$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa File: 30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa (raw, json) Hash identifier: IXvftjiVbRlfXX1dq1Chse5Qn60W4CDzc8yiEhV5iys= Subject key identifier: B0:F4:75:CA:06:68:FE:75:1A:3E:51:2C:69:EB:98:D3:AD:47:26:53 Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F4328584582A89173141352DEA9C89CA8 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa Signing time: Thu 11 Apr 2024 13:00:36 +0000 ROA not before: Thu 11 Apr 2024 13:00:36 +0000 ROA not after: Wed 10 Jul 2024 13:00:36 +0000 asID: 60068 IP address blocks: 147.124.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:82:a8:91:73:14:13:52:de:a9:c8:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Apr 11 13:00:36 2024 GMT Not After : Jul 10 13:00:36 2024 GMT Subject: CN=ca4ef7ca-b462-4802-9d7d-ac92f5231e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:8f:a5:80:b4:83:ad:16:c9:8c:c6:3d:3e: e4:14:2d:b9:fe:7b:c5:67:81:db:61:61:9b:97:fb: 9c:2a:56:7a:fc:f3:5d:2e:fa:05:3a:d0:47:c6:73: 8b:ab:af:6d:2c:18:9f:e0:50:31:de:a9:49:6e:53: 3b:9c:eb:49:07:92:bc:69:bb:9d:18:d1:55:34:a9: 01:8f:be:6c:08:75:d4:60:4f:d7:8c:e1:76:03:ae: 16:e4:d4:83:6d:84:6f:4f:84:d2:20:11:bf:6c:36: 4a:7f:bc:9e:7f:91:1c:05:cc:a8:b5:bc:2f:db:1e: 2b:d6:ea:e0:d2:1e:19:68:b8:1c:6b:a1:fe:7e:a8: a6:13:bd:4b:34:be:5d:b8:70:8c:18:91:4d:5f:70: 16:d2:3f:5d:58:61:ed:c4:5d:55:a8:2d:02:71:97: 17:0f:41:c8:ee:f8:7d:f5:50:17:04:f5:ee:46:92: 59:70:ef:9e:5f:b1:47:d1:37:9e:38:23:23:a7:af: bc:43:84:5b:95:ff:cb:36:5b:14:5d:08:0e:d5:7e: 69:e8:bf:57:ad:dd:59:30:66:37:16:90:aa:81:d9: c4:ff:5d:a9:65:74:58:74:d8:a7:36:53:72:ff:c2: 01:46:90:f3:27:3c:33:e2:fc:6c:0c:24:43:64:48: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F4:75:CA:06:68:FE:75:1A:3E:51:2C:69:EB:98:D3:AD:47:26:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:84:db:30:35:fe:e0:68:f2:31:20:fe:af:ad:a1:c3:97:30: c8:f0:a8:66:1e:4d:55:66:8c:db:eb:be:d0:21:5c:ef:c1:81: e6:fc:5a:4f:83:f4:b9:d4:03:ed:1a:cd:37:97:2a:d6:67:ff: 01:a2:eb:04:b1:5f:c0:e5:9c:0d:3d:24:80:49:91:8e:c2:41: ed:d2:df:6d:2b:43:76:1b:b4:83:80:6c:ce:86:cb:3f:30:22: ee:39:59:f6:36:53:19:37:fd:bb:67:a1:ca:f9:fe:58:df:59: 06:7c:3b:5b:4a:e9:9b:4a:b7:50:df:04:c0:3b:41:eb:b9:c3: b9:10:e2:a2:1e:4a:90:5e:11:c6:4f:73:f1:62:22:71:02:c3: 65:f8:4e:19:58:58:bb:20:a4:b9:ad:09:92:30:dc:cf:67:f2: 08:45:a6:65:a6:8d:6b:f1:cf:bc:11:cd:57:ce:19:63:44:13: fa:79:fa:12:f1:b1:57:13:a2:5e:24:75:2f:cf:d4:1e:ed:84: 99:58:c3:27:e4:3b:3e:a0:ba:d8:c9:b6:b8:6d:9b:ce:0b:74: 66:86:1d:fb:d0:df:7f:ba:bb:4f:85:af:d6:d8:cc:81:b2:03: 3d:e0:21:fa:f7:c0:fe:ea:3a:ee:ab:63:f5:2e:2a:be:7f:c6: d7:fc:53:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWCqJFzFBNS3qnInKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MDQxMTEzMDAzNloXDTI0MDcxMDEzMDAzNlowLzEtMCsGA1UEAxMk Y2E0ZWY3Y2EtYjQ2Mi00ODAyLTlkN2QtYWM5MmY1MjMxZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswqPpYC0g60WyYzGPT7kFC25/nvFZ4HbYWGb l/ucKlZ6/PNdLvoFOtBHxnOLq69tLBif4FAx3qlJblM7nOtJB5K8abudGNFVNKkB j75sCHXUYE/XjOF2A64W5NSDbYRvT4TSIBG/bDZKf7yef5EcBcyotbwv2x4r1urg 0h4ZaLgca6H+fqimE71LNL5duHCMGJFNX3AW0j9dWGHtxF1VqC0CcZcXD0HI7vh9 9VAXBPXuRpJZcO+eX7FH0TeeOCMjp6+8Q4Rblf/LNlsUXQgO1X5p6L9Xrd1ZMGY3 FpCqgdnE/12pZXRYdNinNlNy/8IBRpDzJzwz4vxsDCRDZEizQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD0dcoGaP51Gj5RLGnrmNOtRyZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvMzBiM2M1NTEtMjllNi0z ZjUzLWE4MWUtMjczZjVmZjZlNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmE2zA1/uBo8jEg/q+tocOXMMjwqGYeTVVmjNvrvtAhXO/Bgeb8Wk+D 9LnUA+0azTeXKtZn/wGi6wSxX8DlnA09JIBJkY7CQe3S320rQ3YbtIOAbM6Gyz8w Iu45WfY2Uxk3/btnocr5/ljfWQZ8O1tK6ZtKt1DfBMA7Qeu5w7kQ4qIeSpBeEcZP c/FiInECw2X4ThlYWLsgpLmtCZIw3M9n8ghFpmWmjWvxz7wRzVfOGWNEE/p5+hLx sVcTol4kdS/P1B7thJlYwyfkOz6gutjJtrhtm84LdGaGHfvQ33+6u0+Fr9bYzIGy Az3gIfr3wP7qOu6rY/UuKr5/xtf8U/Q= -----END CERTIFICATE-----Generated at Wed May 1 23:04:06 2024 by rpki-client on console-ams.rpki-client.org