$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa File: 048a0b86-d861-3443-858e-27449974ed53.roa (raw, json) Hash identifier: Z3PAEi2WdN/qA7VojGDydqSxZsFeZV7OlQi/UsH3WI4= Subject key identifier: 21:FD:A4:2E:7F:35:83:52:11:FB:6B:7F:C4:E6:4F:40:4D:D9:23:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F432858454F02BC2DFDED730057B6D2C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa Signing time: Sun 24 Mar 2024 01:00:24 +0000 ROA not before: Sun 24 Mar 2024 01:00:24 +0000 ROA not after: Sat 22 Jun 2024 01:00:24 +0000 asID: 7155 IP address blocks: 172.243.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4f:02:bc:2d:fd:ed:73:00:57:b6:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 24 01:00:24 2024 GMT Not After : Jun 22 01:00:24 2024 GMT Subject: CN=b7c2b3a9-5f3a-4b12-bf7c-0362cf7693f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:d7:5d:1e:fc:43:4e:8a:d0:fa:4c:3e:81: dd:e4:b1:98:30:5a:e8:d5:da:ac:e6:08:cc:dc:62: 83:ec:a4:7a:b6:8c:28:27:33:c2:69:98:09:ee:8d: ac:5b:20:35:88:91:3e:08:fa:94:30:91:06:95:1d: 00:4a:4f:82:6a:a4:17:f2:2a:f3:ff:d6:1b:a4:bd: a2:62:d8:48:cc:38:e4:78:df:28:30:76:b2:09:00: 11:73:7e:83:8a:e8:e5:d3:67:39:34:72:2e:b2:06: d7:d0:24:5b:db:45:db:c9:c8:7a:d1:5d:46:e9:39: 8c:14:3b:ad:c6:2c:24:39:59:33:ec:01:c4:2c:a2: a1:48:a5:61:70:81:8d:7a:62:28:06:3c:34:9b:5f: 49:ac:03:84:58:c8:32:53:12:d8:09:71:3b:cb:ed: 3d:7d:1d:f4:0d:9b:84:6c:a2:b3:aa:af:b9:ca:1d: 5e:61:8e:62:6b:1f:ea:fb:e3:df:7f:bc:5d:fa:0d: 31:49:bd:06:86:66:d8:6f:9a:a2:2a:3c:0d:6e:fd: 17:33:bb:b8:88:2e:83:14:e9:f8:cb:0f:1e:0f:a0: d7:db:78:d5:76:42:4b:ec:56:f9:c3:33:00:5a:f3: 33:ff:3f:fd:4f:48:0b:90:53:b0:91:9b:84:7b:9b: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:A4:2E:7F:35:83:52:11:FB:6B:7F:C4:E6:4F:40:4D:D9:23:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e5:5e:12:c0:cf:60:c4:62:59:b9:aa:47:51:33:2e:ec:c1: 93:ed:9b:9d:a4:02:6d:4d:d4:97:84:6a:7f:cf:38:c3:a5:38: f1:08:57:48:83:9e:d7:66:58:40:f5:4c:38:20:7b:dc:a8:36: 2e:3c:dd:73:a7:c4:f7:d2:c8:8d:85:e6:0d:cd:36:fb:39:d0: 1c:b1:02:2a:08:62:2b:8c:07:33:91:4d:32:f4:e5:ad:8b:8b: e3:a9:f3:df:10:24:04:3a:d0:3e:c5:08:ba:4f:14:61:da:2e: b3:16:7d:82:33:a8:05:c9:0e:ca:e6:f3:7f:66:a4:a8:7f:75: 5f:eb:ed:f5:e3:e3:87:92:d2:0a:15:e7:02:72:80:bf:0e:7c: ac:d7:cb:c9:0a:9d:58:75:1f:da:ab:9c:ee:ef:b6:28:1d:6a: 44:cf:b0:86:23:30:86:7e:83:38:d3:d5:91:3f:be:14:cd:d3: 11:d0:f1:c5:d6:10:8e:bc:79:47:b9:fe:52:69:9b:b2:39:94: cf:62:f5:d7:55:75:ea:db:db:8e:e0:2b:7d:5c:d1:ed:43:71: e0:ea:2c:64:60:a8:ae:bf:af:96:20:37:49:18:7c:c8:0d:e0: 9e:37:16:a1:08:ad:13:3f:c7:10:98:5d:e2:a8:d9:ca:ab:9c: 02:0a:fc:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVPArwt/e1zAFe20sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk YjdjMmIzYTktNWYzYS00YjEyLWJmN2MtMDM2MmNmNzY5M2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKrXXR78Q06K0PpMPoHd5LGYMFro1dqs5gjM 3GKD7KR6towoJzPCaZgJ7o2sWyA1iJE+CPqUMJEGlR0ASk+CaqQX8irz/9YbpL2i YthIzDjkeN8oMHayCQARc36Diujl02c5NHIusgbX0CRb20Xbych60V1G6TmMFDut xiwkOVkz7AHELKKhSKVhcIGNemIoBjw0m19JrAOEWMgyUxLYCXE7y+09fR30DZuE bKKzqq+5yh1eYY5iax/q++Pff7xd+g0xSb0GhmbYb5qiKjwNbv0XM7u4iC6DFOn4 yw8eD6DX23jVdkJL7Fb5wzMAWvMz/z/9T0gLkFOwkZuEe5uEQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH9pC5/NYNSEftrf8TmT0BN2SOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQ4YTBiODYtZDg2MS0z NDQzLTg1OGUtMjc0NDk5NzRlZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErPMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrlXhLAz2DEYlm5qkdRMy7swZPtm52kAm1N1JeEan/POMOlOPEIV0iD ntdmWED1TDgge9yoNi483XOnxPfSyI2F5g3NNvs50ByxAioIYiuMBzORTTL05a2L i+Op898QJAQ60D7FCLpPFGHaLrMWfYIzqAXJDsrm839mpKh/dV/r7fXj44eS0goV 5wJygL8OfKzXy8kKnVh1H9qrnO7vtigdakTPsIYjMIZ+gzjT1ZE/vhTN0xHQ8cXW EI68eUe5/lJpm7I5lM9i9ddVderb247gK31c0e1DceDqLGRgqK6/r5YgN0kYfMgN 4J43FqEIrRM/xxCYXeKo2cqrnAIK/Dk= -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:38 2024 by rpki-client on console-fra.rpki-client.org