$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa File: be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa (raw, json) Hash identifier: HSQ0W+94HSknfnx+k4dM89WJofOCLiJZZNvHVsRo6h0= Subject key identifier: 75:A3:63:B6:9D:F1:36:70:20:64:51:D0:6F:9B:C4:A0:0F:B0:67:05 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F432858484D75903D3E4BD6E89373D400 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 393740 IP address blocks: 147.124.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:90:3d:3e:4b:d6:e8:93:73:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=ce883ae8-aa9d-45ec-a582-6b7970a1bfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:66:70:3d:03:a5:fc:68:34:e7:ce:c1:e1:61: c6:60:7c:81:05:ab:41:26:77:77:60:eb:a8:81:ee: b1:28:63:f7:86:2a:41:7b:7b:ec:d9:34:5a:d1:87: 96:81:0b:5d:55:ad:c5:ba:90:2f:4b:6a:03:1c:c5: 30:19:c0:cd:bb:f2:b9:a5:6b:23:3c:11:71:e6:0b: 54:36:a2:5f:db:13:13:f3:dc:eb:33:b9:3b:81:d4: b8:97:86:0e:5a:18:90:7e:0b:14:7e:d6:c3:2c:ad: 08:2a:02:24:71:38:5a:c3:7c:5c:90:a8:7e:f5:ab: 33:bc:ea:06:68:32:e9:5b:2c:b2:cb:21:8f:c0:8e: 06:d9:1e:19:46:95:99:26:1b:3b:a2:78:d2:a9:34: 85:86:1a:a1:7f:e6:b9:2b:a3:42:5c:99:1a:ed:fc: 53:25:53:52:23:4a:e6:2e:2a:75:9e:2f:e2:7e:db: e2:ee:9c:05:3e:50:71:64:1c:8e:f3:ac:9a:ae:bb: 32:1c:f5:4b:cb:e6:d6:49:4a:32:78:46:09:6b:55: e9:49:51:c0:1b:0a:7a:e1:23:4b:99:8e:de:b3:25: c9:65:47:a2:87:d0:ea:d1:ea:5a:38:7d:0e:17:b2: 97:54:15:72:15:5f:b1:dc:7d:98:c1:99:f5:e3:9c: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A3:63:B6:9D:F1:36:70:20:64:51:D0:6F:9B:C4:A0:0F:B0:67:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:99:5e:97:0e:a5:d2:d6:0e:dd:bb:80:e6:8d:3f:03:d1:07: 34:c1:ee:bf:c9:c3:cc:a1:c4:5a:72:1b:21:0f:f4:c8:de:27: 9e:af:72:ba:6f:7c:27:c4:1d:95:e9:22:cc:9e:dc:08:74:2d: 19:6b:42:9e:3f:6f:8d:38:cd:d5:6a:bd:3d:c2:7b:c6:39:2b: 9d:35:71:d8:a4:62:b9:2d:0a:d7:bc:2b:99:72:ae:3b:0f:26: d4:fb:8d:97:b9:54:c1:58:40:5a:df:15:5e:10:3f:b8:e4:7f: bd:a8:8d:44:6b:ba:35:51:90:4c:ad:79:9c:af:51:58:ca:29: cd:cc:ae:45:66:3e:84:e4:36:58:28:a2:89:ec:51:0d:05:df: aa:8b:92:b2:6e:9b:06:cb:f2:8e:8e:03:ad:bc:94:8d:81:00: 50:0c:1b:ea:fc:6a:d7:b4:bb:fd:3f:e7:29:8a:68:7c:0e:81: 0f:71:11:ab:03:15:ae:56:25:be:dd:92:19:bd:ea:e9:64:18: 3b:01:8c:49:35:4a:58:a5:de:80:34:5e:8a:9f:53:ff:32:41: b0:ee:a9:4a:09:f6:69:be:b1:7c:2f:80:55:3d:c4:c2:4e:e3: 30:65:20:91:f2:23:9a:50:5f:67:2b:e3:3b:98:d2:14:7d:4a: 28:34:03:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNdZA9PkvW6JNz1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk Y2U4ODNhZTgtYWE5ZC00NWVjLWE1ODItNmI3OTcwYTFiZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92ZwPQOl/Gg0587B4WHGYHyBBatBJnd3YOuo ge6xKGP3hipBe3vs2TRa0YeWgQtdVa3FupAvS2oDHMUwGcDNu/K5pWsjPBFx5gtU NqJf2xMT89zrM7k7gdS4l4YOWhiQfgsUftbDLK0IKgIkcThaw3xckKh+9aszvOoG aDLpWyyyyyGPwI4G2R4ZRpWZJhs7onjSqTSFhhqhf+a5K6NCXJka7fxTJVNSI0rm Lip1ni/iftvi7pwFPlBxZByO86yarrsyHPVLy+bWSUoyeEYJa1XpSVHAGwp64SNL mY7esyXJZUeih9Dq0epaOH0OF7KXVBVyFV+x3H2YwZn145wMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWjY7ad8TZwIGRR0G+bxKAPsGcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYmUzYTY5NWEtMWNiYy0z NWQ5LTg0NzYtMDE5YWNlMWMyZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3znMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqZXpcOpdLWDt27gOaNPwPRBzTB7r/Jw8yhxFpyGyEP9MjeJ56vcrpv fCfEHZXpIsye3Ah0LRlrQp4/b404zdVqvT3Ce8Y5K501cdikYrktCte8K5lyrjsP JtT7jZe5VMFYQFrfFV4QP7jkf72ojURrujVRkEyteZyvUVjKKc3MrkVmPoTkNlgo oonsUQ0F36qLkrJumwbL8o6OA628lI2BAFAMG+r8ate0u/0/5ymKaHwOgQ9xEasD Fa5WJb7dkhm96ulkGDsBjEk1Slil3oA0XoqfU/8yQbDuqUoJ9mm+sXwvgFU9xMJO 4zBlIJHyI5pQX2cr4zuY0hR9Sig0A6M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:33 2025 by rpki-client