$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa File: fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa (raw, json) Hash identifier: lSSNeBNQSeH5X+KR44045wDJIVDSMdACCvOEaO2ldgQ= Subject key identifier: 33:2B:39:27:17:25:6B:1F:36:48:46:74:70:0E:43:4E:9E:30:E9:AB Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b Certificate serial: 010D0C9F4328584529528E3EA0EC53487E003200 Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa Signing time: Sun 10 Mar 2024 13:00:31 +0000 ROA not before: Sun 10 Mar 2024 13:00:31 +0000 ROA not after: Sat 08 Jun 2024 13:00:31 +0000 asID: 397423 IP address blocks: 147.124.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:29:52:8e:3e:a0:ec:53:48:7e:00:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b Validity Not Before: Mar 10 13:00:31 2024 GMT Not After : Jun 8 13:00:31 2024 GMT Subject: CN=57521a4a-3819-4c4c-ab2f-d3f4aab40d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:f4:1f:56:51:ea:dc:07:68:32:dd:73:b0: 5f:8a:fe:97:62:0a:00:21:44:b6:12:47:de:a4:d9: 0f:d8:69:41:91:cf:ba:d9:03:9f:6c:f1:ed:0c:44: 3c:a7:1e:a9:c9:11:35:ff:18:01:30:4d:af:1a:f1: 63:63:65:07:75:5c:78:8e:e0:48:97:f8:c1:d4:1f: 9b:91:23:03:cc:7c:6d:91:23:8d:34:c0:5f:36:5a: 19:e6:64:e6:9e:f2:d7:8e:83:06:a7:c6:44:c7:df: d1:d0:59:f1:4d:76:86:b3:b0:72:5e:70:35:1a:ff: d8:5f:43:9f:02:e0:e3:a5:4d:d3:f1:81:bf:2a:60: 0a:b9:14:4d:35:2d:2c:e9:71:2b:21:8c:4d:6f:bd: c9:49:b2:a2:95:20:dc:c3:d6:90:8a:01:e3:c9:f1: 4d:16:77:69:97:44:9b:b9:c9:57:db:a1:6c:3f:cf: 25:36:6f:00:a2:8c:a3:35:2f:65:c8:cf:ac:db:f7: 71:73:c7:0e:f6:d1:4d:83:ca:d6:9b:37:5e:d8:22: ca:34:bc:32:bd:91:e4:86:39:2d:2d:d1:30:59:9a: 48:ba:59:77:66:9d:4f:04:f2:ef:27:16:59:ca:e7: d5:ef:a9:c4:54:18:a2:03:6f:30:62:12:84:05:9e: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2B:39:27:17:25:6B:1F:36:48:46:74:70:0E:43:4E:9E:30:E9:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/fb9d8f4d-5107-35fd-b81c-e80d6d926431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl X509v3 Authority Key Identifier: keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer sbgp-ipAddrBlock: critical IPv4: 147.124.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:84:07:6c:00:c0:b4:0a:cf:3d:81:7a:8c:c4:a3:da:e7:9d: 07:38:a8:2a:00:40:7e:02:75:de:10:20:0d:d8:1b:a7:c9:70: 01:49:2e:10:cf:39:5f:54:8d:34:0f:ac:a1:37:28:cf:18:b0: 0b:d2:12:11:35:2a:06:a3:ae:55:a0:88:34:d6:ef:c7:03:2a: 36:be:48:b3:94:1e:50:20:04:9d:16:97:55:4d:ab:65:0c:ed: 35:05:6d:cf:99:4b:29:a9:b6:f3:3d:37:46:17:b1:30:a1:c9: ec:dd:e6:3d:f3:66:3c:7e:54:66:ce:38:3d:68:e4:ce:fd:2d: 08:bd:55:62:18:0c:1b:06:42:15:43:dd:54:98:44:86:02:72: 71:e9:4e:2a:b6:ac:83:bb:15:88:84:e5:8c:da:2b:0e:f1:80: 01:e4:67:46:ff:c4:20:24:84:f7:65:c2:ab:be:03:ba:34:0c: 38:7e:af:b6:f3:2b:2c:1c:4e:45:a2:f9:c6:38:b8:71:52:36: a3:a2:e4:61:af:02:d7:62:1e:b8:05:bf:a2:07:5d:b1:5e:95: da:8c:26:7b:85:eb:bf:0a:fc:be:ac:90:18:37:ea:07:8a:1a: 72:01:d3:4e:6c:42:06:e3:29:13:4c:50:2d:f6:ee:18:67:61: 8c:89:78:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUpUo4+oOxTSH4AMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2 MzhiMB4XDTI0MDMxMDEzMDAzMVoXDTI0MDYwODEzMDAzMVowLzEtMCsGA1UEAxMk NTc1MjFhNGEtMzgxOS00YzRjLWFiMmYtZDNmNGFhYjQwZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitn0H1ZR6twHaDLdc7Bfiv6XYgoAIUS2Ekfe pNkP2GlBkc+62QOfbPHtDEQ8px6pyRE1/xgBME2vGvFjY2UHdVx4juBIl/jB1B+b kSMDzHxtkSONNMBfNloZ5mTmnvLXjoMGp8ZEx9/R0FnxTXaGs7ByXnA1Gv/YX0Of AuDjpU3T8YG/KmAKuRRNNS0s6XErIYxNb73JSbKilSDcw9aQigHjyfFNFndpl0Sb uclX26FsP88lNm8AooyjNS9lyM+s2/dxc8cO9tFNg8rWmzde2CLKNLwyvZHkhjkt LdEwWZpIull3Zp1PBPLvJxZZyufV76nEVBiiA28wYhKEBZ6+oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMrOScXJWsfNkhGdHAOQ06eMOmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MTdj MDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvZmI5ZDhmNGQtNTEwNy0z NWZkLWI4MWMtZTgwZDZkOTI2NDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDE3YzA2ZDAtMzIwMy00NGZkLWIx NjQtMGFlZDUwZjU2MzhiLzQxN2MwNmQwLTMyMDMtNDRmZC1iMTY0LTBhZWQ1MGY1 NjM4Yi5jcmwwHwYDVR0jBBgwFoAUAM6gxUxaaLPRCSpmePODyUIHxf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVk NTBmNTYzOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWEB2wAwLQKzz2BeozEo9rnnQc4qCoAQH4Cdd4QIA3YG6fJcAFJLhDP OV9UjTQPrKE3KM8YsAvSEhE1KgajrlWgiDTW78cDKja+SLOUHlAgBJ0Wl1VNq2UM 7TUFbc+ZSymptvM9N0YXsTChyezd5j3zZjx+VGbOOD1o5M79LQi9VWIYDBsGQhVD 3VSYRIYCcnHpTiq2rIO7FYiE5YzaKw7xgAHkZ0b/xCAkhPdlwqu+A7o0DDh+r7bz KywcTkWi+cY4uHFSNqOi5GGvAtdiHrgFv6IHXbFeldqMJnuF678K/L6skBg36geK GnIB005sQgbjKRNMUC327hhnYYyJeHo= -----END CERTIFICATE-----Generated at Sat May 4 13:36:19 2024 by rpki-client on console-fra.rpki-client.org