$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa File: 0cb111af-a543-3309-ae6c-921150fde1ac.roa (raw, json) Hash identifier: TWYaIfdUmXq7F5r7QyoVPZzcLVxQb3pn/DTz5+zQ78k= Subject key identifier: ED:82:E5:E2:56:CA:7F:C8:5D:FD:93:B5:0B:1C:77:5D:AE:A9:45:BB Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F432858489A3B4D57484605137AB03540 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 14618 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:4d:57:48:46:05:13:7a:b0:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=b2a00f0f-fc13-477b-8fd1-57ff210709f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:77:0d:30:02:6d:68:71:bd:a5:41:85:7f: 5d:bc:b0:8e:3a:7d:92:f2:c8:5c:c3:9f:c2:09:0f: 11:32:1a:72:47:4d:f4:20:f5:a7:b9:3f:73:53:6f: ea:da:fe:ba:80:a0:5e:50:ee:38:cd:6a:9f:6a:f2: ac:46:7e:ca:68:6e:0b:5e:f6:a1:e3:a1:6f:4c:9a: 1d:97:ea:76:56:d2:e4:39:46:84:5b:fb:47:af:73: 57:e8:0f:35:5d:4b:58:0e:b8:73:f4:c5:97:88:f6: fd:1f:94:61:a8:3e:27:41:ce:be:9a:ae:09:52:31: 5f:88:fa:22:cb:8e:4f:38:32:a5:fa:ff:23:b1:1d: 87:3e:5a:db:d6:3e:04:55:93:2d:ae:ea:7c:bf:e5: 4d:00:f9:dd:52:44:e7:88:e2:14:76:04:87:e0:3b: c4:d8:b4:51:6f:99:2b:3e:a7:46:6d:cf:cd:4e:d8: d3:fd:d9:03:9b:db:9b:6c:9d:76:f0:2d:63:1f:1d: eb:cc:36:c8:71:e5:26:2f:2c:00:90:50:14:b7:15: 30:12:e4:4c:9b:8c:e3:ca:59:b0:3a:31:37:8d:6b: c9:be:a1:9d:57:af:97:07:0f:f9:82:45:bc:14:1c: 7f:9b:ca:32:48:eb:1e:7f:29:8d:a9:bd:2f:3f:f0: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:82:E5:E2:56:CA:7F:C8:5D:FD:93:B5:0B:1C:77:5D:AE:A9:45:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/0cb111af-a543-3309-ae6c-921150fde1ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:75:7c:60:f8:94:b6:24:a4:1f:0a:06:4c:95:f3:dc:40:22: dc:7f:25:16:e7:d0:76:9b:38:04:fc:e8:e7:2d:93:1f:25:9c: fa:94:57:c3:f5:24:b0:70:95:04:bf:34:23:6e:fb:a9:5e:cf: e5:9f:ca:c0:57:31:36:5b:b1:40:40:c9:1c:70:31:36:1c:db: 78:0e:2d:e9:2d:3f:78:10:bb:7d:69:e2:52:68:0c:29:70:29: 6e:68:b5:0e:82:1e:55:96:27:96:f3:bc:a7:45:1c:47:24:d6: 55:30:49:fd:a4:d7:da:b3:f2:59:e0:ba:af:cb:7f:d6:0a:0b: 28:6f:ff:35:69:58:d6:f0:44:68:1a:32:e1:b7:3d:7a:a0:d7: 21:7a:16:84:ee:11:a1:4d:78:65:2f:40:43:c9:57:78:a4:6f: ff:75:a2:01:38:6f:08:8d:fa:c7:7c:4b:e2:49:da:a0:98:33: a3:24:61:fb:f5:92:89:da:b8:cb:af:96:c0:e4:78:ad:68:33: 47:67:b4:75:3a:70:20:35:a1:df:71:f0:de:2d:63:40:fa:9b: a4:79:54:f4:30:57:45:c4:35:6a:5f:0d:e2:f8:88:1e:18:ff: 6e:ac:ba:85:d0:d9:fd:60:06:03:4b:5d:61:d7:ae:3c:1c:93: db:e2:28:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO01XSEYFE3qwNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk YjJhMDBmMGYtZmMxMy00NzdiLThmZDEtNTdmZjIxMDcwOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl53DTACbWhxvaVBhX9dvLCOOn2S8shcw5/C CQ8RMhpyR030IPWnuT9zU2/q2v66gKBeUO44zWqfavKsRn7KaG4LXvah46FvTJod l+p2VtLkOUaEW/tHr3NX6A81XUtYDrhz9MWXiPb9H5RhqD4nQc6+mq4JUjFfiPoi y45PODKl+v8jsR2HPlrb1j4EVZMtrup8v+VNAPndUkTniOIUdgSH4DvE2LRRb5kr PqdGbc/NTtjT/dkDm9ubbJ128C1jHx3rzDbIceUmLywAkFAUtxUwEuRMm4zjylmw OjE3jWvJvqGdV6+XBw/5gkW8FBx/m8oySOsefymNqb0vP/BZbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2C5eJWyn/IXf2TtQscd12uqUW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMGNiMTExYWYtYTU0My0z MzA5LWFlNmMtOTIxMTUwZmRlMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV1fGD4lLYkpB8KBkyV89xAItx/JRbn0HabOAT86Octkx8lnPqUV8P1 JLBwlQS/NCNu+6lez+WfysBXMTZbsUBAyRxwMTYc23gOLektP3gQu31p4lJoDClw KW5otQ6CHlWWJ5bzvKdFHEck1lUwSf2k19qz8lnguq/Lf9YKCyhv/zVpWNbwRGga MuG3PXqg1yF6FoTuEaFNeGUvQEPJV3ikb/91ogE4bwiN+sd8S+JJ2qCYM6MkYfv1 konauMuvlsDkeK1oM0dntHU6cCA1od9x8N4tY0D6m6R5VPQwV0XENWpfDeL4iB4Y /26suoXQ2f1gBgNLXWHXrjwck9viKIA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:43 2025 by rpki-client