$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa File: 04e49c50-9249-3f9c-afea-d6ba87234992.roa (raw, json) Hash identifier: sdLCPXz0neWz0C0g5x0Yhuubv186mcroVV5Bbk58GJU= Subject key identifier: 4D:A5:CD:AD:ED:00:0F:0A:DB:0F:92:3B:30:30:DD:98:DF:3D:30:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E40BBA09A486DDB68F580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:40:bb:a0:9a:48:6d:db:68:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=1c7dcad9-55d3-4173-9be4-bfdfa21bdff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:e4:7a:70:68:22:e7:88:a4:f5:1b:bf:5c: 89:06:3d:a0:26:e4:d9:9d:2d:17:d0:04:04:6c:30: c6:17:19:cd:6c:af:67:cb:e0:11:e0:a3:5c:ef:af: 9f:4c:65:82:1c:16:f0:68:26:ed:fe:f5:d9:10:41: ff:86:e2:d1:28:1b:5c:61:ee:3f:da:b8:27:1d:59: d2:8b:9a:d8:51:e1:1a:9e:6b:b8:8e:01:a3:f4:99: f4:a6:99:2f:a9:f2:12:59:90:f0:bc:0f:c1:94:de: 3b:d9:fa:d3:05:0f:9a:ec:ed:0d:66:79:37:c6:39: 4f:4d:32:21:45:38:eb:e2:f4:1f:72:ee:56:5c:a6: bf:45:6c:75:54:02:50:8e:fc:1e:94:00:7e:1d:cc: c6:2b:1e:0a:3c:ab:89:a7:2b:48:4f:8c:83:5e:3a: 35:e3:c6:6e:63:55:55:49:fa:cb:8b:47:66:e1:bb: 58:0d:04:b6:35:29:42:8d:77:8c:48:95:77:38:2e: dd:ac:ab:08:ac:6d:67:89:37:66:d1:5c:87:46:bd: 39:01:a5:ff:11:bd:ac:20:54:a8:c9:2b:43:d5:87: 78:13:c3:c9:7c:c8:74:40:1c:94:7f:d6:ad:ef:8f: 64:82:51:fe:41:1e:cc:5b:21:6e:f7:37:0c:4f:38: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A5:CD:AD:ED:00:0F:0A:DB:0F:92:3B:30:30:DD:98:DF:3D:30:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0a:5d:17:7f:e2:64:45:a0:9f:26:23:56:73:34:5f:cd:8e: 42:2e:11:c5:c0:cd:34:6b:03:5a:5d:fc:fb:4a:39:ff:9e:eb: f9:c7:b1:1b:f1:cd:ac:50:8f:f7:41:c8:ca:6d:7c:78:c1:e2: fc:3c:ed:f1:ed:89:47:88:61:3c:e5:40:f5:a8:1e:65:e4:11: 60:11:75:0c:d7:a5:57:f8:d0:9a:41:ab:e8:29:f0:d7:92:f0: b7:61:b5:e9:09:f6:f5:e6:e8:34:66:aa:dd:cd:cb:ea:96:71: e9:fa:ff:f3:a4:df:31:48:04:43:c3:4d:00:b7:cc:f3:8a:5f: 3e:0e:ee:e7:63:8c:75:f5:37:42:53:f4:bc:39:61:b5:9e:74: a0:0e:b9:f2:d3:51:81:43:0a:5d:2c:aa:58:85:18:6f:14:dc: a9:4b:c8:23:9c:a3:da:d4:56:f1:0c:ed:a5:ae:2c:7a:e2:b6: 33:b6:47:bc:37:4a:96:0a:48:c0:e9:82:6c:a7:3e:aa:09:9a: 5a:b8:53:5c:c5:66:1e:7d:11:2c:ab:8f:d1:58:92:bd:a1:cc: b6:e7:3e:9d:8f:16:cf:7c:8f:8a:4f:d6:4b:ce:87:a4:4f:38: a5:d8:c3:74:c1:7f:2a:dd:5c:ca:11:ce:e8:ac:c6:35:49:05: 3d:4f:8a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkC7oJpIbdto9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MWM3ZGNhZDktNTVkMy00MTczLTliZTQtYmZkZmEyMWJkZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsjkenBoIueIpPUbv1yJBj2gJuTZnS0X0AQE bDDGFxnNbK9ny+AR4KNc76+fTGWCHBbwaCbt/vXZEEH/huLRKBtcYe4/2rgnHVnS i5rYUeEanmu4jgGj9Jn0ppkvqfISWZDwvA/BlN472frTBQ+a7O0NZnk3xjlPTTIh RTjr4vQfcu5WXKa/RWx1VAJQjvwelAB+HczGKx4KPKuJpytIT4yDXjo148ZuY1VV SfrLi0dm4btYDQS2NSlCjXeMSJV3OC7drKsIrG1niTdm0VyHRr05AaX/Eb2sIFSo yStD1Yd4E8PJfMh0QByUf9at749kglH+QR7MWyFu9zcMTziOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2lza3tAA8K2w+SOzAw3ZjfPTCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRlNDljNTAtOTI0OS0z ZjljLWFmZWEtZDZiYTg3MjM0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAKXRd/4mRFoJ8mI1ZzNF/NjkIuEcXAzTRrA1pd/PtKOf+e6/nHsRvx zaxQj/dByMptfHjB4vw87fHtiUeIYTzlQPWoHmXkEWARdQzXpVf40JpBq+gp8NeS 8LdhtekJ9vXm6DRmqt3Ny+qWcen6//Ok3zFIBEPDTQC3zPOKXz4O7udjjHX1N0JT 9Lw5YbWedKAOufLTUYFDCl0sqliFGG8U3KlLyCOco9rUVvEM7aWuLHritjO2R7w3 SpYKSMDpgmynPqoJmlq4U1zFZh59ESyrj9FYkr2hzLbnPp2PFs98j4pP1kvOh6RP OKXYw3TBfyrdXMoRzuisxjVJBT1Pijo= -----END CERTIFICATE-----Generated at Sun Apr 28 00:51:05 2024 by rpki-client on console-ams.rpki-client.org