$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa File: 48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa (raw, json) Hash identifier: mTFs3/FBM6Um6S2OETqmWYRoGXOq57KKf1JU06sUpoQ= Subject key identifier: 64:59:8C:1C:D4:DE:98:7F:B9:B2:E6:BA:92:F5:6C:CC:71:54:8E:56 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584734C882E440D55D465B4F5200 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa Signing time: Sat 14 Sep 2024 01:00:32 +0000 ROA not before: Sat 14 Sep 2024 01:00:32 +0000 ROA not after: Fri 13 Dec 2024 02:00:32 +0000 asID: 16509 IP address blocks: 147.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:34:c8:82:e4:40:d5:5d:46:5b:4f:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 14 01:00:32 2024 GMT Not After : Dec 13 02:00:32 2024 GMT Subject: CN=8a8d3dbb-e1e2-410a-9c94-ae950cef4cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:9c:14:49:09:9c:66:78:de:98:1e:46:c6: cb:81:d0:41:f0:24:1a:0a:02:cd:fc:b2:da:0e:20: 7a:d1:aa:d7:b1:c2:03:7e:c6:b9:af:10:e9:0c:6e: c8:65:64:28:8e:15:28:13:9f:78:ef:b3:e8:60:7a: 43:e3:26:01:c5:83:b4:36:64:44:17:4a:ab:13:af: 8a:a0:3b:a9:5d:3a:fb:21:71:58:e6:6d:45:fd:18: 1a:81:70:6a:fc:1b:41:24:82:be:28:58:6f:0c:6d: af:68:74:2a:af:7a:b6:19:75:e0:b6:11:d5:1f:cd: 08:d9:b8:11:67:f2:23:97:72:ea:34:1c:d4:95:80: 49:85:43:0b:da:66:ca:cf:2d:93:91:ab:58:75:2f: c8:8c:60:56:df:d5:69:38:d0:1e:47:3c:59:a1:27: 09:7c:5a:fa:30:b6:7b:6f:75:4e:1c:17:9f:fc:14: 15:e7:43:25:89:2f:3a:d5:ae:23:d5:9c:39:7a:6f: 13:38:a4:50:9c:f9:78:f9:2b:3e:d9:74:03:06:3f: 2f:53:3c:26:56:6d:c6:9e:25:c7:4e:38:ad:9a:16: 9f:5f:2e:b0:96:e5:ad:45:e6:b5:b6:be:d4:af:69: bd:46:52:ca:36:84:a4:56:67:09:29:4d:da:c8:59: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:59:8C:1C:D4:DE:98:7F:B9:B2:E6:BA:92:F5:6C:CC:71:54:8E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/48f26fc9-08b0-3e1b-97bf-c0f0fee54f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:14:2e:9f:63:c9:28:9d:0a:89:9d:db:69:d6:de:8a:e3:27: 65:0e:56:88:58:08:e1:0c:4f:52:2e:49:01:19:6b:fe:42:f7: d9:db:d8:83:b0:ce:8e:92:33:9d:1e:45:dc:6f:8e:e6:b7:85: 64:ce:19:a0:07:bc:7b:bb:90:0c:24:76:2b:14:9d:2f:33:62: 0f:13:5e:c9:3b:66:de:00:0e:90:60:41:3d:c6:77:38:5a:62: cd:29:2c:2f:ae:7b:da:54:db:55:15:31:71:39:68:dd:72:92: f7:d5:6d:0c:ce:d7:4a:7e:22:24:a0:5b:94:1a:14:d9:7d:5f: 53:21:db:9c:2d:e4:82:b1:cf:80:46:ef:c7:df:de:81:9f:a2: 1f:f6:0e:b6:23:5b:26:f8:7a:df:dc:3a:e8:44:08:99:8b:e3: 03:52:e9:30:06:5a:87:63:51:40:61:72:1f:e4:75:a7:da:bd: a1:01:b5:4a:29:12:ba:f5:42:e9:5e:c2:e4:58:93:6b:3c:cc: 0a:8a:de:6d:d1:58:8c:8a:6c:d3:91:68:14:b5:b0:b6:c8:7a: 90:44:f7:8b:3d:3c:f3:d9:75:da:ea:e5:17:42:f4:cf:4b:2d: 5b:7a:75:69:2b:0c:8f:f5:cf:7b:5e:d7:8b:c0:77:0b:1b:79: 84:53:37:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yILkQNVdRltPUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk OGE4ZDNkYmItZTFlMi00MTBhLTljOTQtYWU5NTBjZWY0Y2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri6cFEkJnGZ43pgeRsbLgdBB8CQaCgLN/LLa DiB60arXscIDfsa5rxDpDG7IZWQojhUoE59477PoYHpD4yYBxYO0NmREF0qrE6+K oDupXTr7IXFY5m1F/RgagXBq/BtBJIK+KFhvDG2vaHQqr3q2GXXgthHVH80I2bgR Z/Ijl3LqNBzUlYBJhUML2mbKzy2TkatYdS/IjGBW39VpONAeRzxZoScJfFr6MLZ7 b3VOHBef/BQV50MliS861a4j1Zw5em8TOKRQnPl4+Ss+2XQDBj8vUzwmVm3GniXH TjitmhafXy6wluWtRea1tr7Ur2m9RlLKNoSkVmcJKU3ayFnBWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRZjBzU3ph/ubLmupL1bMxxVI5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvNDhmMjZmYzktMDhiMC0z ZTFiLTk3YmYtYzBmMGZlZTU0ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUULp9jySidComd22nW3orjJ2UOVohYCOEMT1IuSQEZa/5C99nb2IOw zo6SM50eRdxvjua3hWTOGaAHvHu7kAwkdisUnS8zYg8TXsk7Zt4ADpBgQT3Gdzha Ys0pLC+ue9pU21UVMXE5aN1ykvfVbQzO10p+IiSgW5QaFNl9X1Mh25wt5IKxz4BG 78ff3oGfoh/2DrYjWyb4et/cOuhECJmL4wNS6TAGWodjUUBhch/kdafavaEBtUop Err1QulewuRYk2s8zAqK3m3RWIyKbNORaBS1sLbIepBE94s9PPPZddrq5RdC9M9L LVt6dWkrDI/1z3te14vAdwsbeYRTN2s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:26 2024 by rpki-client on console-ams.rpki-client.org