$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa File: 321d34a2-ba6d-30ec-8987-e388030f57a3.roa (raw, json) Hash identifier: 3gRgOUYEg13XTIG9jkRvtM3kZsJmHazBB0QijfcwMV4= Subject key identifier: E5:89:67:36:95:85:68:72:A8:3A:C3:E0:F8:FD:F7:FB:9F:DA:F9:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7BF7174D567996544E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7b:f7:17:4d:56:79:96:54:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=404b1210-7944-4749-9d39-84da9b1b1ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:84:72:ca:69:4e:c8:3c:14:7a:5e:16:fb: 52:b3:4d:62:ce:d9:c6:bb:55:40:2b:1c:f4:fc:9d: 60:67:57:87:97:37:b6:d2:de:7a:d6:79:d8:bd:5e: 6d:6c:b4:ac:2d:98:17:26:31:f0:ac:ca:0c:be:fc: 67:e5:0d:1d:66:7f:94:0d:34:1b:3b:f0:fd:bb:00: b6:fe:c5:f9:66:a4:09:06:fd:c8:6a:2b:75:4c:e4: bd:2b:a2:a6:bd:f2:86:fa:44:ca:14:4a:11:7a:ff: e1:d7:27:3b:ae:29:c3:cb:0c:a8:ac:dc:2c:b4:04: b1:0e:54:cb:5c:43:23:b5:32:ce:48:b1:5d:2a:65: f1:d9:65:be:0f:80:4a:e5:1a:57:d2:2f:57:74:3f: 9c:92:07:4b:bc:d7:41:4b:fb:29:66:22:f3:aa:ed: 65:80:c8:43:42:61:b8:03:b0:11:2b:80:95:2f:34: 8b:9a:25:84:84:89:51:81:64:eb:35:93:0c:33:b2: 1c:51:dd:58:18:6e:e4:a5:3c:9d:69:44:1f:f2:28: ca:5c:91:4e:f0:5f:f5:7e:f3:3e:0c:ae:bd:6a:b9: b8:5a:e7:e5:c3:fd:40:f9:75:9b:dd:46:4a:0f:5d: 69:a0:3d:db:f7:b1:1f:67:e4:b2:5e:73:f6:76:2d: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:89:67:36:95:85:68:72:A8:3A:C3:E0:F8:FD:F7:FB:9F:DA:F9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1e:c1:db:1a:86:58:52:f9:8a:1e:29:58:05:30:30:68:ca: 7c:b2:57:32:ac:da:31:1b:f7:e0:0b:17:90:e7:54:fa:5d:74: d7:15:77:3f:ec:4f:74:3b:81:71:47:18:d5:f3:5a:7e:5c:29: b4:0b:27:6e:e6:82:28:a3:29:cc:7d:21:c0:bc:b2:f9:fe:15: ae:18:14:76:ed:b4:8a:95:06:a8:0c:6a:77:08:4f:6a:9e:7d: 9d:ed:d0:5e:d4:94:ef:79:25:61:45:ed:c4:5a:07:26:cc:f6: c4:2c:82:82:c0:d3:4a:94:77:36:b2:fc:6b:75:72:e9:62:ce: db:66:4d:e8:88:74:45:06:09:f3:fd:53:4b:03:75:3b:61:d3: a1:df:44:ae:ae:99:8d:50:95:bf:40:89:21:36:c5:6c:08:7f: 8f:96:36:7f:03:b7:ea:46:00:ee:e8:fc:0e:9a:3a:00:4d:3a: 51:ce:a3:f4:78:04:fd:48:1a:cb:2f:66:4e:5c:8b:9f:f2:d3: 45:88:f5:ae:82:0c:33:3a:0b:68:6f:46:b5:07:5b:dc:00:eb: a0:09:86:88:8d:4d:7c:43:24:6a:89:4c:91:ec:dc:2f:ba:59: 34:97:c4:9c:d8:e9:d0:48:fb:34:04:5b:49:d5:28:3e:0b:bc: 52:8f:25:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnv3F01WeZZUToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NDA0YjEyMTAtNzk0NC00NzQ5LTlkMzktODRkYTliMWIxZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS2EcsppTsg8FHpeFvtSs01iztnGu1VAKxz0 /J1gZ1eHlze20t561nnYvV5tbLSsLZgXJjHwrMoMvvxn5Q0dZn+UDTQbO/D9uwC2 /sX5ZqQJBv3Iait1TOS9K6KmvfKG+kTKFEoRev/h1yc7rinDywyorNwstASxDlTL XEMjtTLOSLFdKmXx2WW+D4BK5RpX0i9XdD+ckgdLvNdBS/spZiLzqu1lgMhDQmG4 A7ARK4CVLzSLmiWEhIlRgWTrNZMMM7IcUd1YGG7kpTydaUQf8ijKXJFO8F/1fvM+ DK69arm4Wuflw/1A+XWb3UZKD11poD3b97EfZ+SyXnP2di1B1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWJZzaVhWhyqDrD4Pj99/uf2vldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIxZDM0YTItYmE2ZC0z MGVjLTg5ODctZTM4ODAzMGY1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgewdsahlhS+YoeKVgFMDBoynyyVzKs2jEb9+ALF5DnVPpddNcVdz/s T3Q7gXFHGNXzWn5cKbQLJ27mgiijKcx9IcC8svn+Fa4YFHbttIqVBqgMancIT2qe fZ3t0F7UlO95JWFF7cRaBybM9sQsgoLA00qUdzay/Gt1culizttmTeiIdEUGCfP9 U0sDdTth06HfRK6umY1Qlb9AiSE2xWwIf4+WNn8Dt+pGAO7o/A6aOgBNOlHOo/R4 BP1IGssvZk5ci5/y00WI9a6CDDM6C2hvRrUHW9wA66AJhoiNTXxDJGqJTJHs3C+6 WTSXxJzY6dBI+zQEW0nVKD4LvFKPJbQ= -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:57 2024 by rpki-client on console-ams.rpki-client.org