$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/279035a7-8002-3bf6-a23e-a6e6453f43f0.roa File: 279035a7-8002-3bf6-a23e-a6e6453f43f0.roa (raw, json) Hash identifier: 5z7EcA2veZfygDo3gzn42jsRT+vRBY3P3Fru8BUCOkg= Subject key identifier: 23:AD:C1:B8:6D:82:31:DA:CA:4D:E4:6D:95:07:BA:D5:81:A9:81:F3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858484D7595E873F15DB6DDDD1940 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/279035a7-8002-3bf6-a23e-a6e6453f43f0.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 26744 IP address blocks: 147.124.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:95:e8:73:f1:5d:b6:dd:dd:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=94ccca60-2222-47d4-92cf-7561ab95dd02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:d7:bd:e4:e5:b2:a8:58:36:a9:a8:dc:86: 37:aa:55:99:68:bf:8c:33:7d:8d:89:3a:a2:ae:31: 81:5a:e0:f1:fc:ac:48:3b:5b:a4:1e:86:3d:9d:d4: 3d:74:3b:74:77:70:5f:19:7a:6e:ec:0d:24:09:75: 26:f4:23:64:a2:9b:84:cd:af:27:bc:7e:8b:15:19: 45:5c:b2:ce:9e:fe:0a:4b:f8:f4:5e:80:a0:3d:30: 9f:ff:47:13:3c:fd:74:90:d4:84:2a:61:cc:a0:0d: ae:d1:50:67:19:b8:39:f9:61:21:bf:f6:57:a3:2a: 45:44:87:8e:b1:50:e5:e6:34:cf:a0:05:1e:20:13: dd:8d:ba:b6:d0:6c:9f:e6:3e:06:9d:02:21:31:1f: 0c:93:54:d0:5c:42:d1:10:f7:00:83:2a:b1:a6:b3: 17:cc:2a:ec:a3:62:61:db:3a:b4:3a:b7:85:78:1e: f2:aa:94:10:58:4a:44:78:b3:fe:db:61:22:3d:89: fa:2f:e6:2d:1c:1d:58:b4:f2:5c:35:ad:11:57:36: 05:0a:ba:2c:b1:b4:82:45:cc:c5:9c:fe:c9:22:58: e2:02:cb:72:9e:10:07:69:e5:6d:7c:f6:f6:b9:9f: 4d:63:f4:96:c4:22:af:cf:3b:71:1e:11:5f:aa:cc: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AD:C1:B8:6D:82:31:DA:CA:4D:E4:6D:95:07:BA:D5:81:A9:81:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/279035a7-8002-3bf6-a23e-a6e6453f43f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:31:6f:18:1d:03:93:03:3b:1e:05:65:37:27:23:20:33:20: e6:d8:d2:bb:4e:bf:13:ea:64:be:5a:78:d9:9d:24:ef:5a:06: 8f:8a:d2:fd:05:31:ba:49:6a:f6:f7:56:56:3e:08:a8:80:bb: ad:15:27:1f:65:e3:60:cd:ee:60:fa:f2:23:a8:26:62:6a:cf: 1b:b8:5c:9e:25:fa:33:50:b2:4b:b9:4b:18:eb:a1:9c:83:a5: f1:42:0c:bd:f0:8e:10:40:58:a3:9d:01:87:eb:cb:65:82:90: c9:fb:2b:67:06:03:2f:e8:d9:e1:cb:da:f2:c5:cd:ee:3f:e3: 6a:ce:57:8e:df:14:2d:a4:94:bd:1e:0c:49:e4:de:29:76:7d: fd:80:ce:2d:ac:a7:95:ad:5f:db:4c:37:b3:2f:06:4f:57:42: 5e:04:b9:a8:6a:35:30:51:86:bb:13:0e:55:e9:29:b1:ff:8f: 45:58:48:c0:61:89:4f:1a:86:30:69:41:22:4c:e0:dc:df:5a: 96:b6:4b:61:59:19:75:f3:63:91:5e:40:b1:20:04:ca:20:4a: 05:cc:c3:de:c6:7c:54:56:1b:6f:0c:01:de:e3:06:7e:fd:98: c5:d3:83:3a:09:92:94:7a:58:e5:79:31:77:79:2a:6e:0b:b3: d7:0b:a7:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZXoc/Fdtt3dGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk OTRjY2NhNjAtMjIyMi00N2Q0LTkyY2YtNzU2MWFiOTVkZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiLXveTlsqhYNqmo3IY3qlWZaL+MM32NiTqi rjGBWuDx/KxIO1ukHoY9ndQ9dDt0d3BfGXpu7A0kCXUm9CNkopuEza8nvH6LFRlF XLLOnv4KS/j0XoCgPTCf/0cTPP10kNSEKmHMoA2u0VBnGbg5+WEhv/ZXoypFRIeO sVDl5jTPoAUeIBPdjbq20Gyf5j4GnQIhMR8Mk1TQXELREPcAgyqxprMXzCrso2Jh 2zq0OreFeB7yqpQQWEpEeLP+22EiPYn6L+YtHB1YtPJcNa0RVzYFCrossbSCRczF nP7JIljiAstynhAHaeVtfPb2uZ9NY/SWxCKvzztxHhFfqswh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOtwbhtgjHayk3kbZUHutWBqYHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMjc5MDM1YTctODAwMi0z YmY2LWEyM2UtYTZlNjQ1M2Y0M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk3zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFExbxgdA5MDOx4FZTcnIyAzIObY0rtOvxPqZL5aeNmdJO9aBo+K0v0F MbpJavb3VlY+CKiAu60VJx9l42DN7mD68iOoJmJqzxu4XJ4l+jNQsku5SxjroZyD pfFCDL3wjhBAWKOdAYfry2WCkMn7K2cGAy/o2eHL2vLFze4/42rOV47fFC2klL0e DEnk3il2ff2Azi2sp5WtX9tMN7MvBk9XQl4EuahqNTBRhrsTDlXpKbH/j0VYSMBh iU8ahjBpQSJM4NzfWpa2S2FZGXXzY5FeQLEgBMogSgXMw97GfFRWG28MAd7jBn79 mMXTgzoJkpR6WOV5MXd5Km4Ls9cLp0g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:11 2025 by rpki-client