$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a82af37-7c77-377f-8ab9-eb2e11e2991b.roa File: 9a82af37-7c77-377f-8ab9-eb2e11e2991b.roa (raw, json) Hash identifier: RizlSz+8eXwhdczW4DZztjGBgZsTVr2NNRMRwfFmVSA= Subject key identifier: 45:D6:E2:B0:AE:05:B4:B0:FA:31:5F:8C:5D:FE:EE:F7:87:3A:A2:C3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584777C646E3F9B567B7F298ED40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a82af37-7c77-377f-8ab9-eb2e11e2991b.roa Signing time: Tue 08 Oct 2024 01:00:31 +0000 ROA not before: Tue 08 Oct 2024 01:00:31 +0000 ROA not after: Mon 06 Jan 2025 02:00:31 +0000 asID: 6939 IP address blocks: 66.160.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:77:c6:46:e3:f9:b5:67:b7:f2:98:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 8 01:00:31 2024 GMT Not After : Jan 6 02:00:31 2025 GMT Subject: CN=e1f51490-ef01-463c-9703-65ec342ed5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:f6:bb:8f:16:97:d9:33:0e:b5:db:33:d5: d8:fa:00:3b:49:9a:65:99:35:b0:f5:03:57:34:35: 8c:95:41:e8:31:c8:d5:4a:bd:f1:11:06:b6:a3:fa: 89:c0:97:00:d2:c0:0c:2c:67:bd:d6:84:07:8c:94: 01:48:da:1c:e1:14:2d:3e:10:c2:2f:ad:73:2e:b8: cb:f6:1a:53:2a:62:12:06:a9:11:87:32:a8:8d:2d: 37:0f:b5:81:41:2b:18:db:68:ea:5a:9b:f4:4a:09: 95:68:ae:79:e0:71:4f:b0:4c:75:7d:55:b2:5e:09: 78:d3:29:33:57:fb:46:e3:75:56:11:c8:ed:c1:47: 54:7b:d9:0b:0a:8c:cc:e0:e7:15:28:8d:97:ca:36: a2:1d:91:da:8d:e1:89:aa:43:f8:17:4e:2b:d9:d8: 42:fc:4d:bc:8c:6d:c5:d4:14:9a:e3:95:1b:09:67: 67:8a:e4:19:95:80:87:cb:bd:7a:83:ec:5a:34:91: 28:0b:5a:53:66:5f:51:42:00:0d:a7:2d:45:82:b5: db:2e:d2:02:15:3c:2c:d4:a9:15:33:4e:79:c5:e5: 7e:76:3e:25:bd:53:d4:2f:67:c6:bf:38:36:5e:99: 60:46:ad:70:40:d9:13:e2:dc:05:b3:26:7f:a2:41: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D6:E2:B0:AE:05:B4:B0:FA:31:5F:8C:5D:FE:EE:F7:87:3A:A2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a82af37-7c77-377f-8ab9-eb2e11e2991b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 66.160.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b6:3d:19:cc:ec:e2:e8:09:32:30:51:b2:bd:1f:d7:ab:88: 6c:9b:8d:62:64:2e:16:da:8e:dc:4c:eb:1f:73:99:45:50:3f: 61:72:57:10:8d:ca:f6:7f:26:58:fa:52:72:1d:3a:37:8d:5c: d4:1c:9a:ff:e3:12:5b:b6:31:90:2d:c1:76:7b:d8:04:a3:bb: ab:0f:37:31:7d:11:c3:0b:75:3a:f0:99:d1:f6:3b:47:73:06: 33:b7:b7:ba:a2:ac:53:07:36:73:6d:7d:f5:12:b2:6d:87:53: d4:3e:2f:aa:2b:70:7f:b0:56:78:c1:ef:3d:17:e9:f8:b9:86: b5:c0:c6:7f:9d:28:da:95:ca:d5:d7:87:7b:00:ea:42:85:f1: 0f:71:0f:f2:80:31:af:0e:30:4b:87:9b:b2:1d:6f:d4:88:14: cc:dd:66:61:84:32:0c:23:e6:cd:f3:76:dc:38:8c:22:99:23: 42:1e:61:8e:c1:e1:e9:a9:70:41:6d:50:39:5a:62:8a:58:1a: 9a:b9:06:67:79:09:56:c8:1d:6c:30:e5:4e:47:ff:07:ec:1b: 83:d1:62:95:01:ab:e3:58:9f:df:c6:26:65:0b:1a:13:16:cb: 57:03:0d:90:fd:05:0b:5a:52:98:b8:7a:f7:fa:3f:ed:a6:b3: e6:d3:0b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd3xkbj+bVnt/KY7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAwODAxMDAzMVoXDTI1MDEwNjAyMDAzMVowLzEtMCsGA1UEAxMk ZTFmNTE0OTAtZWYwMS00NjNjLTk3MDMtNjVlYzM0MmVkNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVn2u48Wl9kzDrXbM9XY+gA7SZplmTWw9QNX NDWMlUHoMcjVSr3xEQa2o/qJwJcA0sAMLGe91oQHjJQBSNoc4RQtPhDCL61zLrjL 9hpTKmISBqkRhzKojS03D7WBQSsY22jqWpv0SgmVaK554HFPsEx1fVWyXgl40ykz V/tG43VWEcjtwUdUe9kLCozM4OcVKI2XyjaiHZHajeGJqkP4F04r2dhC/E28jG3F 1BSa45UbCWdniuQZlYCHy716g+xaNJEoC1pTZl9RQgANpy1FgrXbLtICFTws1KkV M055xeV+dj4lvVPUL2fGvzg2XplgRq1wQNkT4twFsyZ/okGhXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXW4rCuBbSw+jFfjF3+7veHOqLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWE4MmFmMzctN2M3Ny0z NzdmLThhYjktZWIyZTExZTI5OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq2PRnM7OLoCTIwUbK9H9eriGybjWJkLhbajtxM6x9zmUVQP2FyVxCN yvZ/Jlj6UnIdOjeNXNQcmv/jElu2MZAtwXZ72ASju6sPNzF9EcMLdTrwmdH2O0dz BjO3t7qirFMHNnNtffUSsm2HU9Q+L6orcH+wVnjB7z0X6fi5hrXAxn+dKNqVytXX h3sA6kKF8Q9xD/KAMa8OMEuHm7Idb9SIFMzdZmGEMgwj5s3zdtw4jCKZI0IeYY7B 4empcEFtUDlaYopYGpq5Bmd5CVbIHWww5U5H/wfsG4PRYpUBq+NYn9/GJmULGhMW y1cDDZD9BQtaUpi4evf6P+2ms+bTC7g= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org