$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: ZRfU7A3Udqbc4tEfeVgAFbrWc4MT+7HQn0Fxe/uqP8s= Subject key identifier: C2:13:EC:A9:7F:3C:FA:B0:31:4E:D2:A2:88:5B:F6:A1:AF:82:9E:AC Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584790E6663732E1119AAD1CDEC0 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Thu 17 Oct 2024 01:00:32 +0000 ROA not before: Thu 17 Oct 2024 01:00:32 +0000 ROA not after: Wed 15 Jan 2025 02:00:32 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:90:e6:66:37:32:e1:11:9a:ad:1c:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Oct 17 01:00:32 2024 GMT Not After : Jan 15 02:00:32 2025 GMT Subject: CN=db0165ea-4900-4e0c-81d8-f3d051c77898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:82:1c:f2:08:b7:ec:c1:db:96:95:c8:ec: 77:85:26:9d:e4:34:28:20:1f:f2:71:09:8c:47:7c: 77:6c:68:2a:16:e0:7c:59:5f:51:7c:cc:cd:44:dc: 54:c4:aa:25:16:bd:66:8c:94:b3:05:5a:30:3a:08: a0:4e:69:a8:f5:0c:36:b2:55:4d:20:df:21:75:ec: b6:93:f4:87:85:2b:24:24:c9:a7:78:1d:6f:8a:c3: 37:d7:7e:2c:8c:ec:4f:50:07:ea:f4:a7:aa:52:aa: 92:56:70:89:1b:65:53:aa:75:7c:00:b5:2f:bc:14: b3:7f:52:a4:ba:14:14:9b:db:cd:c1:6e:e0:01:f5: a2:14:33:e9:e0:95:7b:fc:34:22:f3:2e:aa:cf:9e: 13:e3:8e:f2:0e:a6:84:0b:90:58:88:af:c7:24:f6: 4f:f8:93:ed:4e:41:97:e0:fc:27:8b:49:08:41:e7: 55:ee:1d:af:31:1e:e2:57:1e:64:fa:84:60:cf:89: 59:69:7d:94:6c:9f:c7:47:d2:e9:ce:10:d8:e2:6c: b9:fc:63:04:8b:62:22:84:99:e5:39:07:fe:d6:99: 14:e0:e5:60:8f:49:64:8f:1c:b9:7c:b0:b8:d1:5c: 18:13:04:a6:5d:74:42:72:2a:ae:18:ce:88:28:e7: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:13:EC:A9:7F:3C:FA:B0:31:4E:D2:A2:88:5B:F6:A1:AF:82:9E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e4:3c:6e:2e:f5:dd:db:9e:1f:15:02:df:f3:39:e7:df:65: d7:b7:a7:6a:37:cb:59:5a:69:f3:35:20:2c:51:22:e6:84:fa: 2a:cb:0f:28:d6:1e:a5:af:88:a2:62:a1:86:a2:c3:44:6b:7c: 85:71:24:98:01:d0:77:6c:a2:33:73:55:c6:5d:f3:78:9f:16: 39:8a:5b:6e:f2:b8:cb:bc:58:68:99:ed:15:b7:54:ff:77:88: da:f4:c3:fb:1d:5c:0f:39:f5:9a:9e:80:6c:e1:e5:7d:25:ab: 50:0c:0b:06:b0:96:54:d2:08:16:2c:a2:b0:4d:61:26:ff:a6: 76:ed:a6:a6:b6:71:91:b1:22:16:2a:f7:a3:c8:59:5d:73:85: ec:18:80:55:c2:9b:34:f4:28:30:7b:5d:26:44:5b:dd:a1:ac: 46:85:74:4b:f6:22:ee:fd:97:fa:d3:b7:3e:3b:dd:aa:da:dc: 93:35:69:dd:19:29:ec:5c:9e:ae:0e:4d:a7:06:84:65:8a:35: 33:9b:c3:cd:09:a2:4d:73:dd:3f:de:ec:95:ba:8b:6a:a9:6e: bf:23:b8:93:21:f1:a9:02:e4:9b:49:e5:cf:60:7e:f4:08:a9: fd:42:c4:14:40:cf:0d:f3:34:ce:6c:c8:07:c2:95:59:2a:08: 4b:15:04:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeQ5mY3MuERmq0c3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI0MTAxNzAxMDAzMloXDTI1MDExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZGIwMTY1ZWEtNDkwMC00ZTBjLTgxZDgtZjNkMDUxYzc3ODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KSCHPIIt+zB25aVyOx3hSad5DQoIB/ycQmM R3x3bGgqFuB8WV9RfMzNRNxUxKolFr1mjJSzBVowOgigTmmo9Qw2slVNIN8hdey2 k/SHhSskJMmneB1visM3134sjOxPUAfq9KeqUqqSVnCJG2VTqnV8ALUvvBSzf1Kk uhQUm9vNwW7gAfWiFDPp4JV7/DQi8y6qz54T447yDqaEC5BYiK/HJPZP+JPtTkGX 4Pwni0kIQedV7h2vMR7iVx5k+oRgz4lZaX2UbJ/HR9LpzhDY4my5/GMEi2IihJnl OQf+1pkU4OVgj0lkjxy5fLC40VwYEwSmXXRCciquGM6IKOdolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIT7Kl/PPqwMU7Soohb9qGvgp6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3kPG4u9d3bnh8VAt/zOeffZde3p2o3y1laafM1ICxRIuaE+irLDyjW HqWviKJioYaiw0RrfIVxJJgB0HdsojNzVcZd83ifFjmKW27yuMu8WGiZ7RW3VP93 iNr0w/sdXA859ZqegGzh5X0lq1AMCwawllTSCBYsorBNYSb/pnbtpqa2cZGxIhYq 96PIWV1zhewYgFXCmzT0KDB7XSZEW92hrEaFdEv2Iu79l/rTtz473ara3JM1ad0Z Kexcnq4OTacGhGWKNTObw80Jok1z3T/e7JW6i2qpbr8juJMh8akC5JtJ5c9gfvQI qf1CxBRAzw3zNM5syAfClVkqCEsVBGM= -----END CERTIFICATE-----Generated at Tue Oct 22 21:19:03 2024 by rpki-client on console-ams.rpki-client.org