$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/87e6120b-7356-3eef-b5af-00db88e229b2.roa File: 87e6120b-7356-3eef-b5af-00db88e229b2.roa (raw, json) Hash identifier: ajaHqoZiore9mUhd39NVJOOewzre1OeDRH9jI4ndAl0= Subject key identifier: 19:5D:D3:4B:0A:14:01:2F:48:30:DB:21:6A:6F:72:E8:A9:E4:17:C4 Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F4328584750B0A520A3B6269E3360B600 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/87e6120b-7356-3eef-b5af-00db88e229b2.roa Signing time: Tue 24 Sep 2024 01:00:31 +0000 ROA not before: Tue 24 Sep 2024 01:00:31 +0000 ROA not after: Mon 23 Dec 2024 02:00:31 +0000 asID: 211432 IP address blocks: 147.124.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:50:b0:a5:20:a3:b6:26:9e:33:60:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Sep 24 01:00:31 2024 GMT Not After : Dec 23 02:00:31 2024 GMT Subject: CN=d5d4e62e-37c3-4404-a0ca-a39f9f18c6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:e4:c3:a5:59:a9:17:5a:78:ef:f1:1b:9e: 16:e3:ac:32:45:5d:ed:0e:96:a9:46:5c:70:cd:50: 88:41:2c:6a:be:25:2b:22:5f:87:33:72:0c:10:47: 3d:92:d4:06:f9:a2:aa:cc:d6:cc:55:d4:f4:e4:2d: 96:95:54:2a:b3:c6:e3:46:b4:ea:e8:00:78:67:0e: 03:2e:3b:32:b5:7c:e8:1a:b4:b0:7c:74:cb:38:d2: b6:53:9b:87:08:30:b0:0d:ef:0e:10:d4:44:c3:74: 38:76:26:7a:16:0f:4d:64:a1:e0:af:de:c4:9c:53: 97:fa:32:b4:5c:1a:a1:81:73:99:4e:2f:d6:0b:3a: bc:ab:2a:e2:63:8e:5d:30:28:3a:b4:f5:ca:bc:54: c0:3f:e0:ed:af:7b:f6:2c:f7:c5:a7:6b:9f:f7:0e: 86:3a:f6:c0:77:ed:2d:3c:5f:35:59:c9:15:49:74: 24:7c:07:65:3e:5a:43:04:09:69:eb:b9:80:a6:b5: 71:c8:b1:37:04:85:e6:e1:c9:0a:e6:8a:5c:fc:f2: d9:67:c7:e9:0a:4c:23:ba:ec:b3:57:25:f0:d4:0d: 89:f5:95:e7:b8:b1:76:fb:35:82:43:6d:35:cd:10: ac:28:9d:23:8c:6c:77:dc:7b:c3:af:c3:c7:6b:5d: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5D:D3:4B:0A:14:01:2F:48:30:DB:21:6A:6F:72:E8:A9:E4:17:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/87e6120b-7356-3eef-b5af-00db88e229b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7d:31:72:6e:ff:8c:2d:ca:74:9a:84:b6:b4:01:15:d0:c8: de:d4:fd:a0:63:1c:db:20:aa:cd:f4:e7:43:04:bc:5c:4c:48: e5:cf:58:74:e1:d4:01:2e:d1:c1:f1:fa:c8:7d:81:36:ce:f6: ef:0f:32:e0:ad:21:32:b3:6e:09:de:2b:8a:9d:02:23:a2:63: 62:6d:4b:69:bc:59:24:02:e5:b5:ed:8b:f6:6d:80:2b:5a:2e: b4:75:11:32:a7:61:5c:af:29:5d:c2:8f:4f:09:4d:df:69:2d: ba:66:74:13:f6:1d:03:dc:19:ae:6f:18:c8:fc:29:2a:a4:f4: 89:f6:e6:f0:f4:6d:1c:5e:ce:ab:d3:de:cf:71:c7:10:34:e5: 78:9a:f5:6c:c4:61:b1:1a:01:b2:d6:da:f2:03:bc:5f:26:cd: 48:48:b1:45:e5:4b:ab:d5:33:78:35:9b:f9:6a:98:91:29:6d: 8e:9f:e3:6c:a7:f6:5d:a2:04:63:4a:c0:c5:3d:23:15:8e:98: 39:19:92:b6:4a:7e:52:4e:b5:96:6c:ca:fa:7b:47:3b:59:68: 69:8f:c6:13:03:af:c5:20:7c:5e:92:04:c6:52:84:37:db:af: ca:ae:e9:37:44:1e:4a:b4:f7:0f:5f:4a:68:d4:2f:52:b3:63: 83:74:a9:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdQsKUgo7YmnjNgtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MDkyNDAxMDAzMVoXDTI0MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZDVkNGU2MmUtMzdjMy00NDA0LWEwY2EtYTM5ZjlmMThjNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv/kw6VZqRdaeO/xG54W46wyRV3tDpapRlxw zVCIQSxqviUrIl+HM3IMEEc9ktQG+aKqzNbMVdT05C2WlVQqs8bjRrTq6AB4Zw4D LjsytXzoGrSwfHTLONK2U5uHCDCwDe8OENREw3Q4diZ6Fg9NZKHgr97EnFOX+jK0 XBqhgXOZTi/WCzq8qyriY45dMCg6tPXKvFTAP+Dtr3v2LPfFp2uf9w6GOvbAd+0t PF81WckVSXQkfAdlPlpDBAlp67mAprVxyLE3BIXm4ckK5opc/PLZZ8fpCkwjuuyz VyXw1A2J9ZXnuLF2+zWCQ201zRCsKJ0jjGx33HvDr8PHa102RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBld00sKFAEvSDDbIWpvcuip5BfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvODdlNjEyMGItNzM1Ni0z ZWVmLWI1YWYtMDBkYjg4ZTIyOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx9MXJu/4wtynSahLa0ARXQyN7U/aBjHNsgqs3050MEvFxMSOXPWHTh 1AEu0cHx+sh9gTbO9u8PMuCtITKzbgneK4qdAiOiY2JtS2m8WSQC5bXti/ZtgCta LrR1ETKnYVyvKV3Cj08JTd9pLbpmdBP2HQPcGa5vGMj8KSqk9In25vD0bRxezqvT 3s9xxxA05Xia9WzEYbEaAbLW2vIDvF8mzUhIsUXlS6vVM3g1m/lqmJEpbY6f42yn 9l2iBGNKwMU9IxWOmDkZkrZKflJOtZZsyvp7RztZaGmPxhMDr8UgfF6SBMZShDfb r8qu6TdEHkq09w9fSmjUL1KzY4N0qYc= -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:29 2024 by rpki-client on console-ams.rpki-client.org