$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa File: 10a855de-2f56-30f4-b7d6-ad843411b4b9.roa (raw, json) Hash identifier: KQ9Wh4ESG7JqDEGnhkpRt03g8Mo6SB1w8OpxFUHFDWo= Subject key identifier: B3:47:1C:4E:9B:39:51:5A:72:4B:AE:37:D0:15:DB:1C:A2:F1:66:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC50C05443AF5DAC89200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c5:0c:05:44:3a:f5:da:c8:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=451311ec-59e3-4b65-93be-39e3ced5cc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:6b:f6:f1:b9:2d:7f:92:67:82:67:4e:53: 0b:f1:27:cc:93:0a:fa:a3:a1:99:c2:b0:41:ba:e8: cc:82:56:97:a2:32:3f:87:5d:8a:0f:8a:b4:f1:10: df:27:76:83:4a:e3:8d:bc:64:75:93:56:fe:89:5d: cc:91:c3:5d:d1:0c:a7:5c:98:90:a3:e8:b3:70:1d: b3:9e:3d:45:21:69:3f:41:d6:6a:da:1f:72:ce:27: ca:37:b6:20:7a:57:5e:4f:83:42:94:28:5a:f5:d7: 9a:5c:0c:96:73:62:3b:2b:a2:5a:56:8b:1f:ba:64: 4b:56:42:d6:17:fe:40:6b:de:81:ae:26:1b:f3:69: 70:2d:cd:ae:0d:87:94:ef:55:ca:71:56:93:27:48: 24:76:15:74:d5:0d:75:25:bc:e7:c3:f2:07:34:11: 09:18:00:ab:61:9b:8c:cb:cc:67:a8:b8:dd:ad:02: 9a:38:fd:b9:e4:c5:07:ee:64:04:7e:fb:f8:4e:bc: ea:5f:dc:60:98:ef:48:30:d1:6e:14:64:d5:5c:c5: 18:82:ff:fb:63:78:23:38:a0:60:e9:c7:1a:ef:a9: 39:0f:8e:be:fc:b6:84:f3:12:f7:0b:f9:3d:b6:52: cc:c3:a4:a6:9c:bd:13:82:36:14:a5:3c:3b:73:15: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:47:1C:4E:9B:39:51:5A:72:4B:AE:37:D0:15:DB:1C:A2:F1:66:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:af:58:34:1a:ba:06:f7:d3:0e:21:fa:15:87:9b:a8:df:b4: dc:ee:6a:82:57:3a:e9:ac:11:5e:20:80:68:c6:de:dd:f4:7b: ea:05:b6:32:ff:26:91:0a:c4:72:ae:9c:d4:f3:b0:ff:2f:4b: 1a:36:de:cf:46:69:11:e9:f8:8a:8a:dc:89:c7:c9:6c:46:bc: cb:73:cc:4d:7c:e2:9a:7b:71:85:dd:93:0c:d0:2b:19:ac:28: ef:fd:13:ea:15:42:bb:ef:0b:bc:6e:3b:a6:be:d7:cb:93:bb: 0b:13:79:79:56:4e:90:ee:4a:32:06:18:36:83:f1:8a:38:a8: 94:5f:27:e1:8a:0d:a9:b7:38:5a:9c:8f:3f:29:ee:48:ae:ec: 95:6d:53:e0:1a:7f:bd:11:d3:24:43:c0:c5:38:5e:f8:7a:8f: d2:9f:c1:5b:64:60:8b:91:6a:c0:e7:30:9e:d5:74:11:ac:dc: bf:45:f8:2f:bd:75:16:ca:3f:62:43:bf:ed:7e:e4:00:4a:58: 77:c7:9e:94:b7:11:9f:bf:6e:af:42:27:1e:c6:4a:a2:ef:cf: 84:0f:21:1b:f3:ef:56:55:49:ec:d6:0c:1a:ee:02:8b:bf:8f: e4:27:a7:54:ab:9e:0a:94:b7:59:b4:18:ca:46:bd:80:19:7e: 05:8b:ca:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcUMBUQ69drIkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NDUxMzExZWMtNTllMy00YjY1LTkzYmUtMzllM2NlZDVjYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/dr9vG5LX+SZ4JnTlML8SfMkwr6o6GZwrBB uujMglaXojI/h12KD4q08RDfJ3aDSuONvGR1k1b+iV3MkcNd0QynXJiQo+izcB2z nj1FIWk/QdZq2h9yzifKN7YgeldeT4NClCha9deaXAyWc2I7K6JaVosfumRLVkLW F/5Aa96BriYb82lwLc2uDYeU71XKcVaTJ0gkdhV01Q11Jbznw/IHNBEJGACrYZuM y8xnqLjdrQKaOP255MUH7mQEfvv4TrzqX9xgmO9IMNFuFGTVXMUYgv/7Y3gjOKBg 6cca76k5D46+/LaE8xL3C/k9tlLMw6SmnL0TgjYUpTw7cxXUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNHHE6bOVFackuuN9AV2xyi8WY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBhODU1ZGUtMmY1Ni0z MGY0LWI3ZDYtYWQ4NDM0MTFiNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOvWDQaugb30w4h+hWHm6jftNzuaoJXOumsEV4ggGjG3t30e+oFtjL/ JpEKxHKunNTzsP8vSxo23s9GaRHp+IqK3InHyWxGvMtzzE184pp7cYXdkwzQKxms KO/9E+oVQrvvC7xuO6a+18uTuwsTeXlWTpDuSjIGGDaD8Yo4qJRfJ+GKDam3OFqc jz8p7kiu7JVtU+Aaf70R0yRDwMU4Xvh6j9KfwVtkYIuRasDnMJ7VdBGs3L9F+C+9 dRbKP2JDv+1+5ABKWHfHnpS3EZ+/bq9CJx7GSqLvz4QPIRvz71ZVSezWDBruAou/ j+Qnp1SrngqUt1m0GMpGvYAZfgWLyuQ= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:31 2024 by rpki-client on console-ams.rpki-client.org