$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/99ca9a08-235f-3e74-85a6-060ddaa09c90.roa File: 99ca9a08-235f-3e74-85a6-060ddaa09c90.roa (raw, json) Hash identifier: gibf1zcCuml633EFoSD7YCTu9pChJSzi4fCFPnvYQIg= Subject key identifier: 14:11:F2:76:69:72:E9:8B:DC:AF:61:25:AC:1A:4A:4E:25:AE:10:A1 Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F43285847A4712D39E158300940336D80 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/99ca9a08-235f-3e74-85a6-060ddaa09c90.roa Signing time: Thu 24 Oct 2024 01:00:32 +0000 ROA not before: Thu 24 Oct 2024 01:00:32 +0000 ROA not after: Wed 22 Jan 2025 02:00:32 +0000 asID: 834 IP address blocks: 147.124.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a4:71:2d:39:e1:58:30:09:40:33:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Oct 24 01:00:32 2024 GMT Not After : Jan 22 02:00:32 2025 GMT Subject: CN=4d531a0e-be22-4282-92d7-3f203e181463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d2:e2:eb:fc:1c:d6:f5:04:3e:90:b0:27:11: 21:67:8b:7a:f4:db:42:04:93:6e:64:c5:5a:9d:50: 7b:07:ed:e7:4b:b5:d6:58:67:0e:85:9d:00:68:b9: 5c:3d:2a:09:47:76:60:b8:00:7a:dd:63:a4:3d:5d: 70:f1:63:ca:0a:42:50:28:e3:c4:fa:3b:54:42:aa: ac:ef:cd:bd:dd:09:af:0b:ff:b9:c9:0a:9a:54:0c: e8:26:ad:63:c1:32:d9:fb:38:ab:36:de:41:12:c0: be:9a:41:0e:c2:30:56:8b:96:78:a0:11:ab:82:e5: 19:6e:0a:fb:8b:e5:c3:c4:4b:31:e1:90:01:92:4a: 94:ce:48:b4:c6:94:11:3f:8a:03:99:af:49:78:36: 22:18:07:b4:9d:f4:70:0b:15:5e:2f:ad:ff:7f:f1: 5b:c7:51:82:93:c6:2f:82:66:46:52:49:57:31:00: a9:0e:42:07:5d:57:f2:98:6b:49:81:1a:fe:a6:3d: 22:90:2d:d4:1d:8f:a9:c0:43:78:d1:6c:b1:01:be: 68:75:d8:7e:f1:f2:bf:64:02:e0:3c:80:da:89:77: 03:1c:da:ea:45:a5:57:1f:dd:09:3c:26:85:c1:bf: d7:97:cf:e9:72:96:f8:63:1d:0b:b5:4b:79:9f:2d: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:11:F2:76:69:72:E9:8B:DC:AF:61:25:AC:1A:4A:4E:25:AE:10:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/99ca9a08-235f-3e74-85a6-060ddaa09c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2c:52:ae:de:88:75:c4:02:a2:83:80:8e:87:0e:a3:56:d2: e3:1e:95:c9:2c:fc:a4:85:50:05:c7:cc:e5:a8:70:94:f8:ef: ae:ea:1a:f0:81:ec:19:0c:7d:45:99:87:6a:f2:9e:0b:c9:7e: f3:53:d5:a9:66:d4:b6:19:7d:e5:fd:68:fd:a9:23:56:c4:62: 2b:89:be:07:e7:59:95:56:af:4d:c7:3d:2b:c8:fa:a0:f7:25: 9e:31:f4:da:49:d3:a2:27:58:16:30:1d:b3:ef:8a:96:b8:be: 4c:a7:50:cf:20:d0:2e:25:99:e0:9a:be:c1:bc:f9:1d:7f:de: 38:a7:9d:42:02:32:3b:27:3b:d2:2a:53:56:1e:9c:33:d8:75: 7f:03:d1:8d:39:94:dd:12:5d:7a:ea:01:63:a7:f1:1d:ae:5c: d7:7a:cb:5d:e2:12:95:f3:9c:e8:52:07:64:1b:bb:00:51:fc: 58:e4:81:42:d4:70:9d:f6:38:f0:6e:59:b9:34:89:c2:4a:d6: 2e:88:89:d8:a9:96:84:d3:39:1d:cd:60:b3:23:87:2d:ea:95: a0:a3:c0:b4:35:6a:2f:a2:f4:2d:fc:28:5d:12:4b:5a:c1:4a: a7:ce:bb:c9:11:04:20:7f:7b:dd:58:75:01:7d:c2:a8:d2:4c: d4:74:c9:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEekcS054VgwCUAzbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MTAyNDAxMDAzMloXDTI1MDEyMjAyMDAzMlowLzEtMCsGA1UEAxMk NGQ1MzFhMGUtYmUyMi00MjgyLTkyZDctM2YyMDNlMTgxNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNLi6/wc1vUEPpCwJxEhZ4t69NtCBJNuZMVa nVB7B+3nS7XWWGcOhZ0AaLlcPSoJR3ZguAB63WOkPV1w8WPKCkJQKOPE+jtUQqqs 78293QmvC/+5yQqaVAzoJq1jwTLZ+zirNt5BEsC+mkEOwjBWi5Z4oBGrguUZbgr7 i+XDxEsx4ZABkkqUzki0xpQRP4oDma9JeDYiGAe0nfRwCxVeL63/f/Fbx1GCk8Yv gmZGUklXMQCpDkIHXVfymGtJgRr+pj0ikC3UHY+pwEN40WyxAb5oddh+8fK/ZALg PIDaiXcDHNrqRaVXH90JPCaFwb/Xl8/pcpb4Yx0LtUt5ny0gnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQR8nZpcumL3K9hJawaSk4lrhChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvOTljYTlhMDgtMjM1Zi0z ZTc0LTg1YTYtMDYwZGRhYTA5YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIssUq7eiHXEAqKDgI6HDqNW0uMelcks/KSFUAXHzOWocJT4767qGvCB 7BkMfUWZh2ryngvJfvNT1alm1LYZfeX9aP2pI1bEYiuJvgfnWZVWr03HPSvI+qD3 JZ4x9NpJ06InWBYwHbPvipa4vkynUM8g0C4lmeCavsG8+R1/3jinnUICMjsnO9Iq U1YenDPYdX8D0Y05lN0SXXrqAWOn8R2uXNd6y13iEpXznOhSB2QbuwBR/FjkgULU cJ32OPBuWbk0icJK1i6IidiploTTOR3NYLMjhy3qlaCjwLQ1ai+i9C38KF0SS1rB SqfOu8kRBCB/e91YdQF9wqjSTNR0yeY= -----END CERTIFICATE-----Generated at Thu Nov 21 16:18:04 2024 by rpki-client on console-ams.rpki-client.org