$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa File: 05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa (raw, json) Hash identifier: nSpvLFyKeMJ1TLmSlkib3TT7xU/kAIXzYaFnuKgDa6g= Subject key identifier: 0A:2C:68:36:8E:04:90:8A:B6:10:A0:6E:57:C1:08:02:5D:29:1E:0F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7CB928D47741AF73FE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7c:b9:28:d4:77:41:af:73:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=ac83720b-51d4-490f-857f-2fa60ddc044f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:55:80:ff:71:93:c6:16:a1:f7:d9:37:17:42: f4:23:b7:b6:bb:88:65:c2:84:58:80:02:a4:25:83: 7b:c9:01:ca:ea:8f:a3:05:0f:81:a7:76:b0:8f:bf: 59:68:90:1f:1a:44:dc:16:ef:be:02:9f:64:66:fd: 46:97:b5:02:0d:fc:38:66:34:7f:f6:e5:06:d4:2a: 7c:03:de:6b:7d:be:a1:af:f7:7b:0f:51:99:80:66: 1a:a4:1f:2c:00:53:c5:fd:d6:64:42:64:a4:e5:63: 75:71:ad:98:b5:6d:84:26:77:58:65:7b:d3:66:3e: ad:2d:be:6e:84:46:b6:45:be:c6:82:df:9e:00:b2: 19:d5:b0:3b:20:c8:0b:3a:83:44:2a:7f:d6:2d:5f: b4:d7:99:b8:b4:d8:31:3d:d1:ba:4a:fe:4d:8b:ca: 7b:0a:e9:9a:e4:57:8c:b1:f1:a4:8a:28:2f:1f:43: c4:aa:a4:3b:a1:35:a1:e4:9b:b1:c4:82:21:5e:74: d8:ac:f4:d3:d5:46:f8:a7:fe:78:da:d7:0e:8d:3a: 70:93:bf:9e:81:2c:76:c3:bf:50:18:d1:d9:2f:67: e1:b0:c2:cc:b7:5b:a6:85:27:55:00:a5:8a:0b:a3: f7:18:38:a8:7a:fb:88:6f:aa:2d:b1:78:8d:58:6c: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:68:36:8E:04:90:8A:B6:10:A0:6E:57:C1:08:02:5D:29:1E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:1d:4a:d2:5f:35:cc:d6:38:a1:a0:34:7a:55:1a:df:56:3c: 75:71:31:e6:1c:d8:4f:45:d1:f7:59:61:97:8d:f9:3e:77:ee: ca:55:89:68:7b:6d:64:e2:85:05:c6:b8:87:52:48:fa:09:0c: 86:9b:91:c5:ad:2c:a2:10:ea:b5:86:de:a8:1a:bd:1f:98:8d: 4b:70:e2:84:a3:fc:81:46:26:6a:03:1d:4b:ea:dc:aa:e8:c6: 65:6b:85:98:de:90:54:1c:8b:ca:d3:8d:5a:b4:f8:84:d2:0d: db:84:06:f2:da:5d:4a:b1:94:92:6e:24:03:c4:b9:33:d1:3e: 0f:58:4d:76:0c:4e:73:fc:de:fb:00:60:40:3f:45:18:23:ed: dc:86:ff:8a:96:45:06:ce:6b:9b:4d:f4:09:67:fb:ee:ce:bd: 70:95:cf:eb:73:7d:c6:64:e6:55:f0:cc:f8:15:3b:d6:8f:ba: 14:2b:16:02:f0:44:ad:63:e3:ed:b7:0d:93:3e:01:88:92:07: 2c:bd:56:36:27:63:4a:e0:52:5c:27:f0:89:40:c8:c7:7c:29: 63:d0:0c:27:f9:31:8c:64:60:2a:6a:2c:a1:28:00:20:cc:d8: f1:04:9d:f6:61:8c:e8:8f:2f:77:99:ea:b4:4d:03:cf:55:cb: 8e:5c:3f:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKny5KNR3Qa9z/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YWM4MzcyMGItNTFkNC00OTBmLTg1N2YtMmZhNjBkZGMwNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FWA/3GTxhah99k3F0L0I7e2u4hlwoRYgAKk JYN7yQHK6o+jBQ+Bp3awj79ZaJAfGkTcFu++Ap9kZv1Gl7UCDfw4ZjR/9uUG1Cp8 A95rfb6hr/d7D1GZgGYapB8sAFPF/dZkQmSk5WN1ca2YtW2EJndYZXvTZj6tLb5u hEa2Rb7Ggt+eALIZ1bA7IMgLOoNEKn/WLV+015m4tNgxPdG6Sv5Ni8p7Cuma5FeM sfGkiigvH0PEqqQ7oTWh5JuxxIIhXnTYrPTT1Ub4p/542tcOjTpwk7+egSx2w79Q GNHZL2fhsMLMt1umhSdVAKWKC6P3GDioevuIb6otsXiNWGyfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAosaDaOBJCKthCgblfBCAJdKR4PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDVjNmUxNDUtN2EwNC0z NWQ1LWI4YWEtYmViZjk0YWUwMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEdStJfNczWOKGgNHpVGt9WPHVxMeYc2E9F0fdZYZeN+T537spViWh7 bWTihQXGuIdSSPoJDIabkcWtLKIQ6rWG3qgavR+YjUtw4oSj/IFGJmoDHUvq3Kro xmVrhZjekFQci8rTjVq0+ITSDduEBvLaXUqxlJJuJAPEuTPRPg9YTXYMTnP83vsA YEA/RRgj7dyG/4qWRQbOa5tN9Aln++7OvXCVz+tzfcZk5lXwzPgVO9aPuhQrFgLw RK1j4+23DZM+AYiSByy9VjYnY0rgUlwn8IlAyMd8KWPQDCf5MYxkYCpqLKEoACDM 2PEEnfZhjOiPL3eZ6rRNA89Vy45cPzM= -----END CERTIFICATE-----Generated at Sun Nov 24 18:37:25 2024 by rpki-client on console-fra.rpki-client.org