$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa File: 28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa (raw, json) Hash identifier: ZCfqHu61hmusv7JS+7s6LzRiMy3dkxOTOtyiJp2ZmBg= Subject key identifier: 65:66:78:3E:29:E8:0F:F5:B2:BE:AC:08:13:D5:41:DF:E7:BA:94:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4736F8629AA256E6C540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:47:36:f8:62:9a:a2:56:e6:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=695e8da2-80f7-4e19-87f7-6345ac8c2ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:c5:23:cc:b7:02:07:d5:5a:0d:d8:ae:9f: db:17:af:05:f9:7e:2b:3a:a4:8d:88:00:92:6f:ab: 0c:ec:cb:60:50:30:0d:ca:0a:6d:72:4c:a8:39:f1: 33:9a:50:4d:1d:96:21:0e:cf:c0:14:f1:36:f9:1c: ed:b6:f8:57:8b:99:82:4c:12:4c:fc:ed:78:b7:a0: cd:45:f8:20:c8:d3:fe:5c:1e:ac:0d:78:b8:b3:b2: c2:80:07:a8:37:da:3c:a9:5b:ee:d8:73:02:43:a7: 2f:a5:5d:44:58:9e:93:de:9a:51:92:bf:48:1f:49: 77:7a:2c:87:53:66:64:e1:a4:ad:5b:94:82:11:81: fb:ce:4d:1a:b7:dd:51:44:d1:23:ab:0e:ea:9a:ce: e8:9e:a8:ae:08:4f:74:45:7f:2a:e4:f0:b9:06:36: 6d:f4:d7:c9:16:e4:74:54:c8:bc:6e:22:9b:b3:71: 06:1c:48:ff:6d:6d:dc:ac:19:b3:85:e4:a2:7a:cb: 6e:93:ef:a6:04:00:a9:0b:47:ef:0a:68:6b:d4:f5: cf:58:d0:fd:7a:3a:ac:70:58:bb:b0:b5:4d:be:ed: 26:0e:70:51:ab:19:c7:48:f6:93:0f:3c:f5:f7:61: 34:7c:bf:94:cd:4d:3e:42:74:a3:a3:6e:a0:27:3b: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:78:3E:29:E8:0F:F5:B2:BE:AC:08:13:D5:41:DF:E7:BA:94:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28c3e71e-70ec-3d1d-ae6a-61305e273aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:be:54:f4:7a:f8:6a:ef:71:8b:c8:e7:df:96:8b:e1:5f:0c: 68:1a:78:ac:21:b6:89:ca:23:22:17:b1:db:06:73:5e:d1:20: 7d:ef:60:ec:51:72:5c:7d:c2:01:af:12:30:8b:6f:09:c6:32: ec:83:52:a1:fa:5f:8c:47:80:83:39:9c:d6:67:01:1c:c5:82: 1e:4e:39:80:30:75:16:d2:f1:95:2f:50:77:87:d7:90:e5:c5: ea:94:36:b0:de:e6:38:d9:fb:b1:6a:d2:dc:75:90:6e:44:a9: 57:ea:fb:a1:c1:e1:f3:88:f1:b6:cb:24:6f:ff:2b:2a:52:7f: a8:24:28:11:cf:60:48:88:99:1e:c0:e6:cd:45:98:83:35:62: b4:39:8b:f4:67:2b:a5:2f:76:65:86:c9:80:8b:d0:d6:95:c4: b0:d1:de:7a:b2:a2:53:27:86:76:cd:db:aa:a2:fa:db:ac:1d: ab:6f:78:fa:96:26:5e:ec:65:d2:63:33:11:50:78:72:06:6b: ed:08:70:58:44:d0:50:67:53:6a:80:1d:0d:a9:59:ec:93:71: c3:e0:1f:94:15:12:64:1a:41:e2:e6:ad:45:5c:d5:99:00:84: d2:e5:83:06:3e:15:dc:58:f9:73:13:49:ef:3f:46:87:b3:6c: 65:75:99:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkc2+GKaolbmxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk Njk1ZThkYTItODBmNy00ZTE5LTg3ZjctNjM0NWFjOGMyZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ3FI8y3AgfVWg3Yrp/bF68F+X4rOqSNiACS b6sM7MtgUDANygptckyoOfEzmlBNHZYhDs/AFPE2+RzttvhXi5mCTBJM/O14t6DN RfggyNP+XB6sDXi4s7LCgAeoN9o8qVvu2HMCQ6cvpV1EWJ6T3ppRkr9IH0l3eiyH U2Zk4aStW5SCEYH7zk0at91RRNEjqw7qms7onqiuCE90RX8q5PC5BjZt9NfJFuR0 VMi8biKbs3EGHEj/bW3crBmzheSiestuk++mBACpC0fvCmhr1PXPWND9ejqscFi7 sLVNvu0mDnBRqxnHSPaTDzz192E0fL+UzU0+QnSjo26gJzu0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVmeD4p6A/1sr6sCBPVQd/nupT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjhjM2U3MWUtNzBlYy0z ZDFkLWFlNmEtNjEzMDVlMjczYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS+VPR6+GrvcYvI59+Wi+FfDGgaeKwhtonKIyIXsdsGc17RIH3vYOxR clx9wgGvEjCLbwnGMuyDUqH6X4xHgIM5nNZnARzFgh5OOYAwdRbS8ZUvUHeH15Dl xeqUNrDe5jjZ+7Fq0tx1kG5EqVfq+6HB4fOI8bbLJG//KypSf6gkKBHPYEiImR7A 5s1FmIM1YrQ5i/RnK6UvdmWGyYCL0NaVxLDR3nqyolMnhnbN26qi+tusHatvePqW Jl7sZdJjMxFQeHIGa+0IcFhE0FBnU2qAHQ2pWeyTccPgH5QVEmQaQeLmrUVc1ZkA hNLlgwY+FdxY+XMTSe8/RoezbGV1mYo= -----END CERTIFICATE-----Generated at Sun Apr 28 00:51:06 2024 by rpki-client on console-ams.rpki-client.org