$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa File: 0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa (raw, json) Hash identifier: zPOlSlTtfomamgYIfIJyLCDRvRbR47J8fm+Z8arO5Xc= Subject key identifier: 34:E4:B9:7A:CF:61:59:A6:86:E6:08:96:3B:D4:BF:E3:44:91:77:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D834290869BF8B858A360 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:83:42:90:86:9b:f8:b8:58:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=8a86c7b8-ef05-4c7a-a88a-f1c193ba1f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:b1:d6:24:6c:7f:de:d2:11:fe:ff:8a:a2: ee:c8:dc:69:3b:99:10:dc:26:92:51:1f:ad:5a:70: dc:93:7f:6b:7f:57:98:fd:90:26:c7:27:8c:d6:98: 0d:27:58:bd:0d:09:ab:60:ef:88:cb:77:ec:bd:44: 7a:5f:0e:eb:87:05:99:19:ed:fe:28:ba:0f:ae:2d: 19:cf:52:7c:5c:f8:e1:6d:c0:91:35:1b:18:78:a4: 65:fd:6d:ee:a1:1a:ae:20:34:85:4b:57:7d:e1:ed: bd:88:55:dc:bb:78:f6:a5:1d:b9:4d:04:e6:8a:94: a1:8d:76:31:23:61:88:ef:7b:b4:75:b0:4f:4b:af: 0b:8a:b7:0f:f7:5b:6e:83:86:b0:0a:de:c2:5d:d3: 12:b6:b0:7e:45:54:7c:e6:e6:94:ce:de:f7:ed:fc: 95:25:23:d8:66:ea:ab:7d:90:1d:12:ad:d4:f1:e7: c8:8c:8d:c0:bb:cf:52:6b:e8:c2:79:c0:be:3f:a4: 53:20:02:cd:60:46:eb:85:de:9f:12:5a:ec:89:35: e3:f7:6f:cd:18:d8:3d:c5:b3:22:70:31:31:a2:5a: 01:d4:4f:0e:74:55:f9:b1:d6:6e:54:f7:b5:26:65: 8c:c5:de:96:54:b5:e3:8e:d5:13:fe:f1:bd:d9:5d: 2b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E4:B9:7A:CF:61:59:A6:86:E6:08:96:3B:D4:BF:E3:44:91:77:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:42:ef:cb:34:3d:53:72:04:06:c4:8d:da:b2:a0:8f:2b:d6: 7b:2a:5c:38:de:f3:46:de:11:bf:80:d3:9a:8d:84:c6:f2:0b: 34:d7:fe:db:45:06:e3:9a:36:48:f4:64:ce:14:b9:ec:e4:bf: 4e:9e:88:2b:ef:71:27:60:c7:69:98:cd:fc:24:20:1d:6e:18: 48:33:3d:fe:31:94:76:d1:68:86:db:9e:b5:59:00:fe:53:6a: 4b:3f:67:0e:e7:ef:3d:08:08:8d:f3:46:aa:ba:20:11:d9:c6: 2a:94:6b:cc:d9:8c:44:68:09:47:97:ff:24:d1:0f:a0:21:25: 8e:3d:c0:51:a0:76:f7:e9:db:4f:33:40:da:ec:15:26:9c:64: 5a:d8:27:93:c7:6c:34:09:5a:ba:b6:25:8c:f4:01:6e:bd:5b: 06:bf:28:aa:44:90:3e:4a:c6:cb:b4:d8:03:31:6c:15:22:9d: e4:a9:76:6f:22:1b:e1:31:50:fb:d3:11:05:e8:f0:70:7d:bf: 07:bd:1e:c9:e5:75:74:67:7b:9b:f6:81:ec:23:04:9e:67:74: bb:55:6b:b3:0d:19:0e:d8:5b:3c:4a:a2:79:90:3e:0a:d8:00: 1c:24:fb:a7:99:19:af:ad:11:09:99:70:97:2a:f4:03:9a:48: 56:f7:0a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPYNCkIab+LhYo2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OGE4NmM3YjgtZWYwNS00YzdhLWE4OGEtZjFjMTkzYmExZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI6x1iRsf97SEf7/iqLuyNxpO5kQ3CaSUR+t WnDck39rf1eY/ZAmxyeM1pgNJ1i9DQmrYO+Iy3fsvUR6Xw7rhwWZGe3+KLoPri0Z z1J8XPjhbcCRNRsYeKRl/W3uoRquIDSFS1d94e29iFXcu3j2pR25TQTmipShjXYx I2GI73u0dbBPS68LircP91tug4awCt7CXdMStrB+RVR85uaUzt737fyVJSPYZuqr fZAdEq3U8efIjI3Au89Sa+jCecC+P6RTIALNYEbrhd6fElrsiTXj92/NGNg9xbMi cDExoloB1E8OdFX5sdZuVPe1JmWMxd6WVLXjjtUT/vG92V0r5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTkuXrPYVmmhuYIljvUv+NEkXdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI2NjUxZTMtOGJkOS0z MGNmLWI3ZjYtOGIyN2YwY2U1NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZC78s0PVNyBAbEjdqyoI8r1nsqXDje80beEb+A05qNhMbyCzTX/ttF BuOaNkj0ZM4Uuezkv06eiCvvcSdgx2mYzfwkIB1uGEgzPf4xlHbRaIbbnrVZAP5T aks/Zw7n7z0ICI3zRqq6IBHZxiqUa8zZjERoCUeX/yTRD6AhJY49wFGgdvfp208z QNrsFSacZFrYJ5PHbDQJWrq2JYz0AW69Wwa/KKpEkD5Kxsu02AMxbBUineSpdm8i G+ExUPvTEQXo8HB9vwe9HsnldXRne5v2gewjBJ5ndLtVa7MNGQ7YWzxKonmQPgrY ABwk+6eZGa+tEQmZcJcq9AOaSFb3Crg= -----END CERTIFICATE-----Generated at Sat Apr 27 10:22:29 2024 by rpki-client on console-ams.rpki-client.org