$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/791984a7-9834-3a9a-954c-0a3c003dc955.roa File: 791984a7-9834-3a9a-954c-0a3c003dc955.roa (raw, json) Hash identifier: lreHM3syAU21pChplUNA9a4oX3QFkBEVe0N+xH9KpMs= Subject key identifier: 85:DD:B0:1A:11:AC:92:A5:B2:26:62:AD:41:9C:10:C0:E0:F7:CF:88 Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F43285847600B9FABC6BA059B775CC64E Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/791984a7-9834-3a9a-954c-0a3c003dc955.roa Signing time: Sun 29 Sep 2024 13:00:41 +0000 ROA not before: Sun 29 Sep 2024 13:00:41 +0000 ROA not after: Sat 28 Dec 2024 14:00:41 +0000 asID: 46450 IP address blocks: 147.124.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:60:0b:9f:ab:c6:ba:05:9b:77:5c:c6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Sep 29 13:00:41 2024 GMT Not After : Dec 28 14:00:41 2024 GMT Subject: CN=c4bce243-1dd8-40ee-b00c-cf7eb2aaddd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:6b:cd:09:a4:89:e3:5c:dc:81:a9:2d:2a: bd:b5:d0:d8:72:50:32:40:dc:cb:0c:af:fe:be:82: 3e:c3:7e:f8:56:89:ae:a1:f3:4d:28:51:c6:8e:2a: 26:66:62:db:cf:74:02:84:68:09:31:6c:96:b6:50: 63:fc:44:0d:8a:d5:f8:41:eb:b6:55:eb:f5:e0:49: fd:3d:2b:2f:ee:c9:68:59:06:b1:5b:98:45:13:6e: 7f:5a:56:d6:f0:48:a8:c3:32:f0:71:3b:81:18:d1: 2e:90:c5:dc:db:a2:0c:aa:88:6b:4b:07:11:c9:ba: 49:24:23:4e:3c:c3:d2:9d:66:09:7a:4b:cb:25:fe: 37:7b:67:71:b7:3e:05:44:ca:08:45:6f:88:d6:db: 73:23:23:70:c9:2a:af:f5:f8:03:42:f6:ef:e9:f2: d7:0a:5a:89:f6:18:22:8c:6d:cd:93:c0:20:3d:03: 82:ce:70:b6:ae:05:0d:f4:1a:df:05:ca:d5:99:be: 82:ea:14:d7:13:d5:70:15:86:82:d4:02:a5:dc:a2: f8:9e:a9:90:73:58:2c:02:72:9c:08:4f:85:26:f0: 25:8b:bf:8a:8b:cc:0a:c4:07:94:c2:1d:b5:d5:05: 33:9c:29:59:24:d2:07:86:0d:0f:72:c6:1b:ea:29: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DD:B0:1A:11:AC:92:A5:B2:26:62:AD:41:9C:10:C0:E0:F7:CF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/791984a7-9834-3a9a-954c-0a3c003dc955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b8:21:cf:3d:cf:ab:69:5c:ea:6c:f8:9e:1a:74:53:03:dd: c2:52:1d:3a:83:b3:8a:ee:fa:6f:60:e5:18:40:69:42:07:12: 9c:a4:a4:0c:80:78:db:d4:d4:18:40:26:a5:20:99:9b:cc:fa: 74:68:5a:b3:18:9c:4c:76:22:7b:d1:fb:9d:1d:99:b4:2f:69: fd:8c:35:98:3c:9a:44:a0:f8:23:db:e1:bd:36:21:54:64:5f: e3:86:e9:45:9b:40:b8:af:40:7a:0b:45:38:db:71:5e:cb:d9: 08:f1:22:f5:0b:5e:bd:df:ac:90:0f:08:6e:3d:21:b7:38:a3: 59:22:1e:62:c7:00:7c:7b:27:c0:87:bd:b6:d8:c9:20:24:55: db:ec:be:ad:f3:d8:b8:a6:71:a9:8a:6a:74:e4:c0:c1:36:55: cd:ec:ba:d9:30:d9:6f:55:23:e4:14:14:f3:c2:22:df:f3:91: e4:96:56:95:84:18:03:2b:07:c0:ce:fb:f7:17:2d:b3:1a:22: 47:d6:f2:e7:ff:3b:e0:34:22:a3:f6:38:4c:f0:2d:4d:9f:0f: 00:ab:28:07:f7:25:23:b4:b9:86:79:d5:9b:04:56:88:cd:6e: df:c2:e3:49:e0:c8:02:42:5d:6b:03:89:c2:c1:e3:54:f9:a9: ea:ec:96:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdgC5+rxroFm3dcxk4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MDkyOTEzMDA0MVoXDTI0MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzRiY2UyNDMtMWRkOC00MGVlLWIwMGMtY2Y3ZWIyYWFkZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx1rzQmkieNc3IGpLSq9tdDYclAyQNzLDK/+ voI+w374VomuofNNKFHGjiomZmLbz3QChGgJMWyWtlBj/EQNitX4Qeu2Vev14En9 PSsv7sloWQaxW5hFE25/WlbW8EiowzLwcTuBGNEukMXc26IMqohrSwcRybpJJCNO PMPSnWYJekvLJf43e2dxtz4FRMoIRW+I1ttzIyNwySqv9fgDQvbv6fLXClqJ9hgi jG3Nk8AgPQOCznC2rgUN9BrfBcrVmb6C6hTXE9VwFYaC1AKl3KL4nqmQc1gsAnKc CE+FJvAli7+Ki8wKxAeUwh211QUznClZJNIHhg0PcsYb6ik/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXdsBoRrJKlsiZirUGcEMDg98+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvNzkxOTg0YTctOTgzNC0z YTlhLTk1NGMtMGEzYzAwM2RjOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa4Ic89z6tpXOps+J4adFMD3cJSHTqDs4ru+m9g5RhAaUIHEpykpAyA eNvU1BhAJqUgmZvM+nRoWrMYnEx2InvR+50dmbQvaf2MNZg8mkSg+CPb4b02IVRk X+OG6UWbQLivQHoLRTjbcV7L2QjxIvULXr3frJAPCG49Ibc4o1kiHmLHAHx7J8CH vbbYySAkVdvsvq3z2LimcamKanTkwME2Vc3sutkw2W9VI+QUFPPCIt/zkeSWVpWE GAMrB8DO+/cXLbMaIkfW8uf/O+A0IqP2OEzwLU2fDwCrKAf3JSO0uYZ51ZsEVojN bt/C40ngyAJCXWsDicLB41T5qerslsA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:29 2024 by rpki-client on console-ams.rpki-client.org