$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa File: 321d34a2-ba6d-30ec-8987-e388030f57a3.roa (raw, json) Hash identifier: /gIfnXu+R5gZBLKsn3eZLG4KcZ+DRARELsI05ZWeH64= Subject key identifier: CA:F5:BA:CD:F6:E7:3F:46:6F:A5:A9:27:3E:51:49:92:D1:A2:C8:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DCBC98E27C8BA4D4D3500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:cb:c9:8e:27:c8:ba:4d:4d:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=ad250f3f-1e11-4bdb-9dfe-680cdc323538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2b:75:54:5d:ad:06:7b:47:8c:5b:b9:3f:08: 88:54:b2:fb:4a:9e:cd:18:eb:d9:42:a8:b2:7b:72: ef:a8:5a:fe:87:b5:92:ae:20:c7:91:e7:10:5c:35: 5d:db:bf:9d:50:f9:1f:64:97:5e:68:78:5f:46:94: 1b:61:73:ef:92:f9:a2:b4:ec:cf:a1:0f:af:9b:71: 21:de:ab:c6:2c:cf:c0:b9:be:d8:b2:e4:54:85:2f: c2:00:3f:1e:4e:54:cb:2f:4c:ae:bf:9c:34:a1:7d: 68:ef:86:36:06:5c:50:42:23:a4:e4:1b:14:a7:2a: 85:eb:14:be:51:48:20:a8:24:d5:fa:d4:f5:cc:88: 64:bc:f6:69:bf:ed:6e:b5:0e:f2:e6:30:e4:c5:df: db:98:82:dc:f2:55:e9:3c:29:fb:60:3e:c7:af:bb: b9:bf:c0:2c:8d:39:3f:60:c6:8a:64:35:43:ea:da: 03:80:bd:70:03:e6:08:bb:4c:74:4e:35:e4:32:23: 71:ef:96:cb:a5:ed:f0:30:fe:5f:2e:0c:9a:95:43: bb:34:14:39:31:17:73:d9:64:f0:30:04:18:88:9e: 86:ea:5d:43:dc:8f:89:16:49:b4:66:fa:48:69:bd: 29:2d:fc:69:30:40:f9:81:ac:f7:76:f0:05:22:db: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F5:BA:CD:F6:E7:3F:46:6F:A5:A9:27:3E:51:49:92:D1:A2:C8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e8:43:fe:69:fb:26:d3:5d:5d:c0:a6:02:ed:87:f2:c8:3c: 8b:69:72:07:50:c4:55:35:6b:65:7f:58:e6:e2:34:d0:a3:9b: 7f:5c:fd:03:5f:b1:6a:d4:72:e0:05:6f:91:73:04:83:a4:ae: 8e:e7:18:d9:2b:0c:7c:ee:bb:75:de:a0:75:35:b6:a5:5a:5b: 27:5d:2d:59:c1:be:ee:9e:4d:0b:7a:ba:8c:bc:a7:ce:a7:8f: e2:5b:08:3a:a7:91:f8:f4:2f:3d:65:03:36:b9:41:5f:77:b4: 1e:d0:08:02:1e:27:96:73:6d:1f:77:3a:c9:79:3d:cd:ce:71: 49:4f:d1:8f:3b:9b:0f:da:3c:a5:dd:9e:78:1b:7a:29:b6:bd: 4a:44:62:ce:80:09:2e:54:46:bb:ae:83:2c:3d:b4:c2:05:17: b3:43:b0:84:75:6d:b8:0f:5c:e5:89:db:dd:a1:88:45:0b:98: fa:3c:34:0d:34:c3:09:c2:91:e6:7a:3b:e9:ae:ec:5e:52:7d: 2f:63:ba:ee:cc:5a:67:6e:f6:b1:9e:7b:6d:ab:44:76:bd:f7: 8a:b5:e3:e7:6c:00:25:f8:62:3c:25:81:d5:27:61:ec:72:fb: f1:01:bc:ff:3b:7e:87:6c:f8:8a:53:e6:2e:24:44:84:e5:6f: e8:62:45:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcvJjifIuk1NNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YWQyNTBmM2YtMWUxMS00YmRiLTlkZmUtNjgwY2RjMzIzNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6it1VF2tBntHjFu5PwiIVLL7Sp7NGOvZQqiy e3LvqFr+h7WSriDHkecQXDVd27+dUPkfZJdeaHhfRpQbYXPvkvmitOzPoQ+vm3Eh 3qvGLM/Aub7YsuRUhS/CAD8eTlTLL0yuv5w0oX1o74Y2BlxQQiOk5BsUpyqF6xS+ UUggqCTV+tT1zIhkvPZpv+1utQ7y5jDkxd/bmILc8lXpPCn7YD7Hr7u5v8AsjTk/ YMaKZDVD6toDgL1wA+YIu0x0TjXkMiNx75bLpe3wMP5fLgyalUO7NBQ5MRdz2WTw MAQYiJ6G6l1D3I+JFkm0ZvpIab0pLfxpMED5gaz3dvAFIttIpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr1us325z9Gb6WpJz5RSZLRoshSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIxZDM0YTItYmE2ZC0z MGVjLTg5ODctZTM4ODAzMGY1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDoQ/5p+ybTXV3ApgLth/LIPItpcgdQxFU1a2V/WObiNNCjm39c/QNf sWrUcuAFb5FzBIOkro7nGNkrDHzuu3XeoHU1tqVaWyddLVnBvu6eTQt6uoy8p86n j+JbCDqnkfj0Lz1lAza5QV93tB7QCAIeJ5ZzbR93Osl5Pc3OcUlP0Y87mw/aPKXd nngbeim2vUpEYs6ACS5URruugyw9tMIFF7NDsIR1bbgPXOWJ292hiEULmPo8NA00 wwnCkeZ6O+mu7F5SfS9juu7MWmdu9rGee22rRHa994q14+dsACX4YjwlgdUnYexy +/EBvP87fods+IpT5i4kRITlb+hiRSU= -----END CERTIFICATE-----Generated at Sun Apr 28 18:13:14 2024 by rpki-client on console-ams.rpki-client.org