$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa File: 20462c47-8bd2-3e07-ad43-017e73297e3e.roa (raw, json) Hash identifier: rj8P/IZ0aqy3fKOT4LKcFMOgBGMEO7krL4Qam9976E4= Subject key identifier: D7:22:64:AF:9A:71:28:C5:91:62:49:99:30:AC:6B:79:70:C7:B6:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0E363A0C523D5F725480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0e:36:3a:0c:52:3d:5f:72:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=dd29e1d1-c4a2-4a43-a85d-e8a31ea9d753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:01:16:87:32:05:ea:0f:b7:38:23:74:48: 95:6e:15:4f:bb:26:5b:5f:c1:c4:ff:2b:9b:56:7f: 9e:58:26:09:f8:2d:6c:db:c4:10:73:b4:e9:2e:e3: 3b:1d:b6:30:0b:32:10:9d:78:5b:49:e6:ce:b5:3b: 57:8a:4d:ce:fd:3e:03:72:f5:8f:3d:82:73:6f:f7: 0c:19:37:08:3a:44:7d:dd:ee:fa:75:ba:0e:7e:02: ec:d3:7f:36:34:2c:57:0e:8f:a5:e7:7d:c6:cd:4f: 77:0e:3d:7c:48:84:fd:b7:cc:2d:1c:10:98:57:07: 11:78:5e:cc:0b:6f:ff:dc:ff:3a:cd:ad:98:cd:0d: 95:f4:58:e3:0b:e2:1b:91:16:1f:24:56:d1:77:de: bd:04:cc:0b:f7:58:3e:91:31:46:0a:f3:3e:ae:87: 35:49:0a:6b:47:61:db:3a:fb:b3:75:20:64:a9:38: 20:b4:4d:10:85:94:88:df:58:fe:24:80:38:e1:c0: e8:dc:4a:c7:dc:79:52:22:47:c9:02:e4:23:e9:2b: 4f:2f:d6:82:00:6b:a3:f9:55:3b:11:20:07:e7:7c: 06:ec:74:51:8b:39:47:30:30:b2:9c:39:2c:b2:42: 05:4f:8d:a1:b2:d2:c5:e8:cf:6f:98:ad:31:0b:6d: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:22:64:AF:9A:71:28:C5:91:62:49:99:30:AC:6B:79:70:C7:B6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20462c47-8bd2-3e07-ad43-017e73297e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e7:ab:2b:06:56:5d:80:38:44:8b:56:0f:47:b4:c7:f2:ac: 09:82:a0:fe:3e:ed:f6:3e:2c:e3:57:c4:f0:11:7c:ce:6c:92: 51:64:2a:e2:54:0f:06:1d:29:2a:8e:07:fb:e0:e5:78:61:aa: a7:ee:06:18:1f:8f:e4:0a:a3:7c:e2:ae:86:12:94:42:ee:61: 14:4f:dc:94:8f:68:57:ff:16:dc:72:50:f3:4f:a8:4a:a2:17: 62:a1:48:d9:8f:ca:19:cc:a2:a3:cf:84:7a:63:a6:98:63:fa: 2e:45:24:13:0f:02:d9:6d:6d:d5:9f:40:84:74:58:72:ed:8c: 59:54:28:e1:e0:57:97:6d:37:07:05:6b:5c:86:02:f6:46:28: ee:ff:65:7d:f6:36:e9:04:2a:0b:d3:b2:3b:a0:77:e3:36:e1: bd:b9:f1:b8:c5:13:70:eb:98:0b:14:cc:8e:2c:0c:fa:86:0d: 71:f3:67:b8:69:34:23:a1:d9:29:69:6d:77:68:54:60:5a:e1: 88:cd:19:ce:32:60:3b:3e:d1:63:f0:b9:49:8e:53:e7:43:0f: 29:59:77:9e:0a:2e:b9:d4:f3:27:58:11:90:de:56:0b:ae:5d: 0b:ca:11:c4:8e:25:29:6b:59:8a:b5:a3:3e:f6:fb:a1:9f:df: 56:37:98:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw42OgxSPV9yVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGQyOWUxZDEtYzRhMi00YTQzLWE4NWQtZThhMzFlYTlkNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6QBFocyBeoPtzgjdEiVbhVPuyZbX8HE/yub Vn+eWCYJ+C1s28QQc7TpLuM7HbYwCzIQnXhbSebOtTtXik3O/T4DcvWPPYJzb/cM GTcIOkR93e76dboOfgLs0382NCxXDo+l533GzU93Dj18SIT9t8wtHBCYVwcReF7M C2//3P86za2YzQ2V9FjjC+IbkRYfJFbRd969BMwL91g+kTFGCvM+roc1SQprR2Hb OvuzdSBkqTggtE0QhZSI31j+JIA44cDo3ErH3HlSIkfJAuQj6StPL9aCAGuj+VU7 ESAH53wG7HRRizlHMDCynDksskIFT42hstLF6M9vmK0xC23tzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNciZK+acSjFkWJJmTCsa3lwx7ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjA0NjJjNDctOGJkMi0z ZTA3LWFkNDMtMDE3ZTczMjk3ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLnqysGVl2AOESLVg9HtMfyrAmCoP4+7fY+LONXxPARfM5sklFkKuJU DwYdKSqOB/vg5XhhqqfuBhgfj+QKo3ziroYSlELuYRRP3JSPaFf/FtxyUPNPqEqi F2KhSNmPyhnMoqPPhHpjpphj+i5FJBMPAtltbdWfQIR0WHLtjFlUKOHgV5dtNwcF a1yGAvZGKO7/ZX32NukEKgvTsjugd+M24b258bjFE3DrmAsUzI4sDPqGDXHzZ7hp NCOh2SlpbXdoVGBa4YjNGc4yYDs+0WPwuUmOU+dDDylZd54KLrnU8ydYEZDeVguu XQvKEcSOJSlrWYq1oz72+6Gf31Y3mI4= -----END CERTIFICATE-----Generated at Mon Nov 25 01:02:52 2024 by rpki-client on console-ams.rpki-client.org