$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3a3a1822-20e7-3c17-8785-5540cec75af6.roa File: 3a3a1822-20e7-3c17-8785-5540cec75af6.roa (raw, json) Hash identifier: po2vbOyubrA4PeWEdG1Bb8A7JFwpOhx98prgzn+vBIQ= Subject key identifier: A3:2C:97:13:52:E9:4A:5C:17:2D:79:A9:5D:77:5A:65:C8:55:07:C8 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F43285848424AD9DCF287BB3BFD920D00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3a3a1822-20e7-3c17-8785-5540cec75af6.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 26744 IP address blocks: 147.124.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:d9:dc:f2:87:bb:3b:fd:92:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=82ff8f7f-5572-4a83-be61-a2f14d25d9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:8b:97:c5:0f:9c:74:16:2e:68:57:22:29: 78:00:e4:9b:6a:e0:42:f1:f5:8c:d7:06:89:b3:ac: 5f:1d:c3:df:f2:ac:00:a8:1f:fa:0f:71:cc:f6:4d: 06:27:4c:da:73:cc:04:ef:fc:3d:3e:cd:66:aa:68: 66:0f:9e:4d:a9:03:f6:5c:79:1e:a5:84:d9:03:0f: 71:e1:e0:47:3a:57:d2:49:db:09:93:7e:26:54:d5: 76:0a:8e:31:1b:00:7d:2c:74:ee:ba:da:72:bc:1e: 31:55:0a:24:6f:ce:4f:b6:da:40:15:0b:6c:d1:1f: c5:7b:39:b6:1f:1b:f4:37:ac:d0:39:f1:41:18:16: f4:24:35:57:d2:ac:6f:58:d9:60:0f:b4:d5:94:9b: 14:4c:97:63:d3:7c:f6:86:3b:b6:c6:9f:d3:b2:aa: 93:c2:51:eb:1f:70:63:32:a9:4b:7f:1b:90:cd:4f: 0a:49:b8:f1:c1:dd:24:a0:15:20:7d:d1:b1:ea:28: f8:d1:b3:f3:c5:dd:b3:4a:6e:54:8e:d2:68:e2:d5: 2b:2a:3d:1d:1d:53:45:d1:a5:32:06:94:42:9f:1d: b4:10:f7:4c:5d:4b:b6:e8:74:3d:3e:2b:a7:3c:54: 5a:b5:2f:9f:06:85:6a:8b:82:46:aa:47:fd:3b:f4: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2C:97:13:52:E9:4A:5C:17:2D:79:A9:5D:77:5A:65:C8:55:07:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3a3a1822-20e7-3c17-8785-5540cec75af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ef:cf:a4:63:56:ec:67:7a:39:11:ac:47:8c:dd:52:67:54: 91:64:2c:ee:1a:a0:b0:25:5f:8f:e5:09:32:fe:a1:49:d1:b4: c6:ed:8f:b8:69:7c:dc:c5:88:01:c9:1f:f4:b2:5d:39:8f:06: 58:eb:7d:38:84:92:b5:3a:e1:32:30:c0:83:ec:0a:c5:f8:f0: 1c:9b:47:b2:78:e7:4e:a8:c5:e8:0b:f5:20:54:0f:42:19:30: 58:22:0f:cb:49:bb:e8:8a:8a:c8:49:a6:a9:15:6b:9d:bb:10: 85:ef:d3:14:c5:93:82:e6:a7:88:c1:ab:4b:f4:aa:fa:be:9c: 1a:bf:82:0c:02:f0:a6:b5:61:07:bb:1b:7e:e5:af:8c:d0:06: 56:65:04:72:58:90:a4:8b:2a:97:31:a2:07:7c:1b:81:ab:ed: 2f:e1:42:80:b3:00:13:a9:69:b3:ed:76:a0:4d:f0:94:d1:79: 08:0b:0c:c8:a9:4a:3b:6c:08:1d:4b:c3:13:76:02:1b:e6:35: f9:c3:74:28:79:ef:b4:b3:9e:f2:a6:5b:67:3f:e9:97:34:a7: 30:83:6d:eb:ed:38:c0:48:7d:5e:0e:2d:34:82:cd:ee:7f:1f: 29:b1:98:c2:05:85:76:60:ab:9f:bd:9d:6e:bc:4a:f6:7c:1d: 1d:19:01:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStnc8oe7O/2SDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODJmZjhmN2YtNTU3Mi00YTgzLWJlNjEtYTJmMTRkMjVkOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8mLl8UPnHQWLmhXIil4AOSbauBC8fWM1waJ s6xfHcPf8qwAqB/6D3HM9k0GJ0zac8wE7/w9Ps1mqmhmD55NqQP2XHkepYTZAw9x 4eBHOlfSSdsJk34mVNV2Co4xGwB9LHTuutpyvB4xVQokb85PttpAFQts0R/Fezm2 Hxv0N6zQOfFBGBb0JDVX0qxvWNlgD7TVlJsUTJdj03z2hju2xp/TsqqTwlHrH3Bj MqlLfxuQzU8KSbjxwd0koBUgfdGx6ij40bPzxd2zSm5UjtJo4tUrKj0dHVNF0aUy BpRCnx20EPdMXUu26HQ9PiunPFRatS+fBoVqi4JGqkf9O/SCcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMslxNS6UpcFy15qV13WmXIVQfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvM2EzYTE4MjItMjBlNy0z YzE3LTg3ODUtNTU0MGNlYzc1YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3z2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3vz6RjVuxnejkRrEeM3VJnVJFkLO4aoLAlX4/lCTL+oUnRtMbtj7hp fNzFiAHJH/SyXTmPBljrfTiEkrU64TIwwIPsCsX48BybR7J4506oxegL9SBUD0IZ MFgiD8tJu+iKishJpqkVa527EIXv0xTFk4Lmp4jBq0v0qvq+nBq/ggwC8Ka1YQe7 G37lr4zQBlZlBHJYkKSLKpcxogd8G4Gr7S/hQoCzABOpabPtdqBN8JTReQgLDMip SjtsCB1LwxN2AhvmNfnDdCh577SznvKmW2c/6Zc0pzCDbevtOMBIfV4OLTSCze5/ HymxmMIFhXZgq5+9nW68SvZ8HR0ZAdE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:56 2025 by rpki-client