$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa File: ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa (raw, json) Hash identifier: hUM4hGsbegaSkro0dQsJlWwi3HoMM6XeIyq7P8tuao8= Subject key identifier: 72:FB:23:F9:8B:4E:99:9C:22:E6:8F:72:28:C8:CF:DB:FC:79:3C:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4C7A20CBBDF8F6782380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4c:7a:20:cb:bd:f8:f6:78:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=5659fd2a-ca6e-45cc-8e65-86c7cb195b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:ca:cd:77:61:1f:ec:18:18:8f:df:44:86: 15:9b:05:0f:0f:38:7b:74:98:88:59:f3:c5:4c:dc: fb:67:73:fd:94:07:cf:d0:e3:e5:90:e3:16:44:59: 81:65:14:68:fb:d4:26:71:70:d8:a3:44:30:e7:48: 05:57:93:d1:b5:dd:f3:57:00:f0:fc:65:06:53:09: 7c:74:4d:ad:0d:42:06:be:8f:33:c3:1a:18:9d:f7: 0b:41:bb:0d:34:d5:ca:69:70:2e:2f:dd:eb:cd:50: 16:cd:c1:41:ff:6e:43:6a:68:18:44:0a:45:97:8e: b6:92:7e:21:5c:1f:29:7c:f4:f2:78:3d:69:14:00: 05:66:ae:05:67:f6:13:b4:62:d0:27:13:f4:71:78: 04:a8:18:8a:89:02:8b:2e:e4:e1:01:59:94:4a:b7: 3c:45:01:d3:80:b1:9b:58:17:49:06:b4:44:1f:a0: b5:d2:4c:b7:8d:23:ac:95:9c:fe:7c:69:58:dd:d2: 0e:70:16:24:2b:db:e5:fb:2f:c6:4d:ec:07:4b:e5: b7:40:51:8c:05:41:90:14:87:1f:9a:37:bd:af:f4: 57:64:f3:21:18:dc:e0:de:2f:e8:50:fb:08:00:48: 87:a7:64:14:b4:a0:ff:eb:10:62:b8:25:04:8f:30: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:23:F9:8B:4E:99:9C:22:E6:8F:72:28:C8:CF:DB:FC:79:3C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:28:b7:22:63:01:54:f9:61:83:0d:dc:67:92:aa:1d:25:91: e3:ae:09:7f:c0:7f:dd:9a:51:53:59:ec:12:ec:cb:01:1a:50: 23:10:f5:90:4f:3d:19:99:23:9b:25:23:2d:42:9e:8f:5f:03: 04:1d:ae:05:06:0c:17:e9:bd:64:aa:2c:a4:be:46:a1:40:a7: 16:bd:4b:67:ab:d5:80:8d:2a:c7:18:33:00:72:09:df:89:39: cf:eb:73:7c:e5:ce:1f:ab:5e:a9:3b:e4:41:f0:ae:49:a4:c4: ce:77:6a:14:50:f4:a8:7c:b1:b2:fd:1e:69:55:32:fa:17:81: 35:1c:87:2d:ee:32:78:71:3c:bf:46:31:5e:7b:65:66:8a:de: ec:72:6b:a5:4f:04:e8:55:69:a3:cc:60:5c:9a:d5:8e:bf:54: 01:73:bb:11:09:3b:d8:3a:b3:00:c7:dc:c2:87:90:35:8c:4c: 2b:34:c0:81:df:15:f9:3e:c3:f2:9b:69:31:90:e0:58:b2:8c: 65:40:a4:33:28:85:c0:9c:c6:5b:46:02:ee:58:23:be:2d:7d: 73:c0:1a:ff:7c:9c:d6:32:5a:77:5d:02:73:26:7c:e3:a9:a7: 27:51:28:33:d2:26:b6:37:9f:13:2a:35:8f:81:53:49:3a:a6: 50:2c:c4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkx6IMu9+PZ4I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NTY1OWZkMmEtY2E2ZS00NWNjLThlNjUtODZjN2NiMTk1YjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnvKzXdhH+wYGI/fRIYVmwUPDzh7dJiIWfPF TNz7Z3P9lAfP0OPlkOMWRFmBZRRo+9QmcXDYo0Qw50gFV5PRtd3zVwDw/GUGUwl8 dE2tDUIGvo8zwxoYnfcLQbsNNNXKaXAuL93rzVAWzcFB/25DamgYRApFl462kn4h XB8pfPTyeD1pFAAFZq4FZ/YTtGLQJxP0cXgEqBiKiQKLLuThAVmUSrc8RQHTgLGb WBdJBrREH6C10ky3jSOslZz+fGlY3dIOcBYkK9vl+y/GTewHS+W3QFGMBUGQFIcf mje9r/RXZPMhGNzg3i/oUPsIAEiHp2QUtKD/6xBiuCUEjzB7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL7I/mLTpmcIuaPcijIz9v8eTxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWUyZmM0MmYtMjczNy0z NGE2LWFkMGQtODhhODk5ZDI4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQotyJjAVT5YYMN3GeSqh0lkeOuCX/Af92aUVNZ7BLsywEaUCMQ9ZBP PRmZI5slIy1Cno9fAwQdrgUGDBfpvWSqLKS+RqFApxa9S2er1YCNKscYMwByCd+J Oc/rc3zlzh+rXqk75EHwrkmkxM53ahRQ9Kh8sbL9HmlVMvoXgTUchy3uMnhxPL9G MV57ZWaK3uxya6VPBOhVaaPMYFya1Y6/VAFzuxEJO9g6swDH3MKHkDWMTCs0wIHf Ffk+w/KbaTGQ4FiyjGVApDMohcCcxltGAu5YI74tfXPAGv98nNYyWnddAnMmfOOp pydRKDPSJrY3nxMqNY+BU0k6plAsxIE= -----END CERTIFICATE-----Generated at Sun May 19 01:47:39 2024 by rpki-client on console-fra.rpki-client.org