$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa File: 42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json) Hash identifier: 63W5MNK/el22hdcH5MkBmvfUAYpPQcsZSI8fBFXJPFs= Subject key identifier: A2:34:5B:8A:D1:90:44:AE:E7:A3:0C:33:6B:E3:B4:5F:47:7A:08:F5 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F432858475EA620B71CB49EB6AB8D1D80 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa Signing time: Sun 29 Sep 2024 01:00:32 +0000 ROA not before: Sun 29 Sep 2024 01:00:32 +0000 ROA not after: Sat 28 Dec 2024 02:00:32 +0000 asID: 5050 IP address blocks: 147.73.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:a6:20:b7:1c:b4:9e:b6:ab:8d:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Sep 29 01:00:32 2024 GMT Not After : Dec 28 02:00:32 2024 GMT Subject: CN=91d7a2c5-e068-45f7-a344-05b0788770dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:0b:c7:9b:5c:7f:16:62:71:90:1b:9f:fc: 82:be:3e:15:8c:ae:26:5e:09:4e:da:ec:fe:f8:68: c8:1a:a4:4e:c6:11:53:05:0a:c4:f3:6c:bb:6e:0f: 71:66:a0:80:e2:43:07:43:26:d1:8b:5e:b3:8f:e3: 08:bd:04:cc:b3:a7:cd:25:63:25:e9:7c:6a:46:4c: 28:78:9e:4e:2b:81:bc:ee:69:1a:4a:48:57:93:3d: 77:12:cd:5f:fc:92:bb:ec:f4:1d:fc:fe:45:c2:d5: 72:3c:f2:af:ce:22:f5:01:1a:e6:aa:62:da:61:fb: a8:1f:17:48:1a:79:8a:84:69:1d:13:fa:23:78:ed: b7:49:a2:15:44:27:a5:f8:6e:96:72:6e:fc:14:fe: 5e:7c:2b:de:b3:08:0d:a2:69:9a:fc:9f:ac:a8:83: e6:28:15:75:0e:3f:f5:04:ee:08:b1:81:c3:be:95: 66:6c:75:89:94:32:34:1a:4d:95:d7:c9:4c:8c:2d: 4c:ef:5b:7a:37:fc:72:7e:a3:81:87:b4:f2:80:42: 2e:70:7b:e7:99:b7:74:8b:b0:0f:8e:da:c9:38:85: 4a:74:31:56:6b:46:c6:78:41:82:fb:a6:2c:be:aa: 2a:b2:71:eb:29:fc:8b:95:87:1a:db:43:8d:56:ca: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:34:5B:8A:D1:90:44:AE:E7:A3:0C:33:6B:E3:B4:5F:47:7A:08:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:01:2c:6b:aa:0b:6d:d9:52:0e:02:30:dc:37:d1:26:f5:90: fd:f7:3c:7d:5c:24:f0:af:6c:27:e0:a9:92:9e:2d:09:83:03: c0:64:c0:cf:60:1f:c7:26:22:96:22:ea:a6:7f:c3:6f:6c:43: 3f:f7:e5:d5:e1:ed:5b:40:58:be:f2:fd:14:31:23:85:29:39: aa:d7:06:8c:c4:39:f0:76:75:64:7e:c8:a1:4a:f0:1a:73:12: 0a:cf:e4:6a:95:63:1c:f1:4f:ad:d1:08:35:e2:86:e2:4a:cb: 25:e2:77:12:2c:08:54:81:f6:e7:6e:3f:d6:db:78:71:4b:7d: 75:3e:19:51:ca:7e:85:e8:8b:ad:c1:89:2a:80:e9:e4:1d:e2: 74:df:57:1a:c4:aa:61:e5:0b:98:dc:f5:1e:46:19:d1:97:9e: dd:1f:61:4d:8b:54:5b:12:db:6e:c7:e7:ff:56:58:ac:d3:09: 9b:45:02:49:fd:77:c8:e9:64:bd:e1:4d:d6:03:74:80:03:75: d1:f4:31:9e:a3:97:61:1f:d6:40:f0:25:2a:a2:8e:78:91:d2: f1:a5:8b:13:23:a3:f3:8a:5d:47:2b:76:f3:6c:81:0b:47:a3: fd:db:9e:57:6c:c8:d7:2b:cc:4e:e3:ba:e2:d8:59:28:a2:a2: da:69:86:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdepiC3HLSetquNHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI0MDkyOTAxMDAzMloXDTI0MTIyODAyMDAzMlowLzEtMCsGA1UEAxMk OTFkN2EyYzUtZTA2OC00NWY3LWEzNDQtMDViMDc4ODc3MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCkLx5tcfxZicZAbn/yCvj4VjK4mXglO2uz+ +GjIGqROxhFTBQrE82y7bg9xZqCA4kMHQybRi16zj+MIvQTMs6fNJWMl6XxqRkwo eJ5OK4G87mkaSkhXkz13Es1f/JK77PQd/P5FwtVyPPKvziL1ARrmqmLaYfuoHxdI GnmKhGkdE/ojeO23SaIVRCel+G6Wcm78FP5efCveswgNomma/J+sqIPmKBV1Dj/1 BO4IsYHDvpVmbHWJlDI0Gk2V18lMjC1M71t6N/xyfqOBh7TygEIucHvnmbd0i7AP jtrJOIVKdDFWa0bGeEGC+6YsvqoqsnHrKfyLlYca20ONVsrugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI0W4rRkESu56MMM2vjtF9Hegj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNDIzNzc4MDYtNGE3Ny0z MDk4LThmZDQtYzZiOGU0Mzg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgBLGuqC23ZUg4CMNw30Sb1kP33PH1cJPCvbCfgqZKeLQmDA8BkwM9g H8cmIpYi6qZ/w29sQz/35dXh7VtAWL7y/RQxI4UpOarXBozEOfB2dWR+yKFK8Bpz EgrP5GqVYxzxT63RCDXihuJKyyXidxIsCFSB9uduP9bbeHFLfXU+GVHKfoXoi63B iSqA6eQd4nTfVxrEqmHlC5jc9R5GGdGXnt0fYU2LVFsS227H5/9WWKzTCZtFAkn9 d8jpZL3hTdYDdIADddH0MZ6jl2Ef1kDwJSqijniR0vGlixMjo/OKXUcrdvNsgQtH o/3bnldsyNcrzE7juuLYWSiiotpphlI= -----END CERTIFICATE-----Generated at Sun Nov 24 22:16:09 2024 by rpki-client on console-fra.rpki-client.org