$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5e993549-ae60-352b-b107-e4c687ea0827.roa File: 5e993549-ae60-352b-b107-e4c687ea0827.roa (raw, json) Hash identifier: /fqUI+AP6DObo51+DMsJU92i4YFAtdyP5yljrRgeRzY= Subject key identifier: 75:AF:5D:A9:01:34:5C:F8:D0:8F:64:04:84:16:2B:84:00:C5:E6:70 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F43285848424ADA4D2E28299CC5A0C900 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5e993549-ae60-352b-b107-e4c687ea0827.roa Signing time: Thu 19 Dec 2024 14:00:52 +0000 ROA not before: Thu 19 Dec 2024 14:00:52 +0000 ROA not after: Wed 19 Mar 2025 13:00:52 +0000 asID: 26744 IP address blocks: 147.124.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:42:4a:da:4d:2e:28:29:9c:c5:a0:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Dec 19 14:00:52 2024 GMT Not After : Mar 19 13:00:52 2025 GMT Subject: CN=ce5419da-238e-4cdf-9606-9e6ebf2852e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:d5:dd:09:5a:12:8d:7e:e8:11:43:e3:cc: c7:bf:1f:cb:8b:8f:cd:3a:ab:94:06:d3:cc:09:5c: b6:91:2a:f6:f3:d1:ea:5a:69:90:19:e8:44:d8:e1: ad:88:b9:28:05:b9:0e:91:24:57:f9:20:d7:b6:de: e6:1f:71:ba:81:ec:8d:2e:f4:e8:6f:31:c8:56:d4: 7b:cc:4b:39:cb:85:02:46:2c:5c:1b:f6:0f:dd:e7: 91:c5:25:a1:3e:53:be:eb:7b:63:91:ec:43:bd:8e: c8:39:e9:99:b9:bc:fc:3a:95:ef:d5:90:5e:2b:1a: 02:d9:df:ec:b8:94:fc:07:42:f5:80:69:52:ff:f4: c9:f4:80:b3:30:93:15:fb:02:6b:9a:9c:c8:40:d2: 7b:1f:56:41:0f:81:1c:83:56:d6:25:29:95:95:85: 01:03:35:73:be:7c:58:f3:39:45:52:f4:a5:8b:82: 7a:c9:82:66:fd:1d:e5:c3:a2:25:67:a3:52:c4:d2: fb:e5:e9:a3:1d:13:9e:e9:43:ed:fc:f5:56:6b:5d: f0:9f:cd:b3:00:68:b9:d1:0c:6f:da:b1:2e:f4:91: a2:7c:d3:92:4c:32:f1:57:f0:e0:48:22:a4:82:2a: f5:50:4c:51:e4:1d:a2:4a:56:9f:f7:e0:60:3c:56: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:5D:A9:01:34:5C:F8:D0:8F:64:04:84:16:2B:84:00:C5:E6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/5e993549-ae60-352b-b107-e4c687ea0827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:dd:b9:69:8f:38:32:6a:fb:54:e6:f2:32:8e:c1:27:da:b0: 82:2f:02:ad:15:5f:8d:50:a8:47:97:24:ad:da:db:a1:18:82: 08:9f:36:03:3e:17:af:d2:40:ab:ba:93:11:40:5b:9a:2a:28: d1:3c:de:cf:5a:f2:50:f1:55:ac:df:ca:ca:eb:26:38:46:1a: f4:49:35:49:ab:31:ef:d9:30:39:a0:5c:a7:93:58:f8:69:87: 16:7d:58:33:79:25:8b:10:6a:fb:88:84:41:bc:21:bb:95:62: 5b:04:a2:bc:f6:01:7a:d0:5d:4f:51:8e:0f:f0:98:24:e3:97: 45:2f:0e:69:4a:e1:db:0d:38:25:b4:52:92:8f:8d:07:b7:a5: 00:be:06:da:00:c7:00:b6:c8:59:ee:34:a4:e9:f5:33:45:6f: 2e:9e:ee:64:c4:3c:3b:ce:23:9c:ca:a4:12:3f:f2:45:9e:d9: ac:99:a2:6e:fa:cf:39:dc:10:0b:76:0b:1b:a1:1a:ea:df:c8: 57:b0:f6:4a:86:4c:0f:81:ea:25:84:ea:71:aa:c9:ec:b9:fe: 6a:cd:64:df:c3:93:79:c7:6e:5e:95:9d:78:07:da:98:ab:47: c9:28:bc:79:8d:91:2e:35:0c:ed:74:a8:3f:ab:6a:c4:2f:a0: 38:44:6c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStpNLigpnMWgyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2U1NDE5ZGEtMjM4ZS00Y2RmLTk2MDYtOWU2ZWJmMjg1MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIrV3QlaEo1+6BFD48zHvx/Li4/NOquUBtPM CVy2kSr289HqWmmQGehE2OGtiLkoBbkOkSRX+SDXtt7mH3G6geyNLvTobzHIVtR7 zEs5y4UCRixcG/YP3eeRxSWhPlO+63tjkexDvY7IOemZubz8OpXv1ZBeKxoC2d/s uJT8B0L1gGlS//TJ9ICzMJMV+wJrmpzIQNJ7H1ZBD4Ecg1bWJSmVlYUBAzVzvnxY 8zlFUvSli4J6yYJm/R3lw6IlZ6NSxNL75emjHROe6UPt/PVWa13wn82zAGi50Qxv 2rEu9JGifNOSTDLxV/DgSCKkgir1UExR5B2iSlaf9+BgPFb1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWvXakBNFz40I9kBIQWK4QAxeZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNWU5OTM1NDktYWU2MC0z NTJiLWIxMDctZTRjNjg3ZWEwODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk3z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILduWmPODJq+1Tm8jKOwSfasIIvAq0VX41QqEeXJK3a26EYggifNgM+ F6/SQKu6kxFAW5oqKNE83s9a8lDxVazfysrrJjhGGvRJNUmrMe/ZMDmgXKeTWPhp hxZ9WDN5JYsQavuIhEG8IbuVYlsEorz2AXrQXU9Rjg/wmCTjl0UvDmlK4dsNOCW0 UpKPjQe3pQC+BtoAxwC2yFnuNKTp9TNFby6e7mTEPDvOI5zKpBI/8kWe2ayZom76 zzncEAt2CxuhGurfyFew9kqGTA+B6iWE6nGqyey5/mrNZN/Dk3nHbl6VnXgH2pir R8kovHmNkS41DO10qD+rasQvoDhEbEM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:40 2025 by rpki-client