$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa File: 9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa (raw, json) Hash identifier: fFI458iGUFbIiX9vp4AjgtuhpW1umwnpRoSMAsdN7UQ= Subject key identifier: F1:C9:E0:27:A0:35:B4:FC:3C:44:74:6E:99:AE:C3:3C:4B:C6:D0:59 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584543D800E1D42F0AE6FFBF7EC0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa Signing time: Wed 20 Mar 2024 01:00:24 +0000 ROA not before: Wed 20 Mar 2024 01:00:24 +0000 ROA not after: Tue 18 Jun 2024 01:00:24 +0000 asID: 16509 IP address blocks: 147.124.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:43:d8:00:e1:d4:2f:0a:e6:ff:bf:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Mar 20 01:00:24 2024 GMT Not After : Jun 18 01:00:24 2024 GMT Subject: CN=2a9fb1cf-aeac-4cb0-ba55-32a064e6b6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:40:f3:6c:f9:8f:5f:5f:87:0d:51:76:7d: 3d:ff:71:9f:bd:73:6d:46:60:5b:5c:2a:f1:98:ea: f3:af:77:bd:a7:7b:ec:16:15:66:6a:ed:f6:76:71: 07:aa:79:77:7e:43:52:37:f8:6c:b4:33:8c:8c:8c: 26:e4:cf:30:4c:bc:87:a5:14:52:35:a3:a1:4f:8f: 88:72:01:b4:3f:b1:a7:8a:d8:99:82:ac:8a:9c:2c: 91:19:ac:d7:1f:78:f8:c2:81:3e:8c:0d:96:b9:bb: ff:59:b7:c0:af:d7:35:b7:b3:d3:2a:25:c1:0e:35: 42:89:88:c9:43:c7:3f:f4:57:2e:c7:b1:75:d3:43: 1c:51:dd:f4:e9:a8:fb:e4:1d:cb:da:c5:58:96:27: 53:d9:ff:9d:ee:fb:a2:e5:85:97:58:2b:27:3c:6e: a3:7b:25:b3:f1:31:9e:96:f1:b7:5d:00:70:b2:dc: 12:10:e3:38:60:e8:53:9e:36:b9:46:ac:02:11:5c: 12:92:50:60:42:d0:11:0a:8b:b0:87:4d:03:ac:3a: c4:f3:3e:71:82:03:54:cc:46:3e:b9:1b:eb:0b:b0: e7:cd:cc:71:8e:84:84:52:44:ac:ac:4b:8b:66:5c: 7c:16:d1:ea:5e:28:62:d6:21:24:15:53:a2:dd:92: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C9:E0:27:A0:35:B4:FC:3C:44:74:6E:99:AE:C3:3C:4B:C6:D0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/9c09c1a8-c3e2-3980-ac4f-662a3b3cbcaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:02:70:f5:59:e6:53:52:ed:57:94:03:7d:8b:8a:38:97:86: 83:20:0a:f7:87:80:20:91:cb:4e:2b:bb:4c:fb:78:85:85:49: 11:bc:94:7e:89:c1:f2:60:b8:17:ea:19:8f:36:14:2f:d6:00: e7:48:16:c9:0d:bb:56:fc:03:e7:ef:c7:28:e1:91:2b:87:13: 7f:d8:1e:81:fb:43:ba:35:06:03:d7:c4:38:63:41:5d:5a:eb: 70:ea:ad:44:18:a9:c3:00:e3:46:b4:be:05:b5:01:c3:7a:c4: 68:63:30:15:8e:da:f9:a7:8b:2e:b7:77:22:42:28:f5:f2:55: 3b:93:92:3b:c8:5b:f7:03:6e:28:b5:09:e6:3c:67:c7:3c:65: cc:09:14:b2:1d:06:d5:3d:ef:a8:81:c5:59:ea:ab:27:00:ed: 8a:cd:99:8c:a0:be:ed:40:60:50:6d:d6:12:18:e8:bb:ad:a9: 9e:ea:92:30:bb:b4:90:57:40:9a:32:db:58:3f:7a:85:c7:4d: 93:bb:82:3c:4e:d8:b5:98:8a:d9:20:ea:f5:a4:9a:9c:00:cc: 38:e3:30:1f:c0:07:a9:57:9b:0d:d7:5f:18:3e:86:f1:7b:b9: c4:cc:33:8a:d9:c2:f6:b3:a7:8c:83:cc:5a:53:b2:6a:96:b4: 2c:67:83:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVD2ADh1C8K5v+/fsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI0MDMyMDAxMDAyNFoXDTI0MDYxODAxMDAyNFowLzEtMCsGA1UEAxMk MmE5ZmIxY2YtYWVhYy00Y2IwLWJhNTUtMzJhMDY0ZTZiNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWxA82z5j19fhw1Rdn09/3GfvXNtRmBbXCrx mOrzr3e9p3vsFhVmau32dnEHqnl3fkNSN/hstDOMjIwm5M8wTLyHpRRSNaOhT4+I cgG0P7GnitiZgqyKnCyRGazXH3j4woE+jA2Wubv/WbfAr9c1t7PTKiXBDjVCiYjJ Q8c/9Fcux7F100McUd306aj75B3L2sVYlidT2f+d7vui5YWXWCsnPG6jeyWz8TGe lvG3XQBwstwSEOM4YOhTnja5RqwCEVwSklBgQtARCouwh00DrDrE8z5xggNUzEY+ uRvrC7DnzcxxjoSEUkSsrEuLZlx8FtHqXihi1iEkFVOi3ZKuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHJ4CegNbT8PER0bpmuwzxLxtBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvOWMwOWMxYTgtYzNlMi0z OTgwLWFjNGYtNjYyYTNiM2NiY2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3ymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwCcPVZ5lNS7VeUA32LijiXhoMgCveHgCCRy04ru0z7eIWFSRG8lH6J wfJguBfqGY82FC/WAOdIFskNu1b8A+fvxyjhkSuHE3/YHoH7Q7o1BgPXxDhjQV1a 63DqrUQYqcMA40a0vgW1AcN6xGhjMBWO2vmniy63dyJCKPXyVTuTkjvIW/cDbii1 CeY8Z8c8ZcwJFLIdBtU976iBxVnqqycA7YrNmYygvu1AYFBt1hIY6LutqZ7qkjC7 tJBXQJoy21g/eoXHTZO7gjxO2LWYitkg6vWkmpwAzDjjMB/AB6lXmw3XXxg+hvF7 ucTMM4rZwvazp4yDzFpTsmqWtCxngx4= -----END CERTIFICATE-----Generated at Thu May 2 21:10:47 2024 by rpki-client on console-fra.rpki-client.org