$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa File: 33981a11-ee98-3be8-afd7-464452a032db.roa (raw, json) Hash identifier: Vy/h6BSwZzNOovM15d2t2C0SJdqAkKImBbfsnaj9Tys= Subject key identifier: C9:D4:5D:F0:3B:CB:C4:F4:86:6B:E7:4C:BF:0A:92:F1:8D:E1:EC:F4 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858483E1AAC3B1DBA21623D4C52C0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 5050 IP address blocks: 147.73.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:ac:3b:1d:ba:21:62:3d:4c:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=2dd91cab-ca89-4063-bc9e-5caaface63f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b0:fe:52:5e:4a:bb:5a:2a:47:e5:a3:bf:45: 8d:12:21:ee:48:16:4e:2c:73:ea:2a:be:38:3b:7a: 4f:d6:82:36:89:a4:fd:5a:4e:3e:c1:5d:46:f4:55: 74:84:ee:4c:33:77:cc:5c:bb:05:f5:ae:92:aa:03: 4f:b4:71:ce:bd:18:13:b4:dc:c1:a4:58:0e:00:7d: 09:83:c4:72:75:7e:40:25:d2:fc:68:ad:f8:14:37: f8:1c:09:6d:ee:4d:4a:c1:e5:1a:25:6f:36:8d:23: f5:96:06:7f:3f:e2:c2:3e:09:ad:f5:34:2a:e8:6d: 09:74:ef:54:92:f6:fc:8d:f4:84:17:da:af:e7:9e: de:14:aa:50:43:db:ed:92:7f:12:4c:91:9c:7b:46: cd:71:60:40:b6:de:93:24:cb:98:41:0f:0e:5f:c4: 94:59:0f:af:5e:53:f8:25:bd:62:8d:a4:52:5b:3f: a4:fd:3a:f5:7d:a9:42:b3:ce:d3:28:5b:b1:a1:87: 5a:fe:d5:27:fc:f2:f2:79:54:27:7e:69:1a:e8:cf: 22:a3:1f:bd:a4:78:6a:45:03:a4:08:3a:cb:2b:f3: 5c:8e:d3:f4:e3:40:ff:f5:18:a4:77:f1:07:f6:0b: d5:07:e0:66:d2:41:9b:d9:a9:a9:51:4a:a3:8f:9d: 04:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D4:5D:F0:3B:CB:C4:F4:86:6B:E7:4C:BF:0A:92:F1:8D:E1:EC:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:10:19:4d:99:9b:7d:31:5c:01:fb:7a:cb:0b:b5:4e:98:93: 0d:79:50:d5:ae:4d:b8:96:5d:69:63:5c:56:58:21:b6:2a:06: 48:38:97:2c:59:02:cf:4c:63:b1:b1:d6:75:d9:46:04:7c:2d: dd:81:03:d7:d5:37:56:aa:34:c1:1d:01:c2:7d:2d:3d:a8:e0: 59:fb:89:86:ff:00:03:4b:75:3c:86:fb:40:90:58:1c:6d:62: aa:44:d5:5b:a4:f6:cd:a1:ae:de:e2:38:06:b4:4c:de:d9:3b: 28:b9:c2:0f:13:62:fe:bd:38:19:5b:c2:82:7d:11:fd:23:9c: 6a:82:f1:6e:e3:ae:ee:38:d9:17:bc:a3:94:3d:d1:1f:f6:dd: e2:c7:20:44:70:d8:b0:1b:78:cc:9b:ea:09:4a:76:91:92:40: 58:df:b9:97:d0:3a:9f:00:31:04:91:2e:66:94:61:ef:07:3d: 7e:04:1e:b8:79:ae:de:a6:29:ce:3d:75:e7:df:00:87:14:3e: 41:c0:f9:ab:71:b0:cb:61:dd:f8:0f:04:5e:8c:ca:89:46:39: fe:e5:ca:6a:58:e0:57:b8:e5:74:81:67:a2:c9:48:44:22:08: 48:2f:76:c6:2a:b0:16:c5:67:ab:c2:b8:af:cd:40:1c:cc:8d: dd:f3:fe:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gqw7HbohYj1MUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk MmRkOTFjYWItY2E4OS00MDYzLWJjOWUtNWNhYWZhY2U2M2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LD+Ul5Ku1oqR+Wjv0WNEiHuSBZOLHPqKr44 O3pP1oI2iaT9Wk4+wV1G9FV0hO5MM3fMXLsF9a6SqgNPtHHOvRgTtNzBpFgOAH0J g8RydX5AJdL8aK34FDf4HAlt7k1KweUaJW82jSP1lgZ/P+LCPgmt9TQq6G0JdO9U kvb8jfSEF9qv557eFKpQQ9vtkn8STJGce0bNcWBAtt6TJMuYQQ8OX8SUWQ+vXlP4 Jb1ijaRSWz+k/Tr1falCs87TKFuxoYda/tUn/PLyeVQnfmka6M8iox+9pHhqRQOk CDrLK/NcjtP040D/9Rikd/EH9gvVB+Bm0kGb2ampUUqjj50EDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnUXfA7y8T0hmvnTL8KkvGN4ez0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMzM5ODFhMTEtZWU5OC0z YmU4LWFmZDctNDY0NDUyYTAzMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEQGU2Zm30xXAH7essLtU6Ykw15UNWuTbiWXWljXFZYIbYqBkg4lyxZ As9MY7Gx1nXZRgR8Ld2BA9fVN1aqNMEdAcJ9LT2o4Fn7iYb/AANLdTyG+0CQWBxt YqpE1Vuk9s2hrt7iOAa0TN7ZOyi5wg8TYv69OBlbwoJ9Ef0jnGqC8W7jru442Re8 o5Q90R/23eLHIERw2LAbeMyb6glKdpGSQFjfuZfQOp8AMQSRLmaUYe8HPX4EHrh5 rt6mKc49deffAIcUPkHA+atxsMth3fgPBF6MyolGOf7lympY4Fe45XSBZ6LJSEQi CEgvdsYqsBbFZ6vCuK/NQBzMjd3z/hw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:46 2025 by rpki-client