$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa File: 2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa (raw, json) Hash identifier: GPvEzFJbaLmzyub1s5+gE+ctQkYUGrnSpyDA1S6Ulyw= Subject key identifier: 37:D9:A3:7E:AC:E3:50:F9:52:57:D3:35:2F:98:A4:27:EF:C9:8F:B9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E26483F48EE86663E8800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 99.196.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:26:48:3f:48:ee:86:66:3e:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=2f47f4ff-2a3a-4205-ad51-63453bf99e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:5b:a5:71:29:37:6f:5e:08:d6:72:fd:8a: 97:69:ab:f2:9d:6c:41:e7:1b:0d:fc:bb:61:2c:f0: 46:97:aa:e2:0a:65:ec:b7:d9:5e:4c:09:da:69:71: d4:af:3b:51:62:59:23:3d:bf:e4:8c:bd:44:7e:54: f8:df:0b:44:79:5c:56:a3:f6:f8:eb:f2:a4:95:e7: bc:47:aa:61:22:86:41:03:c4:51:6a:cc:c2:81:47: 66:03:b7:59:46:ad:62:e4:0e:ce:03:ce:6f:72:52: 8f:15:d5:22:63:fa:10:76:b9:f2:d6:be:30:24:af: 1b:1b:82:26:4d:bb:2f:9c:cb:aa:b1:73:8d:37:e9: d5:7f:4d:8c:de:87:29:4b:76:dc:81:af:53:d4:a7: dd:8e:b5:f4:49:d0:c9:c0:08:be:59:7f:a9:e9:08: 87:cc:58:3e:53:3b:d6:9e:e0:9a:f9:d1:16:a4:6d: a0:b4:cc:8e:30:53:07:a7:7d:ce:2b:25:1a:97:af: ff:cb:eb:52:e3:28:13:97:8c:78:77:54:63:ec:45: 8b:14:4a:94:cd:27:1d:11:d5:97:08:77:db:75:77: 98:fa:b9:74:60:ae:65:73:33:db:2f:a3:94:01:c0: 58:6c:68:4c:96:99:eb:a2:61:22:25:f8:e0:c3:a8: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D9:A3:7E:AC:E3:50:F9:52:57:D3:35:2F:98:A4:27:EF:C9:8F:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a2e920b-8af2-3da5-a0ac-9b8ffa86c438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.196.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9e:1e:6d:c3:1e:52:6b:00:aa:50:a1:6f:9d:00:fe:02:87: 85:d4:b0:6c:5b:c8:04:39:33:a3:f5:41:94:e3:70:90:96:ba: 5d:54:78:79:c8:82:45:61:fc:32:00:15:73:7f:77:a4:41:af: 5f:be:a2:a1:a9:f0:1e:34:c4:d6:3e:bb:1e:8e:00:3d:4f:de: 5c:a2:a0:86:ef:5f:c0:0c:5a:9c:b7:d7:4f:70:b3:6c:8c:fd: 8c:71:23:1c:71:a4:b8:a2:35:03:da:12:44:fb:35:ef:75:49: a5:e8:ee:9c:a5:94:5f:24:b7:19:c4:69:f9:f1:5d:ca:a4:66: f3:55:3f:f2:38:fa:88:e8:db:9d:7b:f6:e0:90:7b:ee:d9:5e: 3d:b5:b5:0d:cd:8b:84:f6:3e:66:1d:1a:dc:5e:7a:56:90:17: 60:b8:5c:59:dc:62:74:f4:17:f4:63:cd:26:82:43:2d:31:a2: 62:bf:cd:af:5a:e5:a3:5e:19:c2:d5:09:a4:ae:6f:cf:cc:ad: fc:be:ee:f3:8e:22:7b:85:5b:f3:11:46:bf:21:dd:5b:6f:4b: 6a:cc:fa:5b:f8:b8:3a:56:84:ea:a5:56:31:dc:67:22:5e:43: a2:5b:c5:cb:cd:7d:ce:4d:a7:55:8c:63:bd:be:4a:10:00:de: 78:ce:98:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPiZIP0juhmY+iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MmY0N2Y0ZmYtMmEzYS00MjA1LWFkNTEtNjM0NTNiZjk5ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm5bpXEpN29eCNZy/YqXaavynWxB5xsN/Lth LPBGl6riCmXst9leTAnaaXHUrztRYlkjPb/kjL1EflT43wtEeVxWo/b46/Kklee8 R6phIoZBA8RRaszCgUdmA7dZRq1i5A7OA85vclKPFdUiY/oQdrny1r4wJK8bG4Im TbsvnMuqsXONN+nVf02M3ocpS3bcga9T1KfdjrX0SdDJwAi+WX+p6QiHzFg+UzvW nuCa+dEWpG2gtMyOMFMHp33OKyUal6//y+tS4ygTl4x4d1Rj7EWLFEqUzScdEdWX CHfbdXeY+rl0YK5lczPbL6OUAcBYbGhMlpnromEiJfjgw6gIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfZo36s41D5UlfTNS+YpCfvyY+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmEyZTkyMGItOGFmMi0z ZGE1LWEwYWMtOWI4ZmZhODZjNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8SJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyeHm3DHlJrAKpQoW+dAP4Ch4XUsGxbyAQ5M6P1QZTjcJCWul1UeHnI gkVh/DIAFXN/d6RBr1++oqGp8B40xNY+ux6OAD1P3lyioIbvX8AMWpy3109ws2yM /YxxIxxxpLiiNQPaEkT7Ne91SaXo7pyllF8ktxnEafnxXcqkZvNVP/I4+ojo2517 9uCQe+7ZXj21tQ3Ni4T2PmYdGtxeelaQF2C4XFncYnT0F/RjzSaCQy0xomK/za9a 5aNeGcLVCaSub8/Mrfy+7vOOInuFW/MRRr8h3VtvS2rM+lv4uDpWhOqlVjHcZyJe Q6JbxcvNfc5Np1WMY72+ShAA3njOmPM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:22:36 2024 by rpki-client on console-ams.rpki-client.org