$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/168db569-3818-3090-8b25-7a54194af43a.roa File: 168db569-3818-3090-8b25-7a54194af43a.roa (raw, json) Hash identifier: H0uIIY18OjE/CKzdwSpA/bH9hfJpf+/U4q4APkJRs+o= Subject key identifier: 41:B5:4B:8E:19:80:DB:FD:1B:CE:2B:08:85:1C:FB:F3:C4:2C:8E:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E45373D6769F2468EB500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/168db569-3818-3090-8b25-7a54194af43a.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:45:37:3d:67:69:f2:46:8e:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=11cec2ea-6215-40f9-85d1-47cc262ca2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:e0:70:c1:22:a5:71:4a:6d:16:a7:24:fb: 37:f4:e3:b3:6d:aa:ab:81:1a:ff:30:47:ce:19:ea: c5:59:98:bb:0f:29:78:07:20:a8:b5:b6:ca:d9:3e: aa:78:33:53:31:99:ce:13:db:e8:44:55:a2:0f:96: 3d:fc:6f:4b:b0:32:6a:d2:3e:6d:96:9b:12:46:d3: 5e:31:08:9e:eb:b6:c7:34:2b:0c:46:56:cc:1b:be: d8:23:a9:2c:77:b7:82:75:54:0f:ae:e3:54:df:96: 20:3b:90:6d:aa:56:7a:5b:1b:82:f0:c9:87:9a:d0: 01:96:c8:fe:24:56:cc:73:28:a2:6a:7a:51:45:00: e3:b3:4b:d0:47:e7:b2:52:75:70:a9:2f:aa:bc:04: 38:d1:87:14:ef:a4:ae:50:08:e7:46:46:37:63:a9: a6:4f:33:09:af:a0:09:7d:dc:ed:72:68:02:4d:fe: 65:90:6a:70:f9:7c:ee:96:d7:10:ee:31:5c:1a:10: a1:d5:57:28:c0:31:63:67:07:0b:ff:95:f4:92:a4: e5:81:2b:b7:0a:19:b6:c4:50:2d:d3:04:8d:32:33: 1c:01:d5:c1:52:a3:ce:20:6b:c5:b6:35:5d:6e:7d: 9b:15:db:db:e5:73:8e:93:bb:a4:a0:2d:60:a1:85: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B5:4B:8E:19:80:DB:FD:1B:CE:2B:08:85:1C:FB:F3:C4:2C:8E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/168db569-3818-3090-8b25-7a54194af43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:6a:a6:48:05:5f:e8:31:79:6e:b9:7c:be:c2:3c:52:fa:d3: c2:be:39:71:4c:65:f2:69:44:ff:a3:15:76:31:7a:b1:40:56: 44:f6:0d:45:da:66:37:76:6a:54:22:2f:72:cd:23:6d:c0:e5: 15:d5:32:73:e2:99:cc:a3:89:93:db:a9:77:ac:a7:88:ce:ad: 8a:8a:12:65:84:90:66:66:61:41:fb:fe:42:5a:24:75:bb:cc: 68:c6:e9:b7:91:40:2b:1f:b4:02:db:83:b1:76:18:7c:b8:ba: 2f:df:1e:43:8b:92:8e:ca:c3:c7:70:5e:0d:d1:2b:3a:b0:83: 8c:05:63:6e:f6:70:d0:6e:47:ea:fd:a9:67:83:88:4c:03:c0: ae:52:ba:ec:c8:ae:11:c3:96:60:22:30:42:c0:ab:c6:1a:30: 77:4f:b0:d9:f1:5d:ce:d1:2e:fd:bd:f7:41:73:69:eb:60:36: 8f:2d:7f:c7:b8:04:66:e0:ea:91:38:b8:32:8e:4e:8d:6f:a2: 74:73:36:13:25:34:ca:40:6c:ad:27:32:2a:1f:2c:70:12:cb: a5:21:e1:20:18:f0:05:76:a3:0e:4e:d9:9f:8c:9f:e7:3d:6f: 29:51:d7:59:18:65:9c:a5:89:12:02:21:78:f9:4f:0b:a2:0f: 7c:80:75:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkU3PWdp8kaOtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MTFjZWMyZWEtNjIxNS00MGY5LTg1ZDEtNDdjYzI2MmNhMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPjgcMEipXFKbRanJPs39OOzbaqrgRr/MEfO GerFWZi7Dyl4ByCotbbK2T6qeDNTMZnOE9voRFWiD5Y9/G9LsDJq0j5tlpsSRtNe MQie67bHNCsMRlbMG77YI6ksd7eCdVQPruNU35YgO5BtqlZ6WxuC8MmHmtABlsj+ JFbMcyiianpRRQDjs0vQR+eyUnVwqS+qvAQ40YcU76SuUAjnRkY3Y6mmTzMJr6AJ fdztcmgCTf5lkGpw+XzultcQ7jFcGhCh1VcowDFjZwcL/5X0kqTlgSu3Chm2xFAt 0wSNMjMcAdXBUqPOIGvFtjVdbn2bFdvb5XOOk7ukoC1goYVWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG1S44ZgNv9G84rCIUc+/PELI5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTY4ZGI1NjktMzgxOC0z MDkwLThiMjUtN2E1NDE5NGFmNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBqpkgFX+gxeW65fL7CPFL608K+OXFMZfJpRP+jFXYxerFAVkT2DUXa Zjd2alQiL3LNI23A5RXVMnPimcyjiZPbqXesp4jOrYqKEmWEkGZmYUH7/kJaJHW7 zGjG6beRQCsftALbg7F2GHy4ui/fHkOLko7Kw8dwXg3RKzqwg4wFY272cNBuR+r9 qWeDiEwDwK5SuuzIrhHDlmAiMELAq8YaMHdPsNnxXc7RLv2990FzaetgNo8tf8e4 BGbg6pE4uDKOTo1vonRzNhMlNMpAbK0nMiofLHASy6Uh4SAY8AV2ow5O2Z+Mn+c9 bylR11kYZZyliRICIXj5TwuiD3yAdRE= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:32 2024 by rpki-client on console-ams.rpki-client.org