$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa File: 2a909a62-1951-3724-8960-32a5d9f774e0.roa (raw, json) Hash identifier: YfOfifCHCJfd/fgNO6AuF2QF4w/N3Hdl1U/K3QzTh9k= Subject key identifier: 64:C7:A5:8B:D8:0C:BD:30:ED:EA:E9:72:E8:61:01:D9:98:E7:FD:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A76F1389F88E9BF1521C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:76:f1:38:9f:88:e9:bf:15:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=e4518593-e0ee-4060-b1ce-aac97c43a211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:9e:a7:aa:7d:64:d5:7b:69:cf:a1:b6:33: a3:d8:f1:ed:c9:cb:77:e2:35:84:c8:1a:e3:83:dc: 78:ec:f2:bb:e0:01:18:52:1f:43:81:b2:29:ae:22: 0a:2c:d6:db:88:7e:41:86:28:b2:44:77:72:04:f9: 8d:9d:0c:4f:2f:03:04:5c:31:16:4e:ad:21:2a:e7: eb:07:c1:b3:60:71:15:da:b5:36:af:0a:51:3f:2a: 5e:92:83:16:25:e7:4b:36:64:97:05:b5:40:44:da: c4:cc:ba:fc:32:17:a9:27:37:12:19:27:fa:7d:43: 63:3c:e7:95:16:75:1c:34:2e:3d:c6:13:19:1a:dd: b3:77:a4:e8:13:28:5c:8b:28:0e:63:b9:5d:b5:7a: 74:06:5c:bd:db:72:af:31:45:b2:16:c6:b2:b5:75: 95:48:7f:c7:86:e0:4a:d9:ac:13:90:88:4f:7d:65: 21:cd:a3:52:c5:a2:35:7a:b8:42:f1:4e:7d:63:24: 0f:ba:3f:db:f1:c3:81:66:a7:d9:3b:47:fc:6a:ac: e7:04:6a:49:02:42:5c:65:f1:93:67:25:a0:c9:25: 89:76:c0:01:4e:12:1b:2e:25:de:5a:49:e6:c4:c0: d3:f4:fb:e7:5a:c3:c4:4d:2d:69:9b:e5:c6:35:5a: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C7:A5:8B:D8:0C:BD:30:ED:EA:E9:72:E8:61:01:D9:98:E7:FD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:65:8e:63:7a:2f:98:06:6b:f0:af:d1:27:15:97:72:50:a8: 22:6e:1e:39:97:b4:b6:fc:a0:73:1d:70:66:4a:dd:6e:fe:92: 61:ea:6d:a0:bc:78:c0:ac:38:b4:d6:46:2f:72:37:5e:bd:3d: 60:3f:a2:d0:f5:e1:ce:f5:2a:c5:65:e5:34:47:47:27:29:00: fe:05:c5:67:1f:16:d8:75:96:5c:b6:b8:db:81:e7:67:b3:c4: b3:9b:d8:33:d8:a0:9b:93:2a:fe:26:7d:82:3c:ce:81:92:1b: b9:7c:a9:db:ba:ad:6e:e1:d3:71:bf:53:83:ad:e7:f2:9f:97: fd:a5:00:2a:54:d5:1f:f5:b9:47:d9:d0:e9:9f:e9:60:c4:e1: 35:1b:ac:28:c4:4a:eb:c7:56:82:24:35:a0:04:d5:81:e6:c5: 33:b5:82:ef:81:ee:7d:db:81:7e:58:ca:4a:0b:5e:bc:44:39: b1:c9:ec:16:b3:5d:5a:3a:63:5b:b9:6a:39:87:43:95:d1:6e: e7:ac:88:ed:a8:74:ef:c5:bd:f7:b9:c9:45:e7:32:b9:ed:20: 55:f1:3d:26:41:13:99:45:3e:6d:88:22:50:ce:58:27:22:cf: e4:54:cf:9e:42:23:29:33:8f:5f:8c:98:d4:2c:8e:6c:21:63: db:d4:eb:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnbxOJ+I6b8VIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTQ1MTg1OTMtZTBlZS00MDYwLWIxY2UtYWFjOTdjNDNhMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Wep6p9ZNV7ac+htjOj2PHtyct34jWEyBrj g9x47PK74AEYUh9DgbIpriIKLNbbiH5BhiiyRHdyBPmNnQxPLwMEXDEWTq0hKufr B8GzYHEV2rU2rwpRPypekoMWJedLNmSXBbVARNrEzLr8MhepJzcSGSf6fUNjPOeV FnUcNC49xhMZGt2zd6ToEyhciygOY7ldtXp0Bly923KvMUWyFsaytXWVSH/HhuBK 2awTkIhPfWUhzaNSxaI1erhC8U59YyQPuj/b8cOBZqfZO0f8aqznBGpJAkJcZfGT ZyWgySWJdsABThIbLiXeWknmxMDT9PvnWsPETS1pm+XGNVpHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTHpYvYDL0w7erpcuhhAdmY5/2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE5MDlhNjItMTk1MS0z NzI0LTg5NjAtMzJhNWQ5Zjc3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtljmN6L5gGa/Cv0ScVl3JQqCJuHjmXtLb8oHMdcGZK3W7+kmHqbaC8 eMCsOLTWRi9yN169PWA/otD14c71KsVl5TRHRycpAP4FxWcfFth1lly2uNuB52ez xLOb2DPYoJuTKv4mfYI8zoGSG7l8qdu6rW7h03G/U4Ot5/Kfl/2lACpU1R/1uUfZ 0Omf6WDE4TUbrCjESuvHVoIkNaAE1YHmxTO1gu+B7n3bgX5YykoLXrxEObHJ7Baz XVo6Y1u5ajmHQ5XRbuesiO2odO/Fvfe5yUXnMrntIFXxPSZBE5lFPm2IIlDOWCci z+RUz55CIykzj1+MmNQsjmwhY9vU6+U= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:22 2024 by rpki-client on console-ams.rpki-client.org