$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa File: 7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa (raw, json) Hash identifier: GslQn/RbbwC4tnUKjuOWy/8Vj8wFA8mAygB43cYzRDI= Subject key identifier: 6E:76:39:C2:AC:B3:66:94:1E:97:81:BD:98:27:53:9F:FF:DA:8C:B1 Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F43285847BAC6B1CAF936372DD5775AA0 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 16509 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:b1:ca:f9:36:37:2d:d5:77:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=fb29bb6f-60e2-4712-93f9-16b055a80a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:d2:3a:2a:41:a4:77:6d:b6:9f:aa:ac:d9: 70:81:3f:58:88:ec:92:af:d1:ae:c1:9a:79:9c:47: 37:02:d8:ea:d7:66:fd:1f:0d:be:67:5b:a6:e5:67: b0:2c:ac:12:8b:5d:a4:de:64:b1:ba:e9:e6:82:92: 1d:89:01:77:cb:57:c4:d3:66:15:fd:32:74:a4:0d: 93:1d:45:7a:c9:f3:cb:60:01:2b:96:c7:17:3e:79: 6b:38:57:ce:f0:4e:2a:1a:9f:29:d4:aa:17:4c:9c: 24:c0:9d:b1:1c:5c:e4:02:78:8a:9d:0f:75:80:99: 9b:9a:b2:c8:e3:5d:6d:31:4d:8c:6a:f0:ff:e3:c5: 6f:7b:c3:07:4b:d1:5a:6a:05:1c:14:d4:96:c5:cc: 00:cb:08:3b:3f:15:93:b5:f9:7a:e1:a9:c9:58:ad: 02:cb:fa:d7:62:30:98:81:65:6d:bc:82:f0:fe:85: 91:b4:88:e0:33:34:4f:df:88:35:84:dd:be:26:c1: be:6f:99:bf:27:b1:ba:df:9c:5d:9f:05:63:cb:5d: a9:c5:e4:b4:f9:ee:ec:d6:6f:15:77:8b:3a:ad:0a: e3:c4:06:f9:a4:2b:b0:95:c4:9b:61:21:2b:5f:98: 7d:cf:e3:32:80:d7:33:b5:9a:c7:74:62:f9:44:dd: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:76:39:C2:AC:B3:66:94:1E:97:81:BD:98:27:53:9F:FF:DA:8C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/7e2f7b0d-3629-32ff-bef7-8f53e69131f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:e1:9f:17:96:b2:14:88:2f:83:08:1c:59:00:f2:9e:9b:f8: 33:37:44:d8:7c:7b:5c:af:dc:79:0c:56:e6:3c:e5:a2:77:05: ae:3b:e3:91:60:df:1f:33:9c:a5:85:6b:d5:6f:1c:5f:59:38: f0:7c:b4:6e:0e:ea:e1:23:f8:41:e9:ca:c4:6f:aa:44:ed:ff: fe:d4:4c:2b:0f:53:7f:75:5b:4d:6d:38:47:7d:de:94:40:23: 52:09:cd:60:2e:8f:7a:20:88:7c:aa:96:4f:fb:97:b3:30:61: 59:63:38:98:f7:94:14:03:ea:b0:01:09:f7:80:27:af:8d:6e: b3:2b:c2:d3:9c:ce:1a:0b:89:d1:82:15:f5:b2:90:3a:77:a7: 56:78:26:44:4d:ac:d2:63:89:0b:18:fc:38:14:74:af:54:81: 16:90:60:a1:97:ee:ef:d3:58:87:a8:c2:c0:61:7a:7f:07:85: 7f:eb:d2:63:b3:40:13:8a:ce:64:60:90:f3:dc:da:a5:5b:b6: c1:59:1a:b4:de:cd:2d:19:dc:72:46:e0:4b:11:9a:dc:95:de: 03:fe:ca:c9:0f:8d:86:82:9e:9b:ef:47:35:b4:cf:c9:0f:29: 47:e1:0f:92:ff:5d:30:86:52:ff:6d:bc:d4:73:32:e9:75:c3: 84:86:76:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xrHK+TY3LdV3WqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZmIyOWJiNmYtNjBlMi00NzEyLTkzZjktMTZiMDU1YTgwYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ofSOipBpHdttp+qrNlwgT9YiOySr9GuwZp5 nEc3Atjq12b9Hw2+Z1um5WewLKwSi12k3mSxuunmgpIdiQF3y1fE02YV/TJ0pA2T HUV6yfPLYAErlscXPnlrOFfO8E4qGp8p1KoXTJwkwJ2xHFzkAniKnQ91gJmbmrLI 411tMU2MavD/48Vve8MHS9FaagUcFNSWxcwAywg7PxWTtfl64anJWK0Cy/rXYjCY gWVtvILw/oWRtIjgMzRP34g1hN2+JsG+b5m/J7G635xdnwVjy12pxeS0+e7s1m8V d4s6rQrjxAb5pCuwlcSbYSErX5h9z+MygNcztZrHdGL5RN2TjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG52OcKss2aUHpeBvZgnU5//2oyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvN2UyZjdiMGQtMzYyOS0z MmZmLWJlZjctOGY1M2U2OTEzMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3hnxeWshSIL4MIHFkA8p6b+DM3RNh8e1yv3HkMVuY85aJ3Ba4745Fg 3x8znKWFa9VvHF9ZOPB8tG4O6uEj+EHpysRvqkTt//7UTCsPU391W01tOEd93pRA I1IJzWAuj3ogiHyqlk/7l7MwYVljOJj3lBQD6rABCfeAJ6+NbrMrwtOczhoLidGC FfWykDp3p1Z4JkRNrNJjiQsY/DgUdK9UgRaQYKGX7u/TWIeowsBhen8HhX/r0mOz QBOKzmRgkPPc2qVbtsFZGrTezS0Z3HJG4EsRmtyV3gP+yskPjYaCnpvvRzW0z8kP KUfhD5L/XTCGUv9tvNRzMul1w4SGdow= -----END CERTIFICATE-----Generated at Sun Nov 24 21:46:12 2024 by rpki-client on console-ams.rpki-client.org