$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa File: 91d55642-0c47-39e6-9f01-b3db6078eb51.roa (raw, json) Hash identifier: 4mU3IDOOG2KuVZTqlrBQYIyohbFYDwM1Mm7+Ta9adHw= Subject key identifier: 13:F9:AE:40:4F:3E:94:54:FB:D2:53:65:D0:FA:E3:32:EB:99:02:BA Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F4328584754E0C6C6B3C106E7BE865080 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa Signing time: Wed 25 Sep 2024 13:00:41 +0000 ROA not before: Wed 25 Sep 2024 13:00:41 +0000 ROA not after: Tue 24 Dec 2024 14:00:41 +0000 asID: 30165 IP address blocks: 147.253.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:e0:c6:c6:b3:c1:06:e7:be:86:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: Sep 25 13:00:41 2024 GMT Not After : Dec 24 14:00:41 2024 GMT Subject: CN=356da1a7-d9fa-4c4c-9b98-4e46b3548e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:cf:09:2e:55:02:b8:59:47:26:db:c4:e8: 54:c1:59:97:3c:ae:8e:03:a6:64:05:65:ed:45:aa: 7c:8e:9c:ae:01:f6:46:3e:ba:c3:54:37:f2:9b:45: ea:b4:25:62:50:c4:14:72:74:27:69:ab:31:22:77: 5b:d3:18:5e:28:35:d1:dd:3f:03:b6:49:6f:1c:c2: d2:3d:ad:f5:2c:68:e0:8e:26:fe:c2:47:7d:c4:93: af:a6:e4:d8:50:c9:fe:8c:d9:15:d2:b4:cd:19:4d: d3:be:26:55:ea:e4:fa:df:35:a2:32:5c:ae:f1:c7: c3:7a:e9:5e:c4:de:02:9f:5c:46:37:95:ce:be:3e: 9a:52:35:c8:15:48:04:81:24:b5:14:33:b8:75:b7: 20:0f:43:89:fb:84:30:70:d7:e3:3a:fd:fb:76:07: 2f:0f:bf:c5:cd:e6:86:59:80:2e:a9:e4:41:0e:0a: 1e:18:26:78:e4:4f:58:87:fb:48:e0:e7:67:be:67: b2:f2:4b:37:88:d5:b0:01:84:16:f6:c6:d3:3d:63: 96:49:27:f1:21:a6:4e:94:03:8c:a3:49:03:9b:0c: 6a:1a:da:61:8f:30:94:6e:c2:09:de:f4:f0:be:9b: 79:7b:ae:87:ce:58:12:e4:67:72:6f:05:95:b2:d4: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F9:AE:40:4F:3E:94:54:FB:D2:53:65:D0:FA:E3:32:EB:99:02:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv4: 147.253.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:4c:8a:20:c9:3e:ea:5c:71:47:ba:b9:94:d0:db:ce:7a:73: ec:fd:2c:09:6d:ae:fd:26:a2:73:74:ce:71:69:9a:28:13:17: a5:77:1e:28:3c:35:07:bc:2a:56:a4:5d:01:d1:f0:54:bd:1c: 2c:92:f5:3c:7e:9f:66:9e:fa:7a:d0:b3:ec:db:14:f8:a7:00: 81:e4:6f:09:c4:6d:ed:41:4b:6f:42:71:71:52:63:33:26:24: 82:e1:78:03:c3:fa:34:61:ea:3c:8e:46:65:b8:be:b5:fe:05: 58:6b:cb:92:6a:8d:03:49:99:c4:c0:e4:41:43:62:03:22:27: e9:e0:19:fa:38:87:bb:5d:ca:8f:24:f5:f3:6a:c4:4b:f3:83: bc:af:ca:15:4c:4c:5d:ac:66:72:54:b8:88:a0:ae:28:d3:05: ad:ac:75:19:95:ae:bb:78:61:e4:dd:d0:33:ba:f8:d6:33:d8: dc:8f:75:2b:ec:9d:06:53:5a:b9:af:f7:99:72:f9:6b:d7:75: b4:b7:e4:d0:00:aa:d0:a2:0e:f2:45:f6:80:d2:2b:1a:00:c8: 24:58:25:9a:61:6f:44:6b:63:c8:d6:17:cd:4a:0f:4c:b7:99: 3f:9d:53:b4:2c:2b:9e:1f:66:ac:c3:21:71:f9:54:84:0a:5a: fc:df:97:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdU4MbGs8EG576GUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MzU2ZGExYTctZDlmYS00YzRjLTliOTgtNGU0NmIzNTQ4ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgHPCS5VArhZRybbxOhUwVmXPK6OA6ZkBWXt Rap8jpyuAfZGPrrDVDfym0XqtCViUMQUcnQnaasxIndb0xheKDXR3T8DtklvHMLS Pa31LGjgjib+wkd9xJOvpuTYUMn+jNkV0rTNGU3TviZV6uT63zWiMlyu8cfDeule xN4Cn1xGN5XOvj6aUjXIFUgEgSS1FDO4dbcgD0OJ+4QwcNfjOv37dgcvD7/FzeaG WYAuqeRBDgoeGCZ45E9Yh/tI4Odnvmey8ks3iNWwAYQW9sbTPWOWSSfxIaZOlAOM o0kDmwxqGtphjzCUbsIJ3vTwvpt5e66HzlgS5GdybwWVstQIQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP5rkBPPpRU+9JTZdD64zLrmQK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvOTFkNTU2NDItMGM0Ny0z OWU2LTlmMDEtYjNkYjYwNzhlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFk/3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNMiiDJPupccUe6uZTQ2856c+z9LAltrv0monN0znFpmigTF6V3Hig8 NQe8KlakXQHR8FS9HCyS9Tx+n2ae+nrQs+zbFPinAIHkbwnEbe1BS29CcXFSYzMm JILheAPD+jRh6jyORmW4vrX+BVhry5JqjQNJmcTA5EFDYgMiJ+ngGfo4h7tdyo8k 9fNqxEvzg7yvyhVMTF2sZnJUuIigrijTBa2sdRmVrrt4YeTd0DO6+NYz2NyPdSvs nQZTWrmv95ly+WvXdbS35NAAqtCiDvJF9oDSKxoAyCRYJZphb0RrY8jWF81KD0y3 mT+dU7QsK54fZqzDIXH5VIQKWvzfl/A= -----END CERTIFICATE-----Generated at Fri Nov 22 04:39:19 2024 by rpki-client on console-ams.rpki-client.org