$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/067c1a6e-8f24-30fb-9279-e47359944c80.roa File: 067c1a6e-8f24-30fb-9279-e47359944c80.roa (raw, json) Hash identifier: 0PzJwl72hrFJfwx4fsH1b8/HniGg+HgCru7drgadRMk= Subject key identifier: B3:11:5A:CF:46:21:78:69:4B:A0:AD:BE:46:0F:C0:B9:A9:0C:35:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4C07B34A2FEDE4A166E8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/067c1a6e-8f24-30fb-9279-e47359944c80.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4c:07:b3:4a:2f:ed:e4:a1:66:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=46ff6317-4474-4501-b066-a25fa493ba78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:e4:80:f3:0f:4d:9b:c2:04:a1:62:1c:53: 8f:11:10:c5:02:5a:f9:61:ae:1e:86:a0:81:d2:07: d2:f0:e3:a2:70:3f:81:66:97:74:e9:66:a4:5c:57: 35:bb:cf:9d:25:66:5a:49:3c:84:bc:cf:37:67:14: 26:b4:da:2d:15:f1:37:b8:f6:db:5e:1a:b1:c1:2b: 8c:c9:35:a5:cf:af:51:a8:f2:d0:63:f0:09:df:62: b4:0e:27:19:4d:1e:6b:9a:85:3a:eb:af:87:68:68: 26:eb:c9:f0:91:fa:28:4d:09:f7:75:0d:20:15:d7: 42:4e:e3:ed:5b:1d:86:f7:1b:28:23:e9:b2:4c:6a: 14:0d:d2:68:8e:15:34:6c:b3:8b:3b:5a:63:b3:42: 4a:13:a6:37:a6:d7:65:f9:66:51:f8:4c:7d:2d:0f: 78:f9:e3:df:0c:d3:36:64:e2:a6:1a:39:ad:50:25: b7:b0:e6:37:d5:fa:92:c0:85:b2:db:4c:45:40:3b: f3:03:96:6c:c4:ed:83:e7:2a:e9:b0:fa:b3:d0:ed: ca:93:b6:fd:d2:e8:62:85:90:72:fe:b8:be:b7:ab: 28:82:1e:92:b8:7b:b4:c4:34:d1:36:6c:7d:5e:c3: 6b:fa:ba:2d:5d:0e:0b:e0:35:d6:c3:de:fb:51:27: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:11:5A:CF:46:21:78:69:4B:A0:AD:BE:46:0F:C0:B9:A9:0C:35:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/067c1a6e-8f24-30fb-9279-e47359944c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:29:a9:27:fc:e9:56:3f:b2:a4:b4:6d:e9:a8:cc:08:f5:42: 5c:14:fb:ab:78:ea:5c:f6:7a:a6:9e:9b:29:f0:54:41:f1:13: a5:53:dd:44:c9:af:2c:5e:7a:2f:e2:fc:9e:77:8b:b9:10:0e: 02:26:33:8b:6a:47:20:46:86:db:36:0e:0f:07:11:b4:5f:84: d1:2c:52:91:0c:95:54:e3:19:0f:f6:b3:9a:68:78:14:63:1e: eb:03:98:1a:a4:fb:05:ee:fa:05:dd:cc:4d:5a:b5:dc:32:47: 93:63:7a:9d:35:b1:6d:fd:17:f8:9a:c1:a8:1b:af:2e:73:14: 61:f3:5f:d9:aa:82:0c:c0:2a:ac:81:77:5e:72:45:9b:48:7e: 0f:0a:70:3b:aa:5a:8d:49:72:66:0a:dd:fc:a0:1c:37:8d:14: 2d:d1:58:57:74:3d:04:d0:fd:b9:72:42:bf:99:62:a2:53:28: b1:3b:7c:a3:aa:c6:26:1d:5f:3f:7b:9b:35:01:ea:8a:d2:78: 12:d0:07:37:9b:95:81:76:98:90:f7:f8:23:63:f3:ff:25:8b: 01:9a:64:0e:d8:49:e5:d1:d4:96:fd:fe:18:a5:96:c0:e8:97: 60:90:8f:86:f1:23:06:e0:07:2d:f8:a0:59:08:40:dc:dc:db: 34:c5:ba:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkwHs0ov7eShZugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NDZmZjYzMTctNDQ3NC00NTAxLWIwNjYtYTI1ZmE0OTNiYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkzkgPMPTZvCBKFiHFOPERDFAlr5Ya4ehqCB 0gfS8OOicD+BZpd06WakXFc1u8+dJWZaSTyEvM83ZxQmtNotFfE3uPbbXhqxwSuM yTWlz69RqPLQY/AJ32K0DicZTR5rmoU666+HaGgm68nwkfooTQn3dQ0gFddCTuPt Wx2G9xsoI+myTGoUDdJojhU0bLOLO1pjs0JKE6Y3ptdl+WZR+Ex9LQ94+ePfDNM2 ZOKmGjmtUCW3sOY31fqSwIWy20xFQDvzA5ZsxO2D5yrpsPqz0O3Kk7b90uhihZBy /ri+t6sogh6SuHu0xDTRNmx9XsNr+rotXQ4L4DXWw977UScqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMRWs9GIXhpS6CtvkYPwLmpDDU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDY3YzFhNmUtOGYyNC0z MGZiLTkyNzktZTQ3MzU5OTQ0YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMpqSf86VY/sqS0bemozAj1QlwU+6t46lz2eqaemynwVEHxE6VT3UTJ ryxeei/i/J53i7kQDgImM4tqRyBGhts2Dg8HEbRfhNEsUpEMlVTjGQ/2s5poeBRj HusDmBqk+wXu+gXdzE1atdwyR5Njep01sW39F/iawagbry5zFGHzX9mqggzAKqyB d15yRZtIfg8KcDuqWo1JcmYK3fygHDeNFC3RWFd0PQTQ/blyQr+ZYqJTKLE7fKOq xiYdXz97mzUB6orSeBLQBzeblYF2mJD3+CNj8/8liwGaZA7YSeXR1Jb9/hillsDo l2CQj4bxIwbgBy34oFkIQNzc2zTFuuM= -----END CERTIFICATE-----Generated at Sun May 19 01:47:30 2024 by rpki-client on console-fra.rpki-client.org