$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa File: fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa (raw, json) Hash identifier: Z0mJO2FEDI89eMy/qDyCW4SpwS9W9cSQ2dyqV407zso= Subject key identifier: BF:41:5A:05:E2:36:13:97:3D:24:25:76:9E:D8:97:AE:3C:A8:A1:79 Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F43285847C8D9D6AA291230CFA7D34880 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa Signing time: Wed 06 Nov 2024 02:00:28 +0000 ROA not before: Wed 06 Nov 2024 02:00:28 +0000 ROA not after: Tue 04 Feb 2025 02:00:28 +0000 asID: 397423 IP address blocks: 147.124.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d9:d6:aa:29:12:30:cf:a7:d3:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Nov 6 02:00:28 2024 GMT Not After : Feb 4 02:00:28 2025 GMT Subject: CN=6ea451d2-835d-49ae-8e9c-bbdf3905e0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:45:98:22:b6:aa:67:a3:01:c2:d0:7a:86: 57:ce:f8:88:34:7c:1c:d4:5a:9e:53:0a:5a:bd:14: 4b:da:ab:5c:3e:06:e3:b9:4d:49:9f:2a:ac:d0:16: 00:b3:47:2d:fa:e9:18:6d:3e:d9:b1:4e:13:28:6c: f5:0f:dc:9d:f2:17:8d:ef:81:5e:63:e2:6c:53:4d: 35:3c:eb:78:fa:53:47:37:15:78:81:0f:53:ce:4a: df:7d:1e:e4:79:ac:60:f3:bc:20:db:c3:06:cf:ed: 81:c8:e3:2c:44:37:63:19:26:20:49:5b:e3:b0:90: 7c:e8:b3:5e:01:7f:bb:5e:c7:1a:99:45:35:aa:50: b9:b3:d1:2e:34:e9:c1:18:9d:48:55:ee:6f:5e:bb: b0:ad:2d:a9:31:13:0e:80:7b:3f:cf:51:1b:3f:06: d0:62:25:59:c5:7f:65:96:66:3b:57:51:ff:2a:4f: 88:17:03:66:c3:cf:04:dd:98:df:a5:20:61:9f:b0: 6a:aa:5e:ab:a4:1f:87:f0:f8:d9:40:b0:7b:a1:74: 63:0a:de:e8:39:46:96:de:64:74:b3:6b:87:a8:92: 6b:4b:ba:82:6d:f4:a9:73:f4:7e:f9:48:d4:d4:77: 6d:34:49:24:23:6a:ec:42:3a:5e:4d:62:f3:bb:9e: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:41:5A:05:E2:36:13:97:3D:24:25:76:9E:D8:97:AE:3C:A8:A1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:0f:ae:96:cf:93:d0:fe:c5:81:32:d2:21:fe:ca:f3:5c:ba: 0d:b9:27:6d:26:76:b9:ca:f5:04:4b:c5:42:8d:6c:f2:d5:1f: 43:e3:c1:5f:be:53:c8:05:b0:ec:6a:5e:93:40:19:c0:72:70: e4:67:10:46:ed:b0:b8:f7:0a:72:7f:5d:ea:1a:17:f6:f0:2f: 64:bf:16:c0:19:80:f9:3b:0a:bd:02:e0:1e:c9:ac:99:49:e8: 36:14:3d:70:b1:2d:63:4c:75:30:68:a9:0c:0c:fd:66:4c:be: 20:2a:95:2a:7d:0c:3b:8c:7e:8e:ec:32:a5:48:43:43:f5:77: b1:91:a8:45:af:16:27:0a:4e:a8:92:ef:0c:b6:04:7b:c4:df: 2e:04:85:fe:d3:ce:03:7e:87:d7:40:3a:c8:28:8e:ad:03:02: 74:a7:05:e2:3c:e0:bd:14:4c:3a:d9:b5:0c:68:c2:10:1c:93: af:b3:bd:7c:e1:de:8e:02:00:46:72:c2:0d:94:ee:b4:dd:d3: 6c:57:2c:de:6e:c8:68:ad:93:4d:71:55:c0:7a:77:75:65:dd: a7:73:1c:13:be:96:fc:48:bc:fa:69:3d:11:9c:b3:8d:2d:2f: 7d:4a:f6:d4:d5:8d:39:d8:2d:db:b5:2c:2b:e4:cc:1d:62:14: e4:86:82:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfI2daqKRIwz6fTSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MTEwNjAyMDAyOFoXDTI1MDIwNDAyMDAyOFowLzEtMCsGA1UEAxMk NmVhNDUxZDItODM1ZC00OWFlLThlOWMtYmJkZjM5MDVlMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zNFmCK2qmejAcLQeoZXzviINHwc1FqeUwpa vRRL2qtcPgbjuU1Jnyqs0BYAs0ct+ukYbT7ZsU4TKGz1D9yd8heN74FeY+JsU001 POt4+lNHNxV4gQ9TzkrffR7keaxg87wg28MGz+2ByOMsRDdjGSYgSVvjsJB86LNe AX+7XscamUU1qlC5s9EuNOnBGJ1IVe5vXruwrS2pMRMOgHs/z1EbPwbQYiVZxX9l lmY7V1H/Kk+IFwNmw88E3ZjfpSBhn7Bqql6rpB+H8PjZQLB7oXRjCt7oOUaW3mR0 s2uHqJJrS7qCbfSpc/R++UjU1HdtNEkkI2rsQjpeTWLzu578YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9BWgXiNhOXPSQldp7Yl648qKF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvZmI5ZDhmNGQtNTEwNy0z NWZkLWI4MWMtZTgwZDZkOTI2NDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIPrpbPk9D+xYEy0iH+yvNcug25J20mdrnK9QRLxUKNbPLVH0PjwV++ U8gFsOxqXpNAGcBycORnEEbtsLj3CnJ/XeoaF/bwL2S/FsAZgPk7Cr0C4B7JrJlJ 6DYUPXCxLWNMdTBoqQwM/WZMviAqlSp9DDuMfo7sMqVIQ0P1d7GRqEWvFicKTqiS 7wy2BHvE3y4Ehf7TzgN+h9dAOsgojq0DAnSnBeI84L0UTDrZtQxowhAck6+zvXzh 3o4CAEZywg2U7rTd02xXLN5uyGitk01xVcB6d3Vl3adzHBO+lvxIvPppPRGcs40t L31K9tTVjTnYLdu1LCvkzB1iFOSGgqk= -----END CERTIFICATE-----Generated at Thu Nov 21 16:18:04 2024 by rpki-client on console-ams.rpki-client.org