$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa File: bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa (raw, json) Hash identifier: cU9zrlBGgC4Aftcx60OEtzxciHs0WjQIddZ7EERhnTc= Subject key identifier: EC:73:68:93:99:47:12:58:32:F0:02:E4:80:26:14:08:7A:2B:2E:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DD0CDCB806CFC5C09C200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 184.20.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:d0:cd:cb:80:6c:fc:5c:09:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=b86f04a9-5f1f-44dd-b0a5-417a60dc60ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:22:d3:8d:91:80:3c:a1:73:19:39:ff:e7: 66:6c:84:5e:7d:37:80:83:c1:24:b5:b7:57:39:34: 04:80:66:08:f0:2e:a3:72:11:42:94:79:8c:00:59: 9e:ca:e1:20:eb:7e:2c:e6:50:b3:8e:75:90:bc:96: 39:fe:42:aa:bd:89:f2:37:ed:fc:10:78:0e:2f:fd: 66:b1:9b:58:44:e4:7e:d1:b9:56:f0:53:f8:43:66: 03:fd:aa:41:3c:91:7a:27:71:3e:4d:66:06:6b:bc: 65:2b:b0:0f:c6:ae:6e:c2:c3:ce:0d:9b:26:df:fe: 0e:fd:75:d6:2f:c4:bd:88:6f:86:cf:22:87:77:aa: 2e:d2:ca:c3:4e:9e:2c:2d:a1:e8:4b:7d:5a:c9:ca: 30:11:19:d6:6d:31:40:af:91:4d:9e:28:52:43:1c: 22:dd:b2:7f:51:2d:c8:5e:0d:35:8b:98:f9:9f:12: c6:17:5a:6e:b6:87:5a:ea:d2:85:16:08:3f:6b:71: e3:89:61:1c:49:e4:1e:4c:f9:bc:8a:1e:32:d1:45: af:6f:b7:10:b5:3c:07:fc:91:8d:f8:12:6e:29:83: 67:56:32:35:77:90:4a:97:c0:9e:c1:d5:9b:3c:b2: 2b:b1:d2:fb:50:82:93:e0:bf:7f:f2:bc:9b:75:1b: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:68:93:99:47:12:58:32:F0:02:E4:80:26:14:08:7A:2B:2E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf0e2aa-add3-3caa-8484-75e8c0ef2124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bd:08:4e:e1:d4:0b:f4:fa:82:5e:d9:34:18:e5:d8:ce:c6: 2b:5b:b8:0d:15:c6:49:42:ff:4c:c2:13:c7:90:3f:f3:11:d9: 9e:5f:75:45:36:e2:dc:77:13:a5:40:48:45:6f:d3:14:47:9b: df:f2:80:0c:60:a9:d6:68:34:18:35:07:23:76:bc:55:c1:89: c3:86:ff:b1:c3:2a:2e:64:cb:eb:4b:b8:ee:a5:96:f2:a1:3f: 0c:79:e2:ff:56:f1:59:e6:ec:74:70:45:a8:ab:f1:de:58:42: e0:03:d2:a3:e9:ad:2f:70:d6:86:33:0b:b1:ef:ee:5d:4b:93: bd:27:f7:09:a9:a6:19:33:a5:f2:44:b5:df:9c:89:f9:cf:9f: 76:81:49:17:4a:f0:db:50:8f:e5:8f:cb:2a:5f:34:c9:b0:ee: f5:43:1c:69:f2:e1:84:c8:25:6f:bc:f1:07:3c:0a:c8:cf:21: 73:c4:3e:a0:2a:10:08:2b:a7:6b:54:24:66:c2:64:a6:51:73: de:7c:02:cd:16:e0:cf:d5:4e:25:e6:40:18:4c:88:0b:73:d8: fe:6b:fa:60:be:6f:59:ba:32:f6:ae:f7:33:04:d9:b8:51:8a: 76:4a:06:69:54:4a:e2:38:e7:36:48:f4:39:02:cf:bd:9d:8b: fb:5f:a9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPdDNy4Bs/FwJwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk Yjg2ZjA0YTktNWYxZi00NGRkLWIwYTUtNDE3YTYwZGM2MGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Jwi042RgDyhcxk5/+dmbIRefTeAg8EktbdX OTQEgGYI8C6jchFClHmMAFmeyuEg634s5lCzjnWQvJY5/kKqvYnyN+38EHgOL/1m sZtYROR+0blW8FP4Q2YD/apBPJF6J3E+TWYGa7xlK7APxq5uwsPODZsm3/4O/XXW L8S9iG+GzyKHd6ou0srDTp4sLaHoS31aycowERnWbTFAr5FNnihSQxwi3bJ/US3I Xg01i5j5nxLGF1putoda6tKFFgg/a3HjiWEcSeQeTPm8ih4y0UWvb7cQtTwH/JGN +BJuKYNnVjI1d5BKl8CewdWbPLIrsdL7UIKT4L9/8rybdRsBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxzaJOZRxJYMvAC5IAmFAh6Ky57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNmMGUyYWEtYWRkMy0z Y2FhLTg0ODQtNzVlOGMwZWYyMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBRxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq9CE7h1Av0+oJe2TQY5djOxitbuA0VxklC/0zCE8eQP/MR2Z5fdUU2 4tx3E6VASEVv0xRHm9/ygAxgqdZoNBg1ByN2vFXBicOG/7HDKi5ky+tLuO6llvKh Pwx54v9W8Vnm7HRwRair8d5YQuAD0qPprS9w1oYzC7Hv7l1Lk70n9wmpphkzpfJE td+cifnPn3aBSRdK8NtQj+WPyypfNMmw7vVDHGny4YTIJW+88Qc8CsjPIXPEPqAq EAgrp2tUJGbCZKZRc958As0W4M/VTiXmQBhMiAtz2P5r+mC+b1m6Mvau9zME2bhR inZKBmlUSuI45zZI9DkCz72di/tfqV0= -----END CERTIFICATE-----Generated at Sun May 19 01:47:37 2024 by rpki-client on console-fra.rpki-client.org