$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/27a34761-e093-3d75-a500-d8651fa2a53e.roa File: 27a34761-e093-3d75-a500-d8651fa2a53e.roa (raw, json) Hash identifier: Zizlwqo87XPj5+rukwHnJ/62RG6CN03r6rMivjpVPvQ= Subject key identifier: 87:B3:DD:7F:A4:36:63:F0:E3:02:7A:72:8A:1F:CB:B4:DE:F2:17:10 Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F4328584874DC4B56397DB8E9F515A3A8 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/27a34761-e093-3d75-a500-d8651fa2a53e.roa Signing time: Mon 06 Jan 2025 16:44:31 +0000 ROA not before: Mon 06 Jan 2025 16:44:31 +0000 ROA not after: Sun 06 Apr 2025 15:44:31 +0000 asID: 834 IP address blocks: 147.124.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:dc:4b:56:39:7d:b8:e9:f5:15:a3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Jan 6 16:44:31 2025 GMT Not After : Apr 6 15:44:31 2025 GMT Subject: CN=ac606786-3971-4a6c-9de4-942a03ace509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:36:c8:ca:58:20:7b:84:cc:89:e4:34:60: 51:f6:f3:7e:88:0a:02:a9:7c:59:52:5c:69:d8:31: c2:1a:7b:b7:a8:1f:46:89:89:cb:31:e5:90:ee:62: 3b:96:65:23:68:43:04:3d:ab:3e:8e:9e:47:2d:b5: af:0a:0f:bf:38:03:40:76:24:d2:4e:18:fa:2e:5c: 13:0a:e7:84:aa:6d:21:b4:a4:8e:40:61:fe:ee:1a: 1f:4d:f5:27:30:c1:10:3c:db:98:32:fd:7b:85:a0: 28:79:df:ad:f6:4b:02:11:b9:6d:1c:5d:85:f4:8f: de:0d:8c:3b:05:89:c4:be:5b:46:a9:58:67:71:e0: 30:e5:29:26:e1:72:d3:aa:3d:95:0c:40:69:69:87: cd:dd:c7:16:78:f5:d5:c2:ac:49:1b:9a:aa:68:3f: 7f:29:8e:23:6f:6b:e6:44:67:44:0a:08:fd:a5:c1: c3:28:4d:4c:e7:3a:87:9e:d5:6c:06:ce:04:9e:5a: 74:5f:79:1f:d2:77:b1:e5:8d:ec:b4:58:fc:2e:81: 7d:31:b2:f2:d5:6a:3b:b9:ec:50:a0:31:5a:4a:18: 46:91:ea:f4:80:0b:e1:d1:92:71:e2:ae:ea:73:ad: 69:35:fc:a0:ac:ba:df:60:30:70:e3:c3:77:ce:b1: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:DD:7F:A4:36:63:F0:E3:02:7A:72:8A:1F:CB:B4:DE:F2:17:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/27a34761-e093-3d75-a500-d8651fa2a53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:49:46:84:3e:b7:b7:c8:d3:8b:55:8a:36:df:e2:ad:49:fb: 7e:c6:09:ba:5b:f4:3e:67:df:30:0d:30:09:0c:9e:54:e5:e6: 43:8d:ad:eb:7b:67:33:ba:3d:80:f3:07:42:0d:80:57:3f:e9: 3c:31:c4:4f:0b:c5:21:d9:d5:bf:13:5d:d3:51:42:6d:21:76: 75:09:14:f1:6e:62:90:b3:16:25:42:53:78:4f:4e:aa:b7:26: a3:47:1c:d8:6f:bc:d5:39:aa:ab:72:60:8d:ea:7e:c0:67:7a: 77:49:ba:e2:b5:bb:78:82:9c:78:54:16:c9:6d:bc:19:9b:4f: 36:f6:36:6e:49:a5:78:a7:92:99:e4:ac:df:9c:af:6d:f9:46: ce:a3:4c:aa:48:35:d4:d7:21:8e:21:09:da:1f:93:d7:e6:02: 7c:2a:a8:3c:4e:3f:93:64:cc:7f:6b:90:a8:bc:15:9e:ef:b7: b5:b9:ad:a8:d3:57:05:7b:b8:ef:9f:f8:46:f7:49:69:08:fe: 29:59:da:33:fb:65:02:93:57:3b:b2:92:4c:a4:ad:3a:2f:4d: 82:79:48:70:fd:5a:06:5b:9f:df:f9:67:47:f8:93:a6:e8:c4: ea:b5:d5:75:d9:99:70:6c:5e:3e:33:f1:8f:59:05:ea:2d:43: 5a:5e:f4:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh03EtWOX246fUVo6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI1MDEwNjE2NDQzMVoXDTI1MDQwNjE1NDQzMVowLzEtMCsGA1UEAxMk YWM2MDY3ODYtMzk3MS00YTZjLTlkZTQtOTQyYTAzYWNlNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+I2yMpYIHuEzInkNGBR9vN+iAoCqXxZUlxp 2DHCGnu3qB9GiYnLMeWQ7mI7lmUjaEMEPas+jp5HLbWvCg+/OANAdiTSThj6LlwT CueEqm0htKSOQGH+7hofTfUnMMEQPNuYMv17haAoed+t9ksCEbltHF2F9I/eDYw7 BYnEvltGqVhnceAw5Skm4XLTqj2VDEBpaYfN3ccWePXVwqxJG5qqaD9/KY4jb2vm RGdECgj9pcHDKE1M5zqHntVsBs4Enlp0X3kf0nex5Y3stFj8LoF9MbLy1Wo7uexQ oDFaShhGker0gAvh0ZJx4q7qc61pNfygrLrfYDBw48N3zrFQjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIez3X+kNmPw4wJ6coofy7Te8hcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvMjdhMzQ3NjEtZTA5My0z ZDc1LWE1MDAtZDg2NTFmYTJhNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFJRoQ+t7fI04tVijbf4q1J+37GCbpb9D5n3zANMAkMnlTl5kONret7 ZzO6PYDzB0INgFc/6TwxxE8LxSHZ1b8TXdNRQm0hdnUJFPFuYpCzFiVCU3hPTqq3 JqNHHNhvvNU5qqtyYI3qfsBnendJuuK1u3iCnHhUFsltvBmbTzb2Nm5JpXinkpnk rN+cr235Rs6jTKpINdTXIY4hCdofk9fmAnwqqDxOP5NkzH9rkKi8FZ7vt7W5rajT VwV7uO+f+Eb3SWkI/ilZ2jP7ZQKTVzuykkykrTovTYJ5SHD9WgZbn9/5Z0f4k6bo xOq11XXZmXBsXj4z8Y9ZBeotQ1pe9KI= -----END CERTIFICATE-----Generated at Wed Feb 5 03:57:30 2025 by rpki-client