$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/d2fef010-6a3e-35e1-bd49-5221b39ef707.roa File: d2fef010-6a3e-35e1-bd49-5221b39ef707.roa (raw, json) Hash identifier: BqS/OAQ+hz3CpLyG4LRpLA0fV9qGwV2Idb0Q4R2Blzw= Subject key identifier: 54:AF:EE:88:1A:60:96:D2:D2:76:5D:F4:92:42:37:C8:7F:65:D1:87 Certificate issuer: /CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Certificate serial: 010D0C9F43285848090FACFC61BC67F07CA08280 Authority key identifier: 56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/d2fef010-6a3e-35e1-bd49-5221b39ef707.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 147.160.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:ac:fc:61:bc:67:f0:7c:a0:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=8634867a-9198-4607-b3ff-69683a8cf59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:e7:5f:0f:1f:0a:22:1d:f0:7d:ad:bd:c3: 1f:ec:e5:d4:73:6e:17:b8:ee:bc:ef:af:bf:84:af: 9b:23:3f:25:c7:98:64:1d:97:8c:a0:67:50:3f:42: ce:fd:b9:b2:68:eb:80:86:98:0f:99:5a:43:f6:c0: 43:f5:51:6d:a1:c7:e7:5a:82:22:b1:f3:d0:40:11: 0e:02:d8:b7:be:3d:dd:26:90:83:47:f2:76:14:94: d8:88:f7:ab:b0:b1:eb:cf:28:80:47:9f:3c:55:97: 9d:06:9b:cd:ec:b9:ac:61:11:24:42:2d:cf:33:57: b6:b2:4e:35:c6:40:3d:41:68:9c:91:74:4a:2b:2d: ad:a5:3d:45:62:ad:b6:bc:8b:0f:c0:78:83:af:95: a4:09:39:4e:a6:a1:3d:a1:b2:89:9f:10:cc:d9:66: f8:69:92:33:54:6f:97:34:52:af:a0:cd:5b:50:01: 6b:ea:1b:1c:6f:12:bc:8c:e6:4c:48:fc:f2:9d:81: 73:3e:96:6f:60:f1:69:9d:c9:62:95:1e:46:87:86: b9:99:2d:14:54:81:7c:b4:18:c4:45:e9:9f:e4:89: 8f:84:e4:d1:85:fc:e1:fd:8e:96:9c:f1:97:79:31: 20:9c:53:04:66:4a:7e:51:20:f5:d5:3f:2b:c0:79: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AF:EE:88:1A:60:96:D2:D2:76:5D:F4:92:42:37:C8:7F:65:D1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/d2fef010-6a3e-35e1-bd49-5221b39ef707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.crl X509v3 Authority Key Identifier: keyid:56:CF:D3:78:ED:45:30:F1:BB:D1:61:53:91:A4:FC:D4:37:A6:EA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b50ebce3-ddf5-4fb0-b8ed-b9a45d8b46b2.cer sbgp-ipAddrBlock: critical IPv4: 147.160.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:87:68:6c:31:ed:97:a9:4b:07:85:03:a2:69:4b:9c:f6:6a: 0f:28:ed:aa:dc:61:90:23:bc:e6:8b:14:ab:52:1f:3f:d9:49: c8:43:72:12:52:a0:11:ef:89:33:33:8e:1d:d9:2b:5e:7f:46: d1:91:0a:61:f3:c7:0a:e1:27:e4:c6:e5:06:ac:b0:93:a4:b6: 5f:9d:93:26:b6:09:3d:c0:c3:7c:74:fe:6c:fc:c0:6f:6b:fe: 6c:ae:6a:92:a8:50:10:aa:de:5b:e3:5b:07:fe:a9:7c:61:e9: 87:5e:47:9f:9c:16:20:e5:e0:a6:f0:61:02:0f:9d:f6:bf:2e: ac:f9:f2:0e:5a:45:bb:5b:ff:2e:d0:f5:8b:40:16:14:8b:a0: 7f:18:fc:57:75:41:40:40:c2:6a:fc:58:d9:09:d5:65:1a:bf: 46:17:4e:44:f0:c5:52:d7:0d:c3:2e:2b:e5:46:a8:56:26:f1: b3:f8:1a:5f:af:d9:10:08:11:c6:c9:ec:8d:39:00:9f:4a:f5: 2d:85:27:f0:fc:3a:dc:7d:20:b7:13:cd:05:00:d2:98:e4:70: 28:35:69:54:5b:2e:88:61:0a:89:49:23:bb:04:83:44:8c:04: 44:86:4c:a5:d6:c7:1c:73:b7:5a:5b:6c:88:5b:39:6c:f1:32: ce:81:ba:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6z8Ybxn8HyggoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUwZWJjZTMtZGRmNS00ZmIwLWI4ZWQtYjlhNDVkOGI0 NmIyMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk ODYzNDg2N2EtOTE5OC00NjA3LWIzZmYtNjk2ODNhOGNmNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9HnXw8fCiId8H2tvcMf7OXUc24XuO6876+/ hK+bIz8lx5hkHZeMoGdQP0LO/bmyaOuAhpgPmVpD9sBD9VFtocfnWoIisfPQQBEO Ati3vj3dJpCDR/J2FJTYiPersLHrzyiAR588VZedBpvN7LmsYREkQi3PM1e2sk41 xkA9QWickXRKKy2tpT1FYq22vIsPwHiDr5WkCTlOpqE9obKJnxDM2Wb4aZIzVG+X NFKvoM1bUAFr6hscbxK8jOZMSPzynYFzPpZvYPFpnclilR5Gh4a5mS0UVIF8tBjE Remf5ImPhOTRhfzh/Y6WnPGXeTEgnFMEZkp+USD11T8rwHkioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSv7ogaYJbS0nZd9JJCN8h/ZdGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBl YmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0NWQ4YjQ2YjIvZDJmZWYwMTAtNmEzZS0z NWUxLWJkNDktNTIyMWIzOWVmNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjUwZWJjZTMtZGRmNS00ZmIwLWI4 ZWQtYjlhNDVkOGI0NmIyL2I1MGViY2UzLWRkZjUtNGZiMC1iOGVkLWI5YTQ1ZDhi NDZiMi5jcmwwHwYDVR0jBBgwFoAUVs/TeO1FMPG70WFTkaT81Dem6iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNTBlYmNlMy1kZGY1LTRmYjAtYjhlZC1iOWE0 NWQ4YjQ2YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6CnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmHaGwx7ZepSweFA6JpS5z2ag8o7arcYZAjvOaLFKtSHz/ZSchDchJS oBHviTMzjh3ZK15/RtGRCmHzxwrhJ+TG5QassJOktl+dkya2CT3Aw3x0/mz8wG9r /myuapKoUBCq3lvjWwf+qXxh6YdeR5+cFiDl4KbwYQIPnfa/Lqz58g5aRbtb/y7Q 9YtAFhSLoH8Y/Fd1QUBAwmr8WNkJ1WUav0YXTkTwxVLXDcMuK+VGqFYm8bP4Gl+v 2RAIEcbJ7I05AJ9K9S2FJ/D8Otx9ILcTzQUA0pjkcCg1aVRbLohhColJI7sEg0SM BESGTKXWxxxzt1pbbIhbOWzxMs6Buvs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:46 2025 by rpki-client