$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa File: 97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json) Hash identifier: 23EZH6Q1aRu8Zr1PLMTVD2G3PC7oRJhM01vGAdWVoek= Subject key identifier: 56:5B:E6:B1:C4:E5:50:1B:19:46:CB:3A:8A:94:27:AF:B7:57:23:56 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584776610004CC0DB94B362329E0 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa Signing time: Mon 07 Oct 2024 13:00:40 +0000 ROA not before: Mon 07 Oct 2024 13:00:40 +0000 ROA not after: Sun 05 Jan 2025 14:00:40 +0000 asID: 18434 IP address blocks: 147.249.0.0/24 maxlen: 24 147.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:76:61:00:04:cc:0d:b9:4b:36:23:29:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Oct 7 13:00:40 2024 GMT Not After : Jan 5 14:00:40 2025 GMT Subject: CN=124c2dc7-b4a8-4925-a785-51edd53b8642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:e7:97:a4:72:10:4f:d7:6a:d1:71:63:73: 10:26:19:39:ad:a7:94:c7:72:5f:2f:a9:6c:b1:2a: 62:3d:e9:da:2a:c1:e4:07:dc:5f:9e:db:f6:69:e4: e0:e3:a0:02:8f:14:dd:2e:9d:a5:21:50:0b:25:6c: 9b:7a:93:a1:d1:8d:ff:66:8e:0e:38:4f:e5:d4:52: a1:3b:39:d7:14:10:05:70:32:9a:8e:30:9e:b5:1c: 61:08:dc:29:61:e0:01:28:86:fa:cf:14:a4:c4:62: 6a:92:90:66:88:74:bd:fb:ec:09:6f:37:46:e0:a0: c1:1f:5c:cb:f4:52:df:2c:16:06:ac:8b:06:0d:60: 83:ce:3c:1a:8e:72:ce:b7:39:46:bc:36:69:23:e3: ba:e1:f8:1b:09:e3:b2:30:2a:33:35:3f:2d:22:b9: d1:49:0c:37:10:18:ac:88:24:91:c4:76:d7:77:b6: 25:96:36:92:2e:e0:23:bb:11:ec:4d:1d:cb:d8:6f: 5f:11:d3:e1:da:02:4a:41:9c:b5:96:fa:a6:e1:e7: 47:53:90:d9:6e:42:5f:09:91:88:59:57:48:ba:82: f5:f4:84:74:fa:8e:16:c6:aa:1d:91:5f:3d:87:a4: ec:f2:70:68:f0:2f:02:53:fa:01:79:2a:d2:88:1e: 08:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5B:E6:B1:C4:E5:50:1B:19:46:CB:3A:8A:94:27:AF:B7:57:23:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:53:d9:44:ef:f2:2b:46:2c:18:0d:0c:2f:e3:12:55:10:6a: 8d:af:d7:6f:bd:28:a6:2f:22:6b:8d:d1:d2:a5:ab:93:12:6c: 16:d0:ea:1c:14:42:6e:65:69:a2:df:82:13:81:42:e3:13:53: 8f:60:b5:78:a3:f8:35:eb:fe:7a:cc:4f:b1:ca:89:7e:32:21: 17:33:01:df:8f:ce:1f:28:72:d4:81:cc:97:e8:7e:3b:13:a5: cb:4d:c0:dd:e0:c8:b9:11:17:36:df:e6:32:a7:46:ac:76:bd: 87:cd:d9:3b:b7:3d:5a:eb:49:fc:c7:00:f9:7d:04:fb:87:f9: a2:a2:7d:13:ba:b6:2b:08:f5:73:03:7f:30:f4:b0:82:4a:18: 24:30:3a:39:d7:a0:9d:41:ce:06:3c:7a:ad:e0:b8:06:eb:bf: ce:89:b7:07:3b:b5:64:0d:1b:8a:05:8e:dc:08:8b:08:78:ba: e0:8f:81:80:82:cb:86:6e:c3:79:0c:74:1f:dd:84:f3:cb:60: 4c:45:ec:4e:25:51:4f:f1:40:da:9a:41:59:20:0a:2a:53:1d: 1b:c1:a7:a7:bd:ea:be:bd:79:02:47:27:04:be:6d:f3:cf:c4: e9:a4:79:7a:83:3a:76:37:4c:a1:d2:32:45:6f:71:40:80:39: 7f:5f:2a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YQAEzA25SzYjKeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk MTI0YzJkYzctYjRhOC00OTI1LWE3ODUtNTFlZGQ1M2I4NjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXLnl6RyEE/XatFxY3MQJhk5raeUx3JfL6ls sSpiPenaKsHkB9xfntv2aeTg46ACjxTdLp2lIVALJWybepOh0Y3/Zo4OOE/l1FKh OznXFBAFcDKajjCetRxhCNwpYeABKIb6zxSkxGJqkpBmiHS9++wJbzdG4KDBH1zL 9FLfLBYGrIsGDWCDzjwajnLOtzlGvDZpI+O64fgbCeOyMCozNT8tIrnRSQw3EBis iCSRxHbXd7YlljaSLuAjuxHsTR3L2G9fEdPh2gJKQZy1lvqm4edHU5DZbkJfCZGI WVdIuoL19IR0+o4WxqodkV89h6Ts8nBo8C8CU/oBeSrSiB4IVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZb5rHE5VAbGUbLOoqUJ6+3VyNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOTdjMWI3NGItNjhmZi0z OGNhLWE3YmMtZjI4MDE3NjdlYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk/kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNT2UTv8itGLBgNDC/jElUQao2v12+9KKYvImuN0dKlq5MSbBbQ6hwU Qm5laaLfghOBQuMTU49gtXij+DXr/nrMT7HKiX4yIRczAd+Pzh8octSBzJfofjsT pctNwN3gyLkRFzbf5jKnRqx2vYfN2Tu3PVrrSfzHAPl9BPuH+aKifRO6tisI9XMD fzD0sIJKGCQwOjnXoJ1BzgY8eq3guAbrv86Jtwc7tWQNG4oFjtwIiwh4uuCPgYCC y4Zuw3kMdB/dhPPLYExF7E4lUU/xQNqaQVkgCipTHRvBp6e96r69eQJHJwS+bfPP xOmkeXqDOnY3TKHSMkVvcUCAOX9fKnk= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org