$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa File: 01e7d16f-57a2-3f71-971c-f65c585d1093.roa (raw, json) Hash identifier: 2hx0HSqa2j+flNx7mBAnVe6PIMk91FDTdbzzWf/VMJ0= Subject key identifier: 04:85:A8:69:B4:57:C1:F8:35:66:4A:C8:C5:DB:C6:C6:85:21:5F:E6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E3E053595FD48772F6600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:3e:05:35:95:fd:48:77:2f:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=14edd818-e38d-44f8-9be2-ef4d54ad5057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2b:eb:3c:11:ee:04:39:20:d9:a9:ba:b4:17: d6:a0:de:dc:76:08:8c:f1:a4:6a:05:a2:77:65:90: 23:1e:0c:68:74:1d:3d:b6:d1:dd:04:6f:27:d4:34: ee:b1:15:11:91:51:33:5b:d1:07:91:ff:d8:24:30: be:dd:49:b0:ba:89:07:58:97:c0:d7:94:39:95:49: 7a:76:4c:8a:e1:a2:af:05:d7:87:bc:63:cf:5a:7c: 34:e1:73:82:79:d8:29:81:1f:fc:39:18:e6:5d:1f: d8:2f:c6:73:75:b4:87:da:4f:35:97:70:8a:c7:1f: 25:ba:8f:86:84:50:fe:01:d4:95:3b:83:bf:b5:cd: 8b:6c:dc:23:30:d1:a9:51:6b:26:81:e7:e6:d0:61: 4c:9a:c6:f7:5b:cb:71:35:ab:2f:89:22:25:cc:73: 91:01:39:76:ed:87:a8:3c:c7:5d:e2:dc:42:66:31: af:7c:99:06:b8:62:4e:1d:5e:e5:87:9a:7a:a3:9a: 8e:f7:19:76:0d:dd:9c:27:f4:74:be:23:51:9f:25: 61:6a:49:52:51:b8:f0:7c:11:41:b7:29:a9:4f:27: a8:18:f0:c8:33:e6:8c:77:27:77:7a:fb:a5:2f:80: 7b:64:9c:56:27:8e:14:47:03:e5:9d:2e:f9:58:57: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:85:A8:69:B4:57:C1:F8:35:66:4A:C8:C5:DB:C6:C6:85:21:5F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e7d16f-57a2-3f71-971c-f65c585d1093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f2:8a:92:06:d8:09:c0:4e:ee:3b:ee:2e:90:79:f9:8e:c1: 87:37:19:d0:8f:ff:d2:23:c1:1a:a8:bf:93:a8:60:fb:d5:77: 10:38:13:3d:55:13:5d:c5:2c:e9:51:10:69:e4:d5:70:19:70: 7e:51:7c:29:93:c9:d0:ce:76:04:35:86:8f:2d:38:9d:16:37: b3:73:1c:36:1e:84:dc:7d:c5:0f:69:88:2e:1b:65:12:01:0c: 48:20:c6:73:2a:26:d1:c6:99:4d:cf:22:84:a1:04:1a:87:7a: cf:15:ba:72:ab:c1:38:01:d8:62:88:be:45:c1:fc:c2:b5:a2: e2:a6:38:45:c0:77:1c:bd:94:21:0d:9c:cc:7b:42:ed:4e:8c: 28:b4:bc:11:b3:35:a5:2a:a2:ba:61:52:63:6e:dd:4b:c1:9a: 72:6d:41:a4:4f:6e:ff:8a:a5:13:2a:48:78:50:c8:fe:86:c2: 62:4a:a7:7d:1f:1e:d3:8f:da:63:a8:19:63:7b:93:26:cb:ec: c2:c0:9b:35:b8:6e:0a:55:7c:29:dd:fe:0c:45:4a:cd:b1:d6: bb:c5:d4:e3:82:2d:03:26:a9:a2:68:80:7b:be:f9:ef:80:18: fc:98:42:ab:8e:95:85:0f:74:48:ed:d2:d9:a7:ee:89:1c:2f: 22:34:ba:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPj4FNZX9SHcvZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MTRlZGQ4MTgtZTM4ZC00NGY4LTliZTItZWY0ZDU0YWQ1MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvrPBHuBDkg2am6tBfWoN7cdgiM8aRqBaJ3 ZZAjHgxodB09ttHdBG8n1DTusRURkVEzW9EHkf/YJDC+3UmwuokHWJfA15Q5lUl6 dkyK4aKvBdeHvGPPWnw04XOCedgpgR/8ORjmXR/YL8ZzdbSH2k81l3CKxx8luo+G hFD+AdSVO4O/tc2LbNwjMNGpUWsmgefm0GFMmsb3W8txNasviSIlzHORATl27Yeo PMdd4txCZjGvfJkGuGJOHV7lh5p6o5qO9xl2Dd2cJ/R0viNRnyVhaklSUbjwfBFB tympTyeoGPDIM+aMdyd3evulL4B7ZJxWJ44URwPlnS75WFckpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASFqGm0V8H4NWZKyMXbxsaFIV/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDFlN2QxNmYtNTdhMi0z ZjcxLTk3MWMtZjY1YzU4NWQxMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDyipIG2AnATu477i6QefmOwYc3GdCP/9IjwRqov5OoYPvVdxA4Ez1V E13FLOlREGnk1XAZcH5RfCmTydDOdgQ1ho8tOJ0WN7NzHDYehNx9xQ9piC4bZRIB DEggxnMqJtHGmU3PIoShBBqHes8VunKrwTgB2GKIvkXB/MK1ouKmOEXAdxy9lCEN nMx7Qu1OjCi0vBGzNaUqorphUmNu3UvBmnJtQaRPbv+KpRMqSHhQyP6GwmJKp30f HtOP2mOoGWN7kybL7MLAmzW4bgpVfCnd/gxFSs2x1rvF1OOCLQMmqaJogHu++e+A GPyYQquOlYUPdEjt0tmn7okcLyI0utE= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org