$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json) Hash identifier: l95pD8Q9hCqjPp8pMmLlmUBaHOtye+xxAHeOJKtlLYw= Subject key identifier: 89:73:24:09:58:C7:AE:05:F3:3B:3A:5F:90:3D:27:44:0D:F3:30:B1 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584574B319867C361619E30DF000 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa Signing time: Sat 06 Apr 2024 13:00:35 +0000 ROA not before: Sat 06 Apr 2024 13:00:35 +0000 ROA not after: Fri 05 Jul 2024 13:00:35 +0000 asID: 396982 IP address blocks: 147.124.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:74:b3:19:86:7c:36:16:19:e3:0d:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Apr 6 13:00:35 2024 GMT Not After : Jul 5 13:00:35 2024 GMT Subject: CN=ece38ddf-3d74-4672-a63b-38bb0ce7fcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:81:bb:80:b1:c7:7a:e1:d6:ca:7b:11:25: d2:f2:14:fd:c7:23:f6:39:8a:bd:0c:6f:e8:c7:44: a0:9c:63:d6:6c:98:54:a4:2f:95:19:c5:9b:46:93: 9b:eb:10:e6:f7:49:66:fa:fc:e4:72:3c:b3:79:eb: 28:2f:38:57:71:a3:13:42:ef:f5:d9:8f:af:ca:d7: bf:43:fe:fa:e1:fc:19:7c:ca:6d:10:10:da:30:0a: fd:40:50:fe:51:43:eb:42:a2:84:d2:3d:92:5a:c0: 5d:d5:f9:2b:84:be:df:a5:a8:8b:cb:eb:cf:22:e0: e3:fc:a9:57:d2:cd:f7:ea:09:40:6d:7f:d9:51:db: 30:86:eb:5d:85:a0:a6:d8:ab:5c:03:79:78:ca:ff: b0:8c:fb:bc:6c:b9:43:33:40:94:59:0d:65:0c:02: 60:28:20:f0:17:7d:67:36:99:49:f2:c8:84:dd:7e: 4b:d8:d0:14:a3:48:4f:3f:5d:5c:94:e0:87:51:df: 3a:3e:95:70:76:9f:ac:42:9d:7f:65:7b:d0:ec:c1: 9b:f6:09:e0:6b:1c:a9:11:d5:9a:22:da:e6:86:a2: 57:b9:d5:45:12:85:41:89:79:5e:b1:e6:75:3d:34: ab:29:fa:2f:bf:40:76:6e:9f:c9:df:d3:b1:2c:88: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:24:09:58:C7:AE:05:F3:3B:3A:5F:90:3D:27:44:0D:F3:30:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3e:6e:fb:e2:74:55:3b:50:6d:9a:4f:0e:86:0f:33:ac:a5: 46:98:a7:7d:79:47:61:73:4a:e8:d4:84:b3:b3:6a:80:4c:25: 12:53:00:ac:e5:88:2f:58:ed:a5:a5:22:fc:19:e2:11:5f:29: 32:97:b8:96:e9:35:de:8a:6e:bb:f8:4e:c7:f7:a6:a2:7d:16: ed:5c:82:67:03:ae:99:01:9b:dc:2d:3f:f8:2c:57:5c:89:cb: 92:68:71:34:11:d4:49:e7:67:71:2a:f6:8b:1d:6c:8a:a1:cc: 3e:7f:a2:db:c8:64:5c:be:59:18:c6:df:49:7b:53:99:5c:1f: e0:f0:68:49:b7:73:87:12:f5:14:bf:bd:20:01:9d:c1:8a:41: 9e:6b:2c:b0:fa:a2:bb:5c:00:98:42:95:0d:c2:f3:a6:fa:bb: 20:46:50:40:2e:86:90:03:60:75:ec:20:cf:9e:79:55:80:03: a8:55:c3:76:b3:3b:a2:8e:59:4d:09:1f:c3:27:b3:f4:5c:df: c9:9b:7c:3b:0a:89:b5:66:fa:64:2a:82:d3:c0:9b:49:1c:58: 81:b3:86:45:59:41:79:60:36:6a:61:e1:e1:68:3a:ca:f4:e8: d3:29:66:8a:93:ec:26:d7:cb:75:89:49:48:0b:09:84:35:35: bf:b8:e6:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV0sxmGfDYWGeMN8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI0MDQwNjEzMDAzNVoXDTI0MDcwNTEzMDAzNVowLzEtMCsGA1UEAxMk ZWNlMzhkZGYtM2Q3NC00NjcyLWE2M2ItMzhiYjBjZTdmY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcyBu4Cxx3rh1sp7ESXS8hT9xyP2OYq9DG/o x0SgnGPWbJhUpC+VGcWbRpOb6xDm90lm+vzkcjyzeesoLzhXcaMTQu/12Y+vyte/ Q/764fwZfMptEBDaMAr9QFD+UUPrQqKE0j2SWsBd1fkrhL7fpaiLy+vPIuDj/KlX 0s336glAbX/ZUdswhutdhaCm2KtcA3l4yv+wjPu8bLlDM0CUWQ1lDAJgKCDwF31n NplJ8siE3X5L2NAUo0hPP11clOCHUd86PpVwdp+sQp1/ZXvQ7MGb9gngaxypEdWa ItrmhqJXudVFEoVBiXleseZ1PTSrKfovv0B2bp/J39OxLIjcKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlzJAlYx64F8zs6X5A9J0QN8zCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0+bvvidFU7UG2aTw6GDzOspUaYp315R2FzSujUhLOzaoBMJRJTAKzl iC9Y7aWlIvwZ4hFfKTKXuJbpNd6Kbrv4Tsf3pqJ9Fu1cgmcDrpkBm9wtP/gsV1yJ y5JocTQR1EnnZ3Eq9osdbIqhzD5/otvIZFy+WRjG30l7U5lcH+DwaEm3c4cS9RS/ vSABncGKQZ5rLLD6ortcAJhClQ3C86b6uyBGUEAuhpADYHXsIM+eeVWAA6hVw3az O6KOWU0JH8Mns/Rc38mbfDsKibVm+mQqgtPAm0kcWIGzhkVZQXlgNmph4eFoOsr0 6NMpZoqT7CbXy3WJSUgLCYQ1Nb+45t0= -----END CERTIFICATE-----Generated at Sat Apr 20 02:52:09 2024 by rpki-client on console-ams.rpki-client.org