$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa File: 27ea1895-da0b-3db1-9734-0ba63257dfa5.roa (raw, json) Hash identifier: 5eI4xFi8Phy593QxWBLw5MvMtWkT8SquFmBPf2oQlPQ= Subject key identifier: 58:7B:15:60:8B:87:F0:E9:BF:59:D4:1D:8B:00:A7:E8:51:ED:AD:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E440FC838CBCA8FA7D440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:44:0f:c8:38:cb:ca:8f:a7:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=48fc25ec-67be-45b4-a3fe-f8603a804c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:96:a6:e6:93:d2:2d:b5:46:9b:ef:96:85: fd:d1:f3:3e:80:c9:f5:2e:26:bd:ca:2b:01:e9:48: a2:63:7f:04:72:7b:8c:9f:3d:ea:e3:ec:dc:7c:1f: 08:fb:05:d7:f1:3f:b8:a3:22:1a:6a:2b:91:e5:e1: 39:5b:a7:7f:03:c5:84:4f:dc:99:b4:8f:2f:50:dd: e0:be:4d:4b:2a:59:06:a0:83:73:a0:58:2d:d5:3c: 54:dc:48:e0:c5:c0:29:1d:85:95:1c:68:1f:1d:8c: be:a7:91:10:c1:9e:b9:2e:6d:62:c5:e0:b9:cd:ea: 6d:f8:ae:49:02:11:50:35:6d:e5:34:6a:7e:b8:5e: 06:90:71:9f:4b:92:16:c8:66:c1:8d:34:f2:c5:52: 07:01:21:17:b3:26:7c:be:1b:fa:c3:ec:f7:c9:1b: b8:73:cc:7a:05:52:68:98:9b:63:88:de:68:fa:a7: 97:7a:b3:01:d9:37:37:38:57:5e:47:13:2c:87:31: 07:b0:50:04:d1:2a:1c:12:f2:c6:ed:30:db:60:9d: 2c:68:e0:6b:f3:8b:39:96:87:b4:ad:75:da:11:13: 6e:e2:73:db:97:8e:09:a6:2f:72:b5:4e:3a:37:0e: 54:1e:21:12:4c:90:aa:35:05:04:e9:1a:ad:da:17: d4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7B:15:60:8B:87:F0:E9:BF:59:D4:1D:8B:00:A7:E8:51:ED:AD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:35:bd:c2:33:8b:dc:73:bb:17:82:bd:ed:2d:17:66:8b:df: 02:c3:1b:ef:76:89:63:92:92:76:36:c3:06:46:8d:ef:92:6a: 12:58:07:c5:ec:ae:a0:e0:d9:b9:08:ca:d4:dc:41:f4:5d:28: bd:ca:24:10:d2:1f:6c:69:8f:78:91:4f:8e:ed:dc:73:e4:7e: 2d:74:61:ee:d0:bc:92:79:96:15:0a:24:9e:bd:d2:c1:83:d4: c1:bf:05:87:99:08:c0:d0:39:66:83:06:5f:0e:a3:d2:b4:67: e2:e2:d1:83:b5:12:03:e6:d0:88:db:2a:fc:33:35:1e:62:6b: cc:72:b8:29:aa:77:0b:d4:36:b0:42:08:ae:67:35:63:c8:37: 34:55:3a:b2:23:fd:bf:3c:36:bf:45:89:26:d5:18:0b:f1:f1: ea:a3:e9:d2:f9:7d:2f:6c:9a:fa:80:28:b7:a7:1b:a1:52:42: 34:b1:96:93:93:04:34:3b:72:a5:75:ec:bd:d4:3f:18:5d:74: da:85:6b:d0:06:98:ef:c5:51:7b:4b:d4:1c:6a:21:e3:1b:cb: 4d:59:a0:ce:8c:23:14:d4:32:e3:8b:0e:47:85:df:15:be:64: eb:eb:26:61:af:e4:32:3a:2c:a6:a8:69:3a:b2:5c:bb:0a:71: 73:69:57:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkQPyDjLyo+n1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NDhmYzI1ZWMtNjdiZS00NWI0LWEzZmUtZjg2MDNhODA0YzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYWWpuaT0i21RpvvloX90fM+gMn1Lia9yisB 6UiiY38EcnuMnz3q4+zcfB8I+wXX8T+4oyIaaiuR5eE5W6d/A8WET9yZtI8vUN3g vk1LKlkGoINzoFgt1TxU3EjgxcApHYWVHGgfHYy+p5EQwZ65Lm1ixeC5zept+K5J AhFQNW3lNGp+uF4GkHGfS5IWyGbBjTTyxVIHASEXsyZ8vhv6w+z3yRu4c8x6BVJo mJtjiN5o+qeXerMB2Tc3OFdeRxMshzEHsFAE0SocEvLG7TDbYJ0saOBr84s5loe0 rXXaERNu4nPbl44Jpi9ytU46Nw5UHiESTJCqNQUE6Rqt2hfUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh7FWCLh/Dpv1nUHYsAp+hR7a1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjdlYTE4OTUtZGEwYi0z ZGIxLTk3MzQtMGJhNjMyNTdkZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw1vcIzi9xzuxeCve0tF2aL3wLDG+92iWOSknY2wwZGje+SahJYB8Xs rqDg2bkIytTcQfRdKL3KJBDSH2xpj3iRT47t3HPkfi10Ye7QvJJ5lhUKJJ690sGD 1MG/BYeZCMDQOWaDBl8Oo9K0Z+Li0YO1EgPm0IjbKvwzNR5ia8xyuCmqdwvUNrBC CK5nNWPINzRVOrIj/b88Nr9FiSbVGAvx8eqj6dL5fS9smvqAKLenG6FSQjSxlpOT BDQ7cqV17L3UPxhddNqFa9AGmO/FUXtL1BxqIeMby01ZoM6MIxTUMuOLDkeF3xW+ ZOvrJmGv5DI6LKaoaTqyXLsKcXNpV6c= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:32 2024 by rpki-client on console-ams.rpki-client.org