$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/0adc78b7-6150-3134-bada-2174e4b6dc6e.roa File: 0adc78b7-6150-3134-bada-2174e4b6dc6e.roa (raw, json) Hash identifier: l3rfI2D4XY6O95yTyyP0ECp0ETNaNI9ugxWls7Uzomo= Subject key identifier: 4E:DD:8A:EE:97:FC:C3:B2:80:1A:C9:BE:86:3A:1E:24:C4:92:53:96 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858483E1AA59128711F6354960700 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/0adc78b7-6150-3134-bada-2174e4b6dc6e.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 5050 IP address blocks: 147.73.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a5:91:28:71:1f:63:54:96:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=026033e6-a07d-493b-b48e-dc7433449957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:5a:28:f6:59:df:8e:0d:3b:b7:59:27:8c: 13:e0:c2:20:63:00:37:f5:d7:8b:d6:9f:e7:4f:c5: 19:25:d1:3d:4c:f1:f8:65:24:2a:4a:3c:dd:fe:6f: 72:ae:f2:92:e5:30:9b:cf:68:f3:f9:5e:e3:fa:29: 33:4a:3c:fd:e7:1a:f5:ae:c7:d7:ed:9d:39:5d:76: b6:8c:4f:fb:d1:1d:8b:52:d9:0d:28:f6:76:e0:e9: 30:b3:97:12:ef:a4:ad:78:65:e3:97:e0:13:c2:cf: ae:9e:a4:cb:fc:70:60:94:14:ae:bb:8d:0c:fb:17: de:90:14:ec:c9:d0:fb:25:52:87:dd:6b:00:9f:18: cc:47:6d:d9:a9:e0:19:54:27:4c:ce:f6:02:69:de: ef:b4:84:a7:8c:19:49:41:10:b0:a8:dd:5e:d9:00: cd:c7:37:de:8b:dc:3d:df:83:81:c3:b0:9b:0e:e3: 0d:1a:e9:8b:9e:8d:4b:bc:dd:c5:de:ca:d3:eb:4b: d0:8c:e9:74:42:ec:9b:e4:05:05:a1:75:14:82:2e: ba:e8:c6:b5:7f:71:7f:50:fe:80:ff:32:2e:a2:85: 3a:0b:6a:b0:51:64:44:90:72:ab:f4:ad:57:d0:d8: ea:7f:02:24:b2:1d:db:8c:6e:cd:c7:81:27:72:63: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:8A:EE:97:FC:C3:B2:80:1A:C9:BE:86:3A:1E:24:C4:92:53:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/0adc78b7-6150-3134-bada-2174e4b6dc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:72:33:ea:b9:db:c1:3c:f4:96:46:2a:4e:6a:41:51:af:35: 23:b5:46:8a:c9:4a:2d:53:21:3a:41:0e:81:e7:bd:eb:b8:52: 62:f7:46:d2:3d:e2:34:fa:e2:5a:24:13:b7:f6:5a:f3:6b:c6: d0:71:06:b9:e1:4f:28:93:af:e5:cc:b4:fa:6e:fd:d3:c3:4f: 77:e7:91:22:dd:0d:81:aa:bd:a0:bd:89:f2:9b:2f:5d:6e:b7: 0c:99:1c:98:4c:c0:52:f8:22:b4:59:fd:96:8f:b8:99:ef:f3: 23:25:48:81:fa:7d:21:43:d2:1d:a5:ea:22:14:6c:26:b2:5e: 6c:63:41:7f:20:0d:12:36:81:b7:33:8b:45:38:9a:07:54:13: f5:ad:a7:00:98:96:26:70:ee:9c:3f:c4:bb:b0:a6:bf:42:c2: d6:7c:98:27:22:cb:5f:d7:31:42:c8:90:8f:1c:92:21:5c:12: 3f:48:94:a9:aa:2f:f0:4b:5b:8a:b2:0e:6b:f3:72:e1:f4:16: 0e:d2:55:14:cc:5f:68:6d:f4:01:31:33:1c:20:2b:6d:27:9a: a0:9d:c3:0d:b7:18:58:e2:61:91:f4:d1:11:40:4c:54:0c:5c: 42:af:02:93:6f:64:f1:25:54:fe:d8:bb:5b:58:89:d9:1f:82: ab:6b:42:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqWRKHEfY1SWBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk MDI2MDMzZTYtYTA3ZC00OTNiLWI0OGUtZGM3NDMzNDQ5OTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1NaKPZZ344NO7dZJ4wT4MIgYwA39deL1p/n T8UZJdE9TPH4ZSQqSjzd/m9yrvKS5TCbz2jz+V7j+ikzSjz95xr1rsfX7Z05XXa2 jE/70R2LUtkNKPZ24Okws5cS76SteGXjl+ATws+unqTL/HBglBSuu40M+xfekBTs ydD7JVKH3WsAnxjMR23ZqeAZVCdMzvYCad7vtISnjBlJQRCwqN1e2QDNxzfei9w9 34OBw7CbDuMNGumLno1LvN3F3srT60vQjOl0Quyb5AUFoXUUgi666Ma1f3F/UP6A /zIuooU6C2qwUWREkHKr9K1X0NjqfwIksh3bjG7Nx4EncmPPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7diu6X/MOygBrJvoY6HiTEklOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMGFkYzc4YjctNjE1MC0z MTM0LWJhZGEtMjE3NGU0YjZkYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFyM+q528E89JZGKk5qQVGvNSO1RorJSi1TITpBDoHnveu4UmL3RtI9 4jT64lokE7f2WvNrxtBxBrnhTyiTr+XMtPpu/dPDT3fnkSLdDYGqvaC9ifKbL11u twyZHJhMwFL4IrRZ/ZaPuJnv8yMlSIH6fSFD0h2l6iIUbCayXmxjQX8gDRI2gbcz i0U4mgdUE/WtpwCYliZw7pw/xLuwpr9CwtZ8mCciy1/XMULIkI8ckiFcEj9IlKmq L/BLW4qyDmvzcuH0Fg7SVRTMX2ht9AExMxwgK20nmqCdww23GFjiYZH00RFATFQM XEKvApNvZPElVP7Yu1tYidkfgqtrQlQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:48 2025 by rpki-client