$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa File: 138e208c-b64d-35dc-82cf-e05f0cba2043.roa (raw, json) Hash identifier: B2TgAUpX9T+3s2Ez2WWiY2L+L2d3TyMjzRmJDwnlKSM= Subject key identifier: 09:60:AF:3C:4B:93:AF:0B:85:42:92:24:C6:1D:AF:3A:B8:80:25:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7A52F261E905EB69F140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7a:52:f2:61:e9:05:eb:69:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=c971041b-74d1-4a61-a164-f718553b9b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:af:96:0a:c2:e5:82:e8:cb:c1:c9:28:a4: e6:73:30:1e:3e:5e:cd:54:35:46:21:c3:53:4b:40: de:d6:47:6d:11:47:13:77:2f:05:71:23:4e:e7:51: 17:86:76:8a:3e:80:94:59:e8:1f:78:99:bf:53:93: ce:3e:a9:3b:e8:d4:d7:cc:5e:5f:cd:cc:24:6b:99: 7c:dc:92:74:5a:df:52:08:fa:f2:99:4f:14:55:6e: a8:cb:6c:3a:4f:92:ef:4b:9d:57:81:59:01:36:f6: 6d:ba:35:df:ef:1f:35:5f:8e:c1:26:9f:6a:ca:8d: 07:e9:8c:e0:2e:73:be:50:43:12:c7:f9:3b:9d:1a: bc:a8:d1:ab:42:9f:5c:d6:e2:1e:42:1f:10:df:72: 9a:54:6b:ee:4e:40:95:5d:a0:0f:b0:09:1c:14:52: c0:9a:22:2f:2c:f8:34:b1:cd:30:25:cb:aa:14:eb: 24:97:cc:a3:4a:6c:66:5a:d5:f9:49:f8:b8:61:81: 38:2c:d4:6f:38:d9:4c:a7:90:10:77:51:35:ab:86: a8:dc:63:37:9e:4b:cd:03:a7:f4:5f:0c:84:d1:10: 59:8a:b9:f5:b2:48:85:fa:fe:f2:43:87:bc:ad:3c: a8:74:0a:73:d5:13:89:6e:69:1c:7f:9a:80:0e:1b: a4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:AF:3C:4B:93:AF:0B:85:42:92:24:C6:1D:AF:3A:B8:80:25:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1a:31:19:45:72:3e:c9:6b:d8:8a:ce:7f:2f:75:3d:41:12: dd:78:92:53:7a:99:78:59:6c:52:3d:f2:19:d9:3b:65:f3:94: 32:b7:8c:a2:b0:12:a1:2d:f7:03:85:73:f9:89:d9:e2:69:3c: a9:39:cc:15:39:2f:a3:fa:d0:98:42:82:20:00:b1:24:d6:c6: dc:fe:7c:a3:0c:d2:48:71:de:c2:79:eb:ea:98:9a:de:bc:b4: 6f:e3:b9:d9:8f:50:b5:d4:ce:e6:dd:d0:78:d0:b8:53:bf:2b: 89:66:bf:60:dd:06:2d:3c:95:86:8d:c0:db:7a:0a:a9:28:f0: e1:33:8f:8a:96:4f:72:37:f1:a6:c4:fb:46:0e:c0:a8:c8:3f: 01:2d:83:64:bc:90:24:6c:7c:b1:f7:f1:ea:65:d8:ac:62:2b: 8e:f0:88:2e:1e:e6:b0:e6:a5:eb:78:c7:0f:da:78:4c:5f:f6: 3f:eb:30:16:b7:5b:2a:49:95:7b:1c:c4:af:77:68:23:31:1f: 4a:a6:04:cf:e3:92:34:22:d6:9c:21:5d:e3:df:1f:6e:4c:1c: 09:73:80:f1:2e:d8:9d:04:58:ba:d1:e4:4f:78:a2:76:f7:1f: 8f:78:5d:d4:0b:68:3a:eb:4f:08:f3:82:51:a5:b3:7a:0d:b2: 7f:48:0b:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnpS8mHpBetp8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk Yzk3MTA0MWItNzRkMS00YTYxLWExNjQtZjcxODU1M2I5YjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDmvlgrC5YLoy8HJKKTmczAePl7NVDVGIcNT S0De1kdtEUcTdy8FcSNO51EXhnaKPoCUWegfeJm/U5POPqk76NTXzF5fzcwka5l8 3JJ0Wt9SCPrymU8UVW6oy2w6T5LvS51XgVkBNvZtujXf7x81X47BJp9qyo0H6Yzg LnO+UEMSx/k7nRq8qNGrQp9c1uIeQh8Q33KaVGvuTkCVXaAPsAkcFFLAmiIvLPg0 sc0wJcuqFOskl8yjSmxmWtX5Sfi4YYE4LNRvONlMp5AQd1E1q4ao3GM3nkvNA6f0 XwyE0RBZirn1skiF+v7yQ4e8rTyodApz1ROJbmkcf5qADhukWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlgrzxLk68LhUKSJMYdrzq4gCU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTM4ZTIwOGMtYjY0ZC0z NWRjLTgyY2YtZTA1ZjBjYmEyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsaMRlFcj7Ja9iKzn8vdT1BEt14klN6mXhZbFI98hnZO2XzlDK3jKKw EqEt9wOFc/mJ2eJpPKk5zBU5L6P60JhCgiAAsSTWxtz+fKMM0khx3sJ56+qYmt68 tG/judmPULXUzubd0HjQuFO/K4lmv2DdBi08lYaNwNt6Cqko8OEzj4qWT3I38abE +0YOwKjIPwEtg2S8kCRsfLH38epl2KxiK47wiC4e5rDmpet4xw/aeExf9j/rMBa3 WypJlXscxK93aCMxH0qmBM/jkjQi1pwhXePfH25MHAlzgPEu2J0EWLrR5E94onb3 H494XdQLaDrrTwjzglGls3oNsn9IC2g= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:13 2024 by rpki-client on console-ams.rpki-client.org