$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa File: 239c4599-2f7f-356a-86bd-f8a86a18042f.roa (raw, json) Hash identifier: 78ENM7MBKMMFGYzE9Y6vaPist0yfKD3L6Fny1jekYa8= Subject key identifier: 1E:B5:98:04:36:04:03:B2:BB:7E:97:B9:F7:EF:37:C4:36:FC:96:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7D09E9D9CD99D9032400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7d:09:e9:d9:cd:99:d9:03:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=1a238876-d967-4633-a16c-e189f06d6cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:99:54:2a:cf:ae:eb:99:28:25:b4:90:49: b9:6a:b2:09:05:53:b5:36:4e:72:f5:84:73:75:5a: 8a:91:42:e9:ce:ad:5d:d2:e7:b3:53:6e:49:b6:05: d1:b1:8c:e5:dd:0f:b6:b3:f2:12:c1:94:7b:b2:eb: ea:19:f9:28:45:f0:27:59:6e:5e:fb:01:2a:2a:c0: b9:e8:7d:12:c7:99:6d:69:e0:57:2c:50:06:64:6f: d2:b0:87:d1:b0:4b:8d:31:75:08:ca:3a:97:1e:78: fe:ce:c7:57:10:8b:1b:cf:51:9d:61:3d:86:21:28: aa:df:36:6c:ee:f0:88:eb:35:bb:5f:97:4b:19:42: 1e:6f:9a:75:14:1e:fb:e8:31:ef:ec:1d:ca:fe:01: 6d:b7:f4:e3:73:f8:b8:e3:c7:53:df:e8:20:33:97: 1c:70:71:d8:00:6d:ee:38:03:62:fd:27:de:6d:80: 71:2f:2d:e5:aa:cc:e3:9f:7e:74:77:33:6d:90:61: d7:05:81:a8:15:31:ac:d1:ce:96:c2:e2:c1:80:39: ee:6d:ef:1d:71:40:c3:82:58:ff:4f:d9:2b:03:47: 2c:ee:ae:71:7f:8e:40:08:c0:bc:ac:b8:6d:6b:69: 53:7a:1c:d1:24:f4:17:21:7c:45:a2:2e:6c:73:13: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B5:98:04:36:04:03:B2:BB:7E:97:B9:F7:EF:37:C4:36:FC:96:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:0e:a5:92:41:ac:2e:f4:02:21:64:11:a6:08:1b:06:db:80: 47:19:0e:8a:bb:66:cf:b5:23:6b:23:cc:95:51:3b:cd:20:e0: f3:6f:a1:21:91:47:b1:6b:42:05:80:d6:ad:66:c0:59:90:31: 9d:95:45:44:d6:82:1e:8b:1c:85:8b:f0:63:ec:35:5d:61:29: 64:2c:d6:3f:34:a1:d8:f7:96:f6:ce:6d:fc:b8:d4:f7:90:6f: a3:c0:fe:23:c9:89:d7:a5:16:c4:1d:ea:3c:9c:a8:c6:7f:89: 12:19:8b:51:2d:d5:ef:48:20:95:4c:a3:f2:4c:13:71:b3:1c: ca:f5:00:e0:bd:02:f2:3f:04:be:97:ba:c9:8a:ec:6f:7e:c3: cf:96:b3:1e:9d:ae:41:73:19:e9:91:1c:5c:a7:8e:b2:d7:1a: 7d:a8:1b:ee:36:f8:09:f0:55:f6:fa:be:d6:4a:f6:ca:09:22: db:7b:30:65:cc:10:54:6e:7e:24:3c:06:ff:1a:2b:0a:f5:af: c3:f4:0e:53:27:3d:c8:bd:fe:45:05:59:94:42:2e:59:fb:91: 22:ef:1a:c8:9c:bb:a5:26:f1:b6:aa:59:d2:83:f3:e5:76:21: 62:9e:40:9a:19:10:a3:71:31:8f:fc:cd:79:f4:c7:aa:59:36: 42:24:b0:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKn0J6dnNmdkDJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MWEyMzg4NzYtZDk2Ny00NjMzLWExNmMtZTE4OWYwNmQ2Y2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjKZVCrPruuZKCW0kEm5arIJBVO1Nk5y9YRz dVqKkULpzq1d0uezU25JtgXRsYzl3Q+2s/ISwZR7suvqGfkoRfAnWW5e+wEqKsC5 6H0Sx5ltaeBXLFAGZG/SsIfRsEuNMXUIyjqXHnj+zsdXEIsbz1GdYT2GISiq3zZs 7vCI6zW7X5dLGUIeb5p1FB776DHv7B3K/gFtt/Tjc/i448dT3+ggM5cccHHYAG3u OANi/SfebYBxLy3lqszjn350dzNtkGHXBYGoFTGs0c6WwuLBgDnube8dcUDDglj/ T9krA0cs7q5xf45ACMC8rLhta2lTehzRJPQXIXxFoi5scxOpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB61mAQ2BAOyu36XuffvN8Q2/JYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM5YzQ1OTktMmY3Zi0z NTZhLTg2YmQtZjhhODZhMTgwNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkOpZJBrC70AiFkEaYIGwbbgEcZDoq7Zs+1I2sjzJVRO80g4PNvoSGR R7FrQgWA1q1mwFmQMZ2VRUTWgh6LHIWL8GPsNV1hKWQs1j80odj3lvbObfy41PeQ b6PA/iPJidelFsQd6jycqMZ/iRIZi1Et1e9IIJVMo/JME3GzHMr1AOC9AvI/BL6X usmK7G9+w8+Wsx6drkFzGemRHFynjrLXGn2oG+42+AnwVfb6vtZK9soJItt7MGXM EFRufiQ8Bv8aKwr1r8P0DlMnPci9/kUFWZRCLln7kSLvGsicu6Um8baqWdKD8+V2 IWKeQJoZEKNxMY/8zXn0x6pZNkIksNM= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:09 2024 by rpki-client on console-fra.rpki-client.org