$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa File: 0b94eb6e-546d-3206-8024-f1e432ee56f0.roa (raw, json) Hash identifier: UrwGR6pHqpZmtXK+hU+WlHXjGEE5nPWHLr8xH4x+3Bw= Subject key identifier: 1E:57:30:34:47:6C:22:66:E0:3F:90:2F:05:57:EB:56:70:FE:BF:2E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4617ACE0E8A76BCAFCC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:46:17:ac:e0:e8:a7:6b:ca:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=78e32067-9596-4dd1-82d9-cfc70cab9f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:cc:c2:66:2f:9d:79:48:ff:69:be:5f:3b: 6a:0a:d2:da:1c:31:e7:b7:48:36:76:36:a0:1d:d7: e1:1e:72:ae:59:36:74:88:d3:fa:cb:25:73:aa:94: 04:9b:d4:4b:10:7b:36:22:1c:98:f7:72:55:09:8c: 6f:cb:79:5d:ce:fc:22:da:99:d0:65:7f:b0:47:44: 26:2e:32:65:27:45:4e:55:43:83:63:15:f6:4c:05: 78:91:e6:cc:ab:f5:ae:04:6f:1c:7b:cb:48:38:cf: 27:07:68:98:8a:25:14:80:29:91:b0:da:ff:a8:06: da:c2:bf:30:94:9d:e4:2d:03:e7:6b:49:f5:2f:2b: 65:e8:5e:50:bd:8b:1f:55:3f:5c:3d:f1:93:e5:e1: 03:b9:cd:97:b2:a9:ea:61:27:16:a4:8d:17:af:25: f4:5e:d8:56:d0:2e:71:24:fb:d5:79:7f:15:cb:b1: 1d:7d:4d:a2:41:fb:50:95:3a:b6:b1:ad:51:3a:04: b4:64:d6:b2:b2:65:af:2a:9c:64:f9:0e:75:6f:4c: d7:4a:1f:b8:b1:c4:5c:1b:51:b5:79:54:f7:e9:f0: 49:9a:60:47:fd:b6:bd:c2:3c:2d:51:e0:a5:bb:3b: 0c:ae:97:68:d4:88:cf:89:b8:34:fa:88:b3:cf:87: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:57:30:34:47:6C:22:66:E0:3F:90:2F:05:57:EB:56:70:FE:BF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:33:3f:c1:9e:de:94:18:e5:d0:21:5b:d0:83:c0:d9:9d:e1: 9b:63:5f:f4:55:f9:08:95:52:3c:fb:0b:04:34:3b:f3:79:ba: f9:d7:10:b8:f5:b2:a0:04:34:d9:af:cb:9e:d5:6c:5e:38:63: 52:7a:2e:16:41:1b:3a:1a:74:25:5e:f9:cb:a1:19:a2:ea:f3: 3b:96:82:15:87:53:5d:46:72:07:49:b0:ca:50:f0:c3:f8:cf: 6f:57:68:f6:6a:a3:7f:fc:b0:ab:dc:6e:9f:fe:fe:43:f9:bb: 8b:08:48:ec:0f:99:3a:68:26:b8:f0:2c:6b:47:d7:56:6b:4b: 3f:1f:42:4b:eb:2f:35:3c:b7:0f:ca:0e:9d:4e:b2:3e:2a:2d: 08:aa:0a:dc:82:96:e6:3b:8a:68:ce:79:e2:70:b0:a9:0f:62: 6b:a7:46:66:a4:5e:22:10:d5:c5:5c:f6:5c:2d:b3:1d:8a:36: af:8d:de:7e:2c:91:39:e9:b5:11:ad:ff:a7:4c:1b:9c:40:fb: 99:a0:45:2a:d9:bd:de:e6:2b:f1:4d:b7:62:06:7f:0d:32:48: db:28:ec:b0:01:d2:be:71:e3:29:e6:4f:71:af:4c:6d:40:88: c5:96:28:10:c6:8d:92:e4:5e:d1:6e:cb:48:57:d0:42:91:bd: 98:54:3d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkYXrODop2vK/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NzhlMzIwNjctOTU5Ni00ZGQxLTgyZDktY2ZjNzBjYWI5Zjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4bMwmYvnXlI/2m+XztqCtLaHDHnt0g2djag HdfhHnKuWTZ0iNP6yyVzqpQEm9RLEHs2IhyY93JVCYxvy3ldzvwi2pnQZX+wR0Qm LjJlJ0VOVUODYxX2TAV4kebMq/WuBG8ce8tIOM8nB2iYiiUUgCmRsNr/qAbawr8w lJ3kLQPna0n1Lytl6F5QvYsfVT9cPfGT5eEDuc2XsqnqYScWpI0XryX0XthW0C5x JPvVeX8Vy7EdfU2iQftQlTq2sa1ROgS0ZNaysmWvKpxk+Q51b0zXSh+4scRcG1G1 eVT36fBJmmBH/ba9wjwtUeCluzsMrpdo1IjPibg0+oizz4cpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5XMDRHbCJm4D+QLwVX61Zw/r8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI5NGViNmUtNTQ2ZC0z MjA2LTgwMjQtZjFlNDMyZWU1NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkzP8Ge3pQY5dAhW9CDwNmd4ZtjX/RV+QiVUjz7CwQ0O/N5uvnXELj1 sqAENNmvy57VbF44Y1J6LhZBGzoadCVe+cuhGaLq8zuWghWHU11GcgdJsMpQ8MP4 z29XaPZqo3/8sKvcbp/+/kP5u4sISOwPmTpoJrjwLGtH11ZrSz8fQkvrLzU8tw/K Dp1Osj4qLQiqCtyCluY7imjOeeJwsKkPYmunRmakXiIQ1cVc9lwtsx2KNq+N3n4s kTnptRGt/6dMG5xA+5mgRSrZvd7mK/FNt2IGfw0ySNso7LAB0r5x4ynmT3GvTG1A iMWWKBDGjZLkXtFuy0hX0EKRvZhUPbM= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org