$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7afb6d-ccc2-3210-997d-47822041e438.roa File: 0a7afb6d-ccc2-3210-997d-47822041e438.roa (raw, json) Hash identifier: kEZNSK8+lrfI8jvW4OR2Y2xVRZQ/ZTZylPdKAsBxZAY= Subject key identifier: 85:FC:BC:EE:7D:04:34:A6:75:4B:73:E3:0B:93:27:32:95:23:9D:17 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DAFCE34A441E2B7CC29C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7afb6d-ccc2-3210-997d-47822041e438.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 99.196.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:af:ce:34:a4:41:e2:b7:cc:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=5b0023e8-5f97-47b8-9b07-9db2932a2b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:df:10:ea:35:8f:f8:5e:db:5a:e9:ed:d7: 55:a2:d6:b4:f0:e9:cc:86:07:ca:86:60:50:43:0b: ac:d6:b5:92:f8:15:ed:23:2c:df:14:49:85:6b:6b: 46:09:6c:5f:dc:dc:4f:0c:05:09:ea:32:52:8b:b4: a6:1b:49:14:1a:6d:11:14:d7:f3:75:20:05:f7:4f: 9a:df:9f:24:03:5a:1e:c9:e1:5d:2d:db:b1:c7:36: c3:c1:bb:c5:f4:05:9a:46:5e:62:e9:07:7c:6e:fd: 29:6a:44:33:ee:5d:6a:0f:cd:c1:a1:50:92:c3:91: c4:93:a5:0f:5e:a5:3d:ba:b6:bb:01:c8:a4:02:4f: 65:b7:72:9d:4c:98:bb:67:f5:fe:e2:24:cb:08:c5: f1:dd:4e:a1:55:6f:e7:d2:19:49:27:53:db:7c:5f: 61:ff:9b:ad:ad:5d:49:30:7a:5e:72:f2:15:85:e0: cc:5e:a3:4c:78:88:c1:60:cd:6a:b6:85:3f:b9:f3: 18:7e:c8:25:df:96:48:d1:b6:ec:f6:66:71:1e:e9: 41:dd:f0:f1:7e:c3:5d:11:d6:17:89:02:57:ba:17: 53:82:e8:73:42:d1:22:5f:88:c8:a2:6c:ba:68:eb: 2f:b0:de:56:36:01:e4:b0:8f:55:9b:04:6c:8d:a4: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FC:BC:EE:7D:04:34:A6:75:4B:73:E3:0B:93:27:32:95:23:9D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a7afb6d-ccc2-3210-997d-47822041e438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:27:1e:d8:bf:ba:7e:dc:2a:9c:f6:af:72:44:50:ac:a3:06: 5a:52:ba:a1:1c:68:e7:dd:a0:ba:50:e2:69:63:87:d2:81:75: 9f:9a:30:73:ea:90:fe:25:e4:1a:ec:d8:87:0e:31:4e:a6:90: 98:32:71:a0:f4:3d:dc:14:23:63:81:68:ad:4d:3e:11:aa:06: c2:b5:41:c7:c9:c2:e9:00:a4:61:8b:64:5a:68:59:7e:f0:e9: 89:33:14:87:d0:55:06:8c:c4:48:6e:a7:25:ba:2f:8d:2a:14: 17:06:32:6f:80:ae:4b:6e:42:a9:42:5d:a3:33:fd:f8:e5:4d: 05:cb:27:7c:4a:47:ad:49:75:33:80:af:e2:a0:43:bb:6f:fc: 86:4c:e9:a1:28:5a:4a:3d:0f:64:7c:81:d2:4e:26:3e:c6:8d: d9:b7:3f:71:db:30:d3:a4:b0:c1:74:30:94:5e:3a:0b:88:fa: 14:23:63:f8:d9:0f:da:76:1a:42:55:62:6d:8a:89:2a:9c:c5: 74:6f:6a:20:77:24:1e:9e:25:9a:9a:11:7d:6a:4e:54:16:9a: 53:8c:12:29:b3:20:87:83:80:57:29:24:a4:cc:41:28:ad:85: ad:18:8c:0f:2c:33:f0:ce:ee:79:a0:1a:08:97:06:18:ef:f1: da:08:a3:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPa/ONKRB4rfMKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NWIwMDIzZTgtNWY5Ny00N2I4LTliMDctOWRiMjkzMmEyYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG/fEOo1j/he21rp7ddVota08OnMhgfKhmBQ Qwus1rWS+BXtIyzfFEmFa2tGCWxf3NxPDAUJ6jJSi7SmG0kUGm0RFNfzdSAF90+a 358kA1oeyeFdLduxxzbDwbvF9AWaRl5i6Qd8bv0pakQz7l1qD83BoVCSw5HEk6UP XqU9ura7AcikAk9lt3KdTJi7Z/X+4iTLCMXx3U6hVW/n0hlJJ1PbfF9h/5utrV1J MHpecvIVheDMXqNMeIjBYM1qtoU/ufMYfsgl35ZI0bbs9mZxHulB3fDxfsNdEdYX iQJXuhdTguhzQtEiX4jIomy6aOsvsN5WNgHksI9VmwRsjaQLZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX8vO59BDSmdUtz4wuTJzKVI50XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGE3YWZiNmQtY2NjMi0z MjEwLTk5N2QtNDc4MjIwNDFlNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0nHti/un7cKpz2r3JEUKyjBlpSuqEcaOfdoLpQ4mljh9KBdZ+aMHPq kP4l5Brs2IcOMU6mkJgycaD0PdwUI2OBaK1NPhGqBsK1QcfJwukApGGLZFpoWX7w 6YkzFIfQVQaMxEhupyW6L40qFBcGMm+ArktuQqlCXaMz/fjlTQXLJ3xKR61JdTOA r+KgQ7tv/IZM6aEoWko9D2R8gdJOJj7Gjdm3P3HbMNOksMF0MJReOguI+hQjY/jZ D9p2GkJVYm2KiSqcxXRvaiB3JB6eJZqaEX1qTlQWmlOMEimzIIeDgFcpJKTMQSit ha0YjA8sM/DO7nmgGgiXBhjv8doIo/Y= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:28 2024 by rpki-client on console-ams.rpki-client.org