$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa File: a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa (raw, json) Hash identifier: S7e9Tlkuh49DMMgZxHCKxPxRUDrkn+XpXxIdjGfTpww= Subject key identifier: 51:A3:2C:1E:85:4A:0F:38:EB:48:AE:31:AD:9F:19:3D:D9:41:85:D6 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584824FA8610EA79AF56210D4AA8 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 27471 IP address blocks: 168.149.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:86:10:ea:79:af:56:21:0d:4a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=b392b1ce-eeaf-4b57-8124-216b2f8f0fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:41:32:41:53:23:24:59:1e:73:71:46:5b: a6:69:56:66:db:09:1e:a4:63:42:83:ee:f1:41:93: a4:95:b3:b0:f0:eb:61:68:fe:8d:85:5e:e4:05:da: 52:d0:2a:be:19:7f:a3:b3:48:b6:7d:47:d5:40:33: 29:1c:e6:cf:f3:f1:57:71:f5:e5:5c:e8:37:d3:a2: 6a:97:b2:3a:d0:ee:a7:e1:8d:9d:4f:00:6c:ee:6e: d1:c2:ea:b4:53:06:5c:43:45:5e:b1:65:fa:18:46: bf:8c:7d:b4:d6:c4:9f:41:5b:d7:cd:cf:a7:09:72: 02:9e:66:00:5b:ce:ff:f5:f6:5b:80:74:36:ec:67: 89:c1:a5:41:9f:e9:1d:89:43:5c:f1:a1:36:c9:e0: f3:05:51:a9:4f:5f:38:89:0b:c5:f5:fa:1c:b1:e5: fc:b1:26:55:02:04:62:24:22:94:02:57:1d:da:46: 68:33:53:bd:95:f0:eb:f5:fa:92:99:59:87:f6:2a: 3e:5a:28:13:8d:5b:3c:63:e2:ec:e6:fc:91:a6:96: 87:b5:8c:07:b3:a8:e7:3b:95:2a:a9:e4:d8:a7:fc: 82:2e:d6:c3:df:1a:a9:1f:aa:03:a2:61:d1:8c:f5: b5:83:3a:00:99:58:16:fa:c9:b6:3c:bb:17:2c:10: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:2C:1E:85:4A:0F:38:EB:48:AE:31:AD:9F:19:3D:D9:41:85:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a9229ee7-a16e-3d3e-b6dc-26107b134ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 168.149.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:22:cc:40:60:92:31:2f:ba:22:99:0e:a5:43:6a:6f:b2:e9: 15:41:61:e4:15:88:69:b0:9f:fb:6f:d9:07:bc:a5:7d:1d:68: 2c:b7:b0:10:89:54:bf:03:87:cc:a9:e0:d9:e3:13:b5:81:c2: c1:cc:8a:26:6a:58:2e:d2:e7:46:61:40:f9:1e:3f:83:c3:e5: d5:80:51:6b:6f:cb:68:12:6a:73:38:1f:b8:ca:49:a2:94:38: 99:41:a7:0a:39:1c:a3:8c:a4:6f:b1:bf:70:a6:50:ee:e8:61: 5c:31:06:a3:54:ea:c8:2e:31:61:35:6c:a2:e3:5e:67:17:34: 22:09:9b:15:f8:42:da:66:a8:51:0e:06:b0:f5:40:d1:b8:07: 1a:fe:22:b1:3d:49:7f:92:50:5f:12:a8:ea:98:75:6f:4c:64: 81:eb:56:47:cf:34:19:0f:e3:7e:e4:e1:c6:f3:a5:04:a2:94: 8f:bd:af:f4:e7:db:1f:a6:e2:99:6c:d2:d9:f2:82:81:92:70: ec:c0:31:81:f4:22:37:ad:75:97:60:2a:0b:5b:10:1d:47:02: 35:13:29:97:0b:fd:00:3c:2f:7f:af:4a:75:a6:19:a0:9a:1e: a1:2b:e0:00:8b:4d:7f:a9:a9:7d:59:7b:b4:58:09:20:15:70: 3a:71:e2:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+oYQ6nmvViENSqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk YjM5MmIxY2UtZWVhZi00YjU3LTgxMjQtMjE2YjJmOGYwZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgchBMkFTIyRZHnNxRlumaVZm2wkepGNCg+7x QZOklbOw8OthaP6NhV7kBdpS0Cq+GX+js0i2fUfVQDMpHObP8/FXcfXlXOg306Jq l7I60O6n4Y2dTwBs7m7Rwuq0UwZcQ0VesWX6GEa/jH201sSfQVvXzc+nCXICnmYA W87/9fZbgHQ27GeJwaVBn+kdiUNc8aE2yeDzBVGpT184iQvF9focseX8sSZVAgRi JCKUAlcd2kZoM1O9lfDr9fqSmVmH9io+WigTjVs8Y+Ls5vyRppaHtYwHs6jnO5Uq qeTYp/yCLtbD3xqpH6oDomHRjPW1gzoAmVgW+sm2PLsXLBAb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGjLB6FSg8460iuMa2fGT3ZQYXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYTkyMjllZTctYTE2ZS0z ZDNlLWI2ZGMtMjYxMDdiMTM0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgizEBgkjEvuiKZDqVDam+y6RVBYeQViGmwn/tv2Qe8pX0daCy3sBCJ VL8Dh8yp4NnjE7WBwsHMiiZqWC7S50ZhQPkeP4PD5dWAUWtvy2gSanM4H7jKSaKU OJlBpwo5HKOMpG+xv3CmUO7oYVwxBqNU6sguMWE1bKLjXmcXNCIJmxX4QtpmqFEO BrD1QNG4Bxr+IrE9SX+SUF8SqOqYdW9MZIHrVkfPNBkP437k4cbzpQSilI+9r/Tn 2x+m4pls0tnygoGScOzAMYH0IjetdZdgKgtbEB1HAjUTKZcL/QA8L3+vSnWmGaCa HqEr4ACLTX+pqX1Ze7RYCSAVcDpx4ro= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:12 2025 by rpki-client