$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa File: afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa (raw, json) Hash identifier: apJfJ61DPNUahUBhn7jfshbdWkYsNEzmrS1O2BYMObY= Subject key identifier: 56:4C:C3:7E:11:52:8B:85:0D:4E:95:3B:A3:93:5B:C3:32:1D:D5:22 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F43285841E4476B246D533617C5D74400 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa Signing time: Mon 15 May 2023 17:04:52 +0000 ROA not before: Mon 15 May 2023 17:04:52 +0000 ROA not after: Wed 21 Jun 2023 04:00:22 +0000 asID: 398351 IP address blocks: 66.51.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:47:6b:24:6d:53:36:17:c5:d7:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: May 15 17:04:52 2023 GMT Not After : Jun 21 04:00:22 2023 GMT Subject: CN=13993cec-20ac-4346-b475-016ee1187690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:58:41:06:7f:14:06:c6:ae:55:3a:1a:fb: 9d:ff:37:80:0d:7b:62:2d:8c:7a:3d:a8:89:22:16: a0:38:f1:e6:e2:c8:e0:16:13:1d:87:9e:55:d5:85: f3:00:bf:33:c3:d9:8b:92:d3:45:20:2e:b9:28:e9: 9d:dc:f0:f8:d1:7d:04:48:9e:3c:f4:2e:ab:17:e2: 17:7d:7c:f9:3f:0c:3f:d5:cf:16:4f:e1:9c:ce:3b: 20:13:10:06:8b:96:ff:b2:17:f7:aa:50:ce:da:cb: f0:1f:53:5c:9d:ab:4b:07:f0:07:6b:f6:6d:6d:52: eb:02:4d:df:bf:5e:c1:75:55:0f:2c:78:b4:b5:90: f2:1b:ef:7b:29:d5:19:cf:7c:d7:26:63:02:6b:fc: cb:12:3b:50:bd:80:7f:26:77:53:8f:db:d7:99:d4: e2:5a:e4:1b:95:7d:3f:7e:a5:f0:5c:a1:ca:8b:e7: 60:bf:5f:19:81:4b:5a:d2:af:4f:18:58:c4:05:fa: 94:09:ce:6b:52:50:85:22:90:0f:48:ff:03:7b:ce: 37:30:66:fd:2b:6e:93:75:d7:b4:02:ac:19:fc:f9: 68:77:b2:71:8d:5a:d8:b3:6e:3c:55:86:f8:a6:c0: e5:0e:62:d5:c9:a8:ad:14:d6:d0:fc:4e:4b:e3:28: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4C:C3:7E:11:52:8B:85:0D:4E:95:3B:A3:93:5B:C3:32:1D:D5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/afcc1963-0b5b-3669-8d5d-485b77aa3b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 66.51.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:df:0b:33:23:88:be:6e:50:12:ca:f3:a1:24:3e:d3:8f:a1: 10:7a:4c:33:29:f9:ad:14:e6:e3:98:96:6d:bc:1e:b6:de:05: 0d:a5:65:ea:f6:cf:2d:5c:91:4a:0c:81:d8:d0:0e:7e:19:d2: 0a:93:36:e9:4b:21:63:e3:a2:22:56:29:36:5f:c0:41:42:4b: b9:61:a9:35:45:0a:ae:7d:66:7f:73:71:86:3b:eb:3b:36:1d: 1c:79:62:8e:cd:58:c4:9e:a3:c6:f6:13:5f:bb:15:f9:49:55: 90:dc:3f:f5:2e:c2:f1:dd:40:c3:c3:20:89:d4:cd:f3:7b:9c: b3:bc:f3:56:0c:bf:2b:41:ea:2b:db:27:9d:8d:de:7f:90:89: 8d:ff:f4:25:a7:1d:e8:5d:41:52:26:d7:f0:ce:5a:9a:20:3c: e8:c9:ba:29:58:5b:21:2b:4c:39:28:01:41:ed:40:db:68:57: 74:3c:ed:07:bd:b4:92:d6:70:11:cf:ee:11:ff:5b:51:95:8f: 02:f1:35:9d:37:db:4a:51:b2:2b:8f:c4:cb:0a:10:7d:57:2f: 10:13:55:e9:b2:2c:95:4d:e5:44:09:06:da:f3:13:45:68:b6: c3:cd:f9:d7:ed:36:9a:95:1a:aa:ef:96:d8:45:cd:f7:76:ed: d5:57:8b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkR2skbVM2F8XXRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTIzMDUxNTE3MDQ1MloXDTIzMDYyMTA0MDAyMlowLzEtMCsGA1UEAxMk MTM5OTNjZWMtMjBhYy00MzQ2LWI0NzUtMDE2ZWUxMTg3NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaxYQQZ/FAbGrlU6Gvud/zeADXtiLYx6PaiJ IhagOPHm4sjgFhMdh55V1YXzAL8zw9mLktNFIC65KOmd3PD40X0ESJ489C6rF+IX fXz5Pww/1c8WT+GczjsgExAGi5b/shf3qlDO2svwH1NcnatLB/AHa/ZtbVLrAk3f v17BdVUPLHi0tZDyG+97KdUZz3zXJmMCa/zLEjtQvYB/JndTj9vXmdTiWuQblX0/ fqXwXKHKi+dgv18ZgUta0q9PGFjEBfqUCc5rUlCFIpAPSP8De843MGb9K26Tdde0 AqwZ/Plod7JxjVrYs248VYb4psDlDmLVyaitFNbQ/E5L4yi6UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZMw34RUouFDU6VO6OTW8MyHdUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvYWZjYzE5NjMtMGI1Yi0z NjY5LThkNWQtNDg1Yjc3YWEzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHfCzMjiL5uUBLK86EkPtOPoRB6TDMp+a0U5uOYlm28HrbeBQ2lZer2 zy1ckUoMgdjQDn4Z0gqTNulLIWPjoiJWKTZfwEFCS7lhqTVFCq59Zn9zcYY76zs2 HRx5Yo7NWMSeo8b2E1+7FflJVZDcP/UuwvHdQMPDIInUzfN7nLO881YMvytB6ivb J52N3n+QiY3/9CWnHehdQVIm1/DOWpogPOjJuilYWyErTDkoAUHtQNtoV3Q87Qe9 tJLWcBHP7hH/W1GVjwLxNZ0320pRsiuPxMsKEH1XLxATVemyLJVN5UQJBtrzE0Vo tsPN+dftNpqVGqrvlthFzfd27dVXi7Y= -----END CERTIFICATE-----Generated at Mon May 15 18:01:14 2023 by rpki-client on console-ams.rpki-client.org