$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa File: 7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa (raw, json) Hash identifier: HH++taYVHjrXru7NCqqijV1VDDgjNkbvtRd3vtIHX/g= Subject key identifier: D7:2C:61:4A:54:1A:B5:67:73:97:18:2B:1B:9B:3C:30:35:30:8F:BB Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F4328584531B297B2AE55409BDF830200 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa Signing time: Wed 13 Mar 2024 13:00:30 +0000 ROA not before: Wed 13 Mar 2024 13:00:30 +0000 ROA not after: Tue 11 Jun 2024 13:00:30 +0000 asID: 397423 IP address blocks: 147.124.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:31:b2:97:b2:ae:55:40:9b:df:83:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Mar 13 13:00:30 2024 GMT Not After : Jun 11 13:00:30 2024 GMT Subject: CN=43a1ca0c-a75a-4d81-8181-61ca85a4ca9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:13:91:21:8a:42:e7:f2:5b:1a:3e:24:d5: 1f:79:7d:a4:a4:7e:aa:83:a8:25:88:dc:e3:02:20: 74:96:fe:70:30:ef:69:ea:c5:f8:75:e0:bb:b3:c0: ec:1f:1e:0e:bc:88:02:ca:45:8b:f5:57:9f:47:43: ca:0e:3b:8d:75:46:5d:f0:97:da:d7:a8:8e:79:dc: a3:03:14:e0:10:be:49:36:fd:7f:5a:0d:c9:1c:45: 15:15:c8:93:cb:66:64:f8:c6:3d:51:b5:48:ad:88: af:6f:1e:ba:7a:12:ff:c8:8f:a4:34:6c:9a:15:13: 8a:30:99:c1:65:47:5e:bf:12:21:49:6c:a0:52:95: 7b:9f:8e:d5:88:d6:0a:1e:4b:23:f9:e8:95:4d:b1: d1:75:cd:9d:fc:7b:92:71:95:01:8f:bf:91:29:86: 71:32:cb:0f:46:1d:4f:e8:a1:a8:5f:11:f0:33:13: 84:5a:a7:62:d6:5a:b5:ba:74:58:35:e2:15:60:ea: d8:97:67:bf:37:44:68:a1:d6:b8:05:53:b9:94:70: ec:16:a1:5a:72:8f:66:75:47:ca:95:18:63:a0:d2: dd:59:b9:98:a9:96:9b:bf:21:09:7b:76:0c:47:c1: 49:b9:18:26:4b:34:e0:9d:8a:4a:46:a1:76:13:7f: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2C:61:4A:54:1A:B5:67:73:97:18:2B:1B:9B:3C:30:35:30:8F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/7843f8c6-5948-36e9-8e9f-ca37b06fd7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f6:db:f7:be:08:b4:52:18:f3:f1:78:59:6d:08:21:db:e8: 97:ee:54:6e:c7:31:a2:60:29:c9:be:88:16:c5:9f:80:61:fe: bd:5e:da:9a:87:64:bf:59:38:72:11:88:6c:f5:0e:7c:39:32: b5:23:4e:8f:ee:38:0d:1b:a5:22:e6:aa:9b:5c:88:5d:2b:36: 28:b2:f2:68:2d:4d:60:37:28:35:aa:eb:89:a0:c4:e8:8e:4d: 19:a9:a5:00:5d:a5:f9:a7:e8:f7:7a:69:72:6d:6a:5a:3a:10: 4a:54:b6:0f:dc:aa:32:05:c2:bb:01:ed:2b:87:2c:77:56:35: 21:52:68:ab:76:ab:b4:29:e0:7e:52:52:d5:fe:58:85:93:8d: 57:6b:98:1e:01:19:a7:68:a5:48:fe:0f:05:95:fa:a6:59:a2: 89:0b:b5:06:44:b5:5c:ef:ff:6f:27:6a:8c:44:ae:a0:c7:6c: b7:23:15:61:72:af:e0:80:c7:66:cf:a1:7b:7a:2c:d6:f8:da: 84:aa:9c:fc:0a:53:ec:85:a1:07:0b:d1:bf:a6:2d:c7:25:f8: d7:cc:ca:19:dd:ed:b3:02:a9:66:30:a2:e9:e7:4b:8c:01:c9: 24:a6:48:21:56:ca:c9:25:51:09:f2:23:f6:59:72:09:8f:e2: 47:2c:da:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUxspeyrlVAm9+DAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MDMxMzEzMDAzMFoXDTI0MDYxMTEzMDAzMFowLzEtMCsGA1UEAxMk NDNhMWNhMGMtYTc1YS00ZDgxLTgxODEtNjFjYTg1YTRjYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ATkSGKQufyWxo+JNUfeX2kpH6qg6gliNzj AiB0lv5wMO9p6sX4deC7s8DsHx4OvIgCykWL9VefR0PKDjuNdUZd8Jfa16iOedyj AxTgEL5JNv1/Wg3JHEUVFciTy2Zk+MY9UbVIrYivbx66ehL/yI+kNGyaFROKMJnB ZUdevxIhSWygUpV7n47ViNYKHksj+eiVTbHRdc2d/HuScZUBj7+RKYZxMssPRh1P 6KGoXxHwMxOEWqdi1lq1unRYNeIVYOrYl2e/N0Rooda4BVO5lHDsFqFaco9mdUfK lRhjoNLdWbmYqZabvyEJe3YMR8FJuRgmSzTgnYpKRqF2E38M+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcsYUpUGrVnc5cYKxubPDA1MI+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvNzg0M2Y4YzYtNTk0OC0z NmU5LThlOWYtY2EzN2IwNmZkN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP22/e+CLRSGPPxeFltCCHb6JfuVG7HMaJgKcm+iBbFn4Bh/r1e2pqH ZL9ZOHIRiGz1Dnw5MrUjTo/uOA0bpSLmqptciF0rNiiy8mgtTWA3KDWq64mgxOiO TRmppQBdpfmn6Pd6aXJtalo6EEpUtg/cqjIFwrsB7SuHLHdWNSFSaKt2q7Qp4H5S UtX+WIWTjVdrmB4BGadopUj+DwWV+qZZookLtQZEtVzv/28naoxErqDHbLcjFWFy r+CAx2bPoXt6LNb42oSqnPwKU+yFoQcL0b+mLccl+NfMyhnd7bMCqWYwounnS4wB ySSmSCFWysklUQnyI/ZZcgmP4kcs2t4= -----END CERTIFICATE-----Generated at Sat May 4 13:41:06 2024 by rpki-client on console-ams.rpki-client.org