$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa File: f672a23a-52c5-323e-aded-807a969f9369.roa (raw, json) Hash identifier: DlQk3gefOJMF+ZrxYWX0tLXyB8vqVblTihEmLTwZ1go= Subject key identifier: CB:E6:BF:1B:34:D6:95:B9:38:2B:AB:96:45:A6:90:9A:B9:A9:30:98 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F432858475910BB6EC050A98D29D58780 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa Signing time: Fri 27 Sep 2024 01:00:31 +0000 ROA not before: Fri 27 Sep 2024 01:00:31 +0000 ROA not after: Thu 26 Dec 2024 02:00:31 +0000 asID: 16509 IP address blocks: 147.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:59:10:bb:6e:c0:50:a9:8d:29:d5:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Sep 27 01:00:31 2024 GMT Not After : Dec 26 02:00:31 2024 GMT Subject: CN=d7dbe9e9-df91-4aa0-8b61-5fe1e9817c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:b6:bc:be:59:cc:64:df:d8:4a:3d:c4:61: e4:59:02:b3:ff:f1:36:f5:ea:02:c3:ed:3b:a9:b7: 48:c4:21:7d:a8:93:a9:f8:33:30:26:37:1d:17:6d: 30:62:db:5d:77:a6:53:6f:ca:b2:3c:57:fa:10:27: 85:d9:68:d8:f4:50:71:4a:e4:40:f6:25:2a:8f:e7: 87:cb:fb:87:7e:8b:9d:04:40:32:c9:d4:c6:92:b3: ad:cd:7e:3e:51:b7:1e:42:9b:bc:b9:52:f5:a5:68: b0:cf:4a:4a:b1:d4:f6:e3:38:3d:a0:fc:e9:d8:22: d0:c9:36:ad:02:89:36:a4:0b:e2:59:f2:f1:c9:ff: 22:ec:1e:1a:9f:0f:be:33:20:85:11:dc:57:e6:f2: 19:6b:c7:aa:2c:f6:b1:4e:68:4e:92:9f:33:0a:eb: 38:c0:34:93:79:47:a3:df:e3:b3:c2:73:c3:86:21: 26:d7:9a:ce:06:0c:a1:ed:ff:3a:1d:b7:38:00:7e: ac:08:81:9d:c0:34:8f:cc:df:5a:ab:61:f4:e5:50: a0:e2:e2:ee:ec:9b:d1:06:9c:e7:53:f4:ad:c0:a6: ef:17:9b:5e:be:d6:de:81:c9:31:93:69:c0:7d:fc: 89:6e:2a:7e:68:b1:f5:c5:9d:f7:9f:f7:53:02:38: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E6:BF:1B:34:D6:95:B9:38:2B:AB:96:45:A6:90:9A:B9:A9:30:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/f672a23a-52c5-323e-aded-807a969f9369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ec:85:66:83:3d:c2:dc:d8:ae:ad:d0:f1:ae:21:60:c0:52: 9d:47:1b:11:56:98:6b:30:d3:26:1c:5b:b9:1b:67:1f:b8:8c: 20:10:ba:01:e2:cf:22:be:63:ac:84:92:77:2c:60:02:8e:23: de:0d:71:ee:12:7c:fd:c8:24:86:c0:00:10:87:ca:b4:c4:6b: 5f:bf:3d:be:70:48:b6:64:36:58:03:c1:d5:53:75:42:67:22: 7b:8f:03:2f:d1:7e:de:70:73:72:19:9f:fd:4c:9f:c5:36:01: 67:9e:38:0c:af:28:54:06:e4:30:55:4b:09:1d:dc:f9:63:f9: 09:a3:14:70:66:0f:b3:5c:39:7d:e3:68:68:1c:ff:45:07:9e: 79:b2:8a:dd:f2:1c:90:a7:d9:3d:3f:8c:05:89:36:49:fd:2a: 76:14:e8:9f:46:d3:26:c5:2b:e5:89:8f:a5:eb:09:4d:15:d3: a2:fe:7c:e1:1c:52:f5:82:e8:be:0a:bb:20:5f:25:58:76:f1: b4:b1:ce:ee:9e:db:06:fa:10:11:ae:24:7f:43:3a:a0:2a:73: 06:09:e0:49:ac:28:78:41:d0:46:0e:3d:37:d8:1f:a7:6d:d9: 30:fb:b0:71:d7:f8:7e:38:38:de:97:08:53:5b:65:21:bd:e2: 1b:ca:a2:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdZELtuwFCpjSnVh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI0MDkyNzAxMDAzMVoXDTI0MTIyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDdkYmU5ZTktZGY5MS00YWEwLThiNjEtNWZlMWU5ODE3YzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRC2vL5ZzGTf2Eo9xGHkWQKz//E29eoCw+07 qbdIxCF9qJOp+DMwJjcdF20wYttdd6ZTb8qyPFf6ECeF2WjY9FBxSuRA9iUqj+eH y/uHfoudBEAyydTGkrOtzX4+UbceQpu8uVL1pWiwz0pKsdT24zg9oPzp2CLQyTat Aok2pAviWfLxyf8i7B4anw++MyCFEdxX5vIZa8eqLPaxTmhOkp8zCus4wDSTeUej 3+OzwnPDhiEm15rOBgyh7f86Hbc4AH6sCIGdwDSPzN9aq2H05VCg4uLu7JvRBpzn U/StwKbvF5tevtbegckxk2nAffyJbip+aLH1xZ33n/dTAjhJVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvmvxs01pW5OCurlkWmkJq5qTCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZjY3MmEyM2EtNTJjNS0z MjNlLWFkZWQtODA3YTk2OWY5MzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTshWaDPcLc2K6t0PGuIWDAUp1HGxFWmGsw0yYcW7kbZx+4jCAQugHi zyK+Y6yEkncsYAKOI94Nce4SfP3IJIbAABCHyrTEa1+/Pb5wSLZkNlgDwdVTdUJn InuPAy/Rft5wc3IZn/1Mn8U2AWeeOAyvKFQG5DBVSwkd3Plj+QmjFHBmD7NcOX3j aGgc/0UHnnmyit3yHJCn2T0/jAWJNkn9KnYU6J9G0ybFK+WJj6XrCU0V06L+fOEc UvWC6L4KuyBfJVh28bSxzu6e2wb6EBGuJH9DOqAqcwYJ4EmsKHhB0EYOPTfYH6dt 2TD7sHHX+H44ON6XCFNbZSG94hvKoio= -----END CERTIFICATE-----Generated at Thu Nov 21 21:48:26 2024 by rpki-client on console-ams.rpki-client.org