$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa File: 8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa (raw, json) Hash identifier: 0KPy6yU4jNabvKeKU+7700o+j4cHls3zW9/LAL+ztf8= Subject key identifier: 03:32:75:69:5D:7A:41:DC:64:72:41:2E:95:7C:D1:32:0E:9A:CF:67 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F43285845B7B388210F74E286352DA4C0 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa Signing time: Tue 30 Apr 2024 13:00:34 +0000 ROA not before: Tue 30 Apr 2024 13:00:34 +0000 ROA not after: Mon 29 Jul 2024 13:00:34 +0000 asID: 18434 IP address blocks: 147.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b7:b3:88:21:0f:74:e2:86:35:2d:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Apr 30 13:00:34 2024 GMT Not After : Jul 29 13:00:34 2024 GMT Subject: CN=b30fa346-42d4-41d0-8a7d-e86ba7417efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:0b:8a:70:7b:a7:88:58:49:94:88:18:67: 93:d0:2b:13:f9:82:80:67:bc:18:60:2f:4e:14:12: 39:b1:fa:7a:88:0f:0c:c5:0e:d2:46:28:92:38:16: 63:4f:ce:95:c2:7d:c2:a1:04:00:5e:1b:72:8d:87: 3b:97:51:47:e5:2e:47:47:4a:a9:03:dc:91:a7:3b: e1:28:b8:6f:b2:3d:aa:de:7d:e1:54:9c:62:0b:e2: 64:f3:66:e8:2e:99:f2:d9:52:d1:c7:45:57:96:91: 77:8e:82:43:2a:8e:5b:49:0c:e4:09:65:67:b5:5c: f2:32:44:e0:0d:aa:77:cb:e5:42:22:8f:03:25:ea: 2e:6f:64:cc:fa:c0:56:9c:22:e7:3a:15:6a:40:80: f9:bd:31:2b:dc:da:e1:b6:fc:fe:37:90:70:2f:b2: 36:e3:10:db:90:2e:2c:eb:71:19:0e:bd:fa:4e:98: d7:5d:55:9f:a4:8c:2b:22:55:1c:67:97:47:d1:90: 73:e2:41:08:49:c0:d6:1b:06:f8:6a:01:21:e1:29: 21:fa:0b:06:1a:47:6e:aa:c5:bd:31:47:91:bd:85: f2:7a:47:2e:24:c3:f9:17:be:41:56:1d:2d:bc:8c: 11:ef:ae:ca:bd:99:91:72:97:17:c6:28:fa:c0:53: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:75:69:5D:7A:41:DC:64:72:41:2E:95:7C:D1:32:0E:9A:CF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:29:48:87:99:fa:c8:97:af:18:30:16:32:a6:2a:2d:4a:4c: c3:77:10:62:94:a1:07:3c:95:80:0c:50:58:2f:b3:a9:ad:c4: 0a:46:b5:6c:a8:54:50:a9:aa:ca:ea:f3:75:1d:29:36:f9:04: 1a:5b:a9:a9:18:51:cf:b6:33:cb:50:79:ae:71:8d:04:52:1f: a6:56:b3:4b:5f:d2:5d:10:a7:01:21:43:cd:87:64:7e:70:55: 8d:9e:cc:b0:d7:a8:e1:75:21:a7:f8:78:53:d7:c4:77:59:b5: da:4a:76:d7:c9:27:42:ea:5f:89:cb:4a:45:31:a8:bf:04:90: b8:39:6e:40:58:fa:48:61:5d:13:e2:d4:3d:78:9c:92:d2:93: 0e:26:3e:9c:d1:d2:5e:cc:86:ac:4f:57:6d:6c:39:92:5a:c8: a1:ef:98:82:92:5f:51:46:e6:91:54:1e:64:a0:20:49:e2:3b: 1a:b5:a1:4f:d1:24:43:cc:9f:76:f7:e5:a6:ca:c8:ef:8e:45: 4e:64:17:6c:b3:57:d3:04:dd:27:74:bc:5e:1a:88:07:88:fb: 49:1c:d0:6f:05:05:8c:d6:f1:17:87:1c:ad:89:d3:3e:f0:c3: 38:06:db:f4:78:7f:11:39:8c:22:5c:4b:0f:c5:26:bd:a8:e1: 45:1a:60:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s4ghD3TihjUtpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk YjMwZmEzNDYtNDJkNC00MWQwLThhN2QtZTg2YmE3NDE3ZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOkLinB7p4hYSZSIGGeT0CsT+YKAZ7wYYC9O FBI5sfp6iA8MxQ7SRiiSOBZjT86Vwn3CoQQAXhtyjYc7l1FH5S5HR0qpA9yRpzvh KLhvsj2q3n3hVJxiC+Jk82boLpny2VLRx0VXlpF3joJDKo5bSQzkCWVntVzyMkTg Dap3y+VCIo8DJeoub2TM+sBWnCLnOhVqQID5vTEr3Nrhtvz+N5BwL7I24xDbkC4s 63EZDr36TpjXXVWfpIwrIlUcZ5dH0ZBz4kEIScDWGwb4agEh4Skh+gsGGkduqsW9 MUeRvYXyekcuJMP5F75BVh0tvIwR767KvZmRcpcXxij6wFMLnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMydWldekHcZHJBLpV80TIOms9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOGFjNTJlNmEtYWI3My0z NThhLWJjNmYtZWFiYWJlZDg5ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUpSIeZ+siXrxgwFjKmKi1KTMN3EGKUoQc8lYAMUFgvs6mtxApGtWyo VFCpqsrq83UdKTb5BBpbqakYUc+2M8tQea5xjQRSH6ZWs0tf0l0QpwEhQ82HZH5w VY2ezLDXqOF1Iaf4eFPXxHdZtdpKdtfJJ0LqX4nLSkUxqL8EkLg5bkBY+khhXRPi 1D14nJLSkw4mPpzR0l7MhqxPV21sOZJayKHvmIKSX1FG5pFUHmSgIEniOxq1oU/R JEPMn3b35abKyO+ORU5kF2yzV9ME3Sd0vF4aiAeI+0kc0G8FBYzW8ReHHK2J0z7w wzgG2/R4fxE5jCJcSw/FJr2o4UUaYBA= -----END CERTIFICATE-----Generated at Wed May 22 02:58:55 2024 by rpki-client on console-ams.rpki-client.org