$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa File: d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa (raw, json) Hash identifier: Og8nDsgLUilWTtReDWyWyngyOjPP6240UqqHO725qzk= Subject key identifier: 22:73:C1:21:6D:AE:E5:B7:7C:32:B5:6A:29:FA:7C:1B:F0:B8:03:D1 Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F43285847BAC6B1B5D61F026D5C3BCE00 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa Signing time: Fri 01 Nov 2024 01:00:30 +0000 ROA not before: Fri 01 Nov 2024 01:00:30 +0000 ROA not after: Thu 30 Jan 2025 02:00:30 +0000 asID: 394321 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:c6:b1:b5:d6:1f:02:6d:5c:3b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Nov 1 01:00:30 2024 GMT Not After : Jan 30 02:00:30 2025 GMT Subject: CN=9b79745d-fe9a-4d9f-9a24-613d8561a380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:37:2a:82:b6:d8:f3:07:98:f8:c2:e9:74: ff:b7:32:45:93:ce:71:7b:ea:d6:4b:59:3f:42:49: 80:07:ab:d3:0b:28:e6:58:b3:e6:1a:64:63:2a:85: e2:ce:bc:08:e8:e5:58:5d:e7:54:64:a9:39:d7:53: 55:6e:bd:20:18:bd:80:bf:4a:3a:3f:15:b6:24:c4: 2e:26:e0:52:ab:7a:01:4b:0b:ea:bb:ac:69:89:4c: e5:60:0f:0a:1b:ea:47:48:24:01:98:5f:0a:d2:2e: c0:dc:86:ad:a4:f3:c5:76:fb:ea:73:05:33:5c:69: e8:0e:16:97:b2:8e:9b:2b:a4:a9:b6:54:85:e1:df: 12:18:58:cd:df:16:79:10:d2:29:45:56:0c:a6:1c: d1:fd:4c:92:a0:66:e8:e8:8e:18:2a:a3:27:bd:9f: c9:bb:b3:5b:b2:75:11:d0:9a:7f:00:3f:0a:72:f7: ee:ea:2d:66:52:9b:2a:c0:28:e6:31:9a:72:69:16: 05:ef:ef:79:56:0d:ea:58:a2:76:25:42:a8:de:02: a2:5b:aa:b0:2a:7d:ca:69:d8:f7:e4:fd:49:f8:5a: f8:58:99:5b:e2:83:3c:11:9c:7c:62:51:e3:02:3d: 26:db:fd:01:25:f2:e2:bc:b3:76:04:10:3b:56:65: ac:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:C1:21:6D:AE:E5:B7:7C:32:B5:6A:29:FA:7C:1B:F0:B8:03:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:6a:5a:b4:fe:b6:5f:5e:e5:4f:a8:26:54:9c:2a:eb:c5:07: 9a:fb:54:88:db:2a:d0:fa:24:39:3d:6d:08:a9:0e:f2:93:ef: e4:d0:30:18:52:f8:5b:cc:3c:1c:11:40:c7:9e:28:af:7d:2b: 06:45:00:12:2b:e7:5d:92:18:e7:00:4b:4c:2f:54:08:32:58: 12:23:52:de:59:75:52:6f:93:b3:be:dd:d8:d0:14:60:b7:6d: a4:76:e9:db:24:65:74:6f:10:20:17:5a:0c:f1:b4:db:3e:1e: bb:1f:a3:2a:4f:a7:e9:aa:9e:5f:d1:f2:ef:0c:55:6a:c9:d0: d6:36:6a:e4:e3:f4:ae:6b:ed:26:8f:6a:03:7f:76:e1:9e:38: ae:48:4a:e8:73:c0:19:53:37:96:18:94:e4:cb:0b:e0:53:7d: 23:a4:c1:f1:d4:f8:08:b5:f3:cb:9b:e6:73:f0:f9:22:e2:e1: f3:a6:15:1c:2f:3b:f8:14:5a:ad:f5:47:4a:e7:7f:19:f1:99: a4:98:66:4c:e6:ae:14:e4:f3:4a:bd:4e:96:b2:28:db:9f:e9: 5a:ef:ab:84:29:1c:a3:29:46:16:e5:94:68:3b:f4:78:55:3b: 1c:40:da:64:fb:73:0d:00:2c:f3:ea:e0:98:00:3a:97:f1:5b: 63:ab:57:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe6xrG11h8CbVw7zgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI0MTEwMTAxMDAzMFoXDTI1MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OWI3OTc0NWQtZmU5YS00ZDlmLTlhMjQtNjEzZDg1NjFhMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZA3KoK22PMHmPjC6XT/tzJFk85xe+rWS1k/ QkmAB6vTCyjmWLPmGmRjKoXizrwI6OVYXedUZKk511NVbr0gGL2Av0o6PxW2JMQu JuBSq3oBSwvqu6xpiUzlYA8KG+pHSCQBmF8K0i7A3IatpPPFdvvqcwUzXGnoDhaX so6bK6SptlSF4d8SGFjN3xZ5ENIpRVYMphzR/UySoGbo6I4YKqMnvZ/Ju7NbsnUR 0Jp/AD8Kcvfu6i1mUpsqwCjmMZpyaRYF7+95Vg3qWKJ2JUKo3gKiW6qwKn3Kadj3 5P1J+Fr4WJlb4oM8EZx8YlHjAj0m2/0BJfLivLN2BBA7VmWsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJzwSFtruW3fDK1ain6fBvwuAPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvZDliZDA2OGYtYTY1NS0z NTZiLWFlNTMtNWFkNzZiYThiZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9qWrT+tl9e5U+oJlScKuvFB5r7VIjbKtD6JDk9bQipDvKT7+TQMBhS +FvMPBwRQMeeKK99KwZFABIr512SGOcAS0wvVAgyWBIjUt5ZdVJvk7O+3djQFGC3 baR26dskZXRvECAXWgzxtNs+HrsfoypPp+mqnl/R8u8MVWrJ0NY2auTj9K5r7SaP agN/duGeOK5ISuhzwBlTN5YYlOTLC+BTfSOkwfHU+Ai188ub5nPw+SLi4fOmFRwv O/gUWq31R0rnfxnxmaSYZkzmrhTk80q9TpayKNuf6Vrvq4QpHKMpRhbllGg79HhV OxxA2mT7cw0ALPPq4JgAOpfxW2OrV/U= -----END CERTIFICATE-----Generated at Fri Nov 22 04:20:47 2024 by rpki-client on console-fra.rpki-client.org