5:E0:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/e9a72a96-2956-3e57-bccf-68af4aef7e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl X509v3 Authority Key Identifier: keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer sbgp-ipAddrBlock: critical IPv4: 66.114.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:a2:30:c1:46:9a:41:e9:47:9b:2f:8a:36:3c:b7:0e:8a:9f: 3f:ae:a0:bb:78:46:fd:2a:99:10:e9:8f:40:bb:44:dd:ae:5a: fd:47:5d:fe:90:86:83:31:db:b8:a1:98:c6:b9:e2:66:90:46: f2:ae:2b:8f:6f:c7:df:81:2d:ed:88:4d:89:d7:b8:78:0a:36: 1f:7f:2e:e8:93:73:6b:a4:e7:36:ac:2f:5e:b4:3d:b0:bd:5c: be:a2:f7:19:94:1f:b1:b7:53:50:81:63:a0:90:fa:53:f2:35: 16:3a:a0:d7:44:c6:b1:d7:ea:02:e0:04:ea:84:9a:60:02:cd: e5:b7:cf:44:70:15:ed:b6:9f:f3:c2:bd:2f:e0:95:aa:b8:da: 4c:2c:43:1e:cf:1f:5d:46:a1:4b:5b:75:1f:d5:7d:78:8b:24: 47:f1:01:9e:9c:36:02:b4:5d:2d:1c:49:d8:b2:51:af:73:72: 6d:24:cf:c7:4f:0d:b6:ff:b7:9d:be:4b:9b:42:e7:03:01:c6: 74:a1:e9:f9:9b:e9:db:f7:b8:11:74:b3:fd:01:df:f0:de:31: 00:0b:ff:c1:49:b3:da:27:b5:37:28:81:79:1b:3c:16:08:be: fb:8b:c0:b4:33:85:4a:fa:95:ce:b6:97:29:36:97:31:b4:c6: 79:75:cf:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEecESUGuUHCz1h9fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I5M2U5OWMtOWI0Mi00ZTdiLWE3MmMtOTY3NmU2NzMz YzE2MB4XDTI0MTAyMTAxMDAzMVoXDTI1MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ5YWZkNjMtNmFiNi00YTMyLWI4ZDgtNWRiYjExOTZhOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst1J7QPJmy82lBIfnGbxoeFactXhawq7W8pc CR3IHDGvDqRdgQdbgFxE4k69z9wZWDsjqKNOFfegyMuJmwuqdbaZh33Sav2vTdN7 UoueTWc2qf4E9nFLDuZenAM4nkNcznq4N2yBulnkIKjRbFRg6sfzg/CkM7tMqNkO dZj8TayNRR0Z50eZdr7fwsJu0RSgwom/1/DIoUVTGJpLWMt4kjvrLMvFKIE19hAJ CdJVnNCZ5rnnYVbZ3JsFEWxOzUa8tacpuxxQNPbgjjLJSlZlormdpOqaxZZ2cSRy GRegIcWE9zETkdW8ptot6LKVqwkCN/6Bdx5SKIC8DcZbiut3oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjHGa4cNOTzizP4BsFI+uUC9eBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Yjkz ZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2ZTY3MzNjMTYvZTlhNzJhOTYtMjk1Ni0z ZTU3LWJjY2YtNjhhZjRhZWY3ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2I5M2U5OWMtOWI0Mi00ZTdiLWE3 MmMtOTY3NmU2NzMzYzE2LzdiOTNlOTljLTliNDItNGU3Yi1hNzJjLTk2NzZlNjcz M2MxNi5jcmwwHwYDVR0jBBgwFoAUxx1tasm9OnMcXyxF2lY9vNlgc5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YjkzZTk5Yy05YjQyLTRlN2ItYTcyYy05Njc2 ZTY3MzNjMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGiMMFGmkHpR5svijY8tw6Knz+uoLt4Rv0qmRDpj0C7RN2uWv1HXf6Q hoMx27ihmMa54maQRvKuK49vx9+BLe2ITYnXuHgKNh9/LuiTc2uk5zasL160PbC9 XL6i9xmUH7G3U1CBY6CQ+lPyNRY6oNdExrHX6gLgBOqEmmACzeW3z0RwFe22n/PC vS/glaq42kwsQx7PH11GoUtbdR/VfXiLJEfxAZ6cNgK0XS0cSdiyUa9zcm0kz8dP Dbb/t52+S5tC5wMBxnSh6fmb6dv3uBF0s/0B3/DeMQAL/8FJs9ontTcogXkbPBYI vvuLwLQzhUr6lc62lyk2lzG0xnl1z1I= -----END CERTIFICATE-----Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org