$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa File: 33d98de7-82e5-3294-87bd-da0c96c9fa35.roa (raw, json) Hash identifier: BBziU9iqVfdzLNTZyPWC5LKNLj5oZzOOVl0j7TqmaZ4= Subject key identifier: 2E:32:44:69:63:75:DA:64:91:D7:CC:8A:CE:83:80:03:FA:6F:37:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC9E3D8845BE716062680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c9:e3:d8:84:5b:e7:16:06:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=98363ff0-601b-4f28-8e46-70b6df5e4923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:82:c7:e2:69:c5:2d:a1:d6:0c:40:68:bc: 81:34:11:b6:f7:41:5d:36:5f:c8:6c:d7:44:5f:29: 2b:70:45:01:37:d9:34:a7:17:df:79:55:43:7b:52: b6:49:6b:c1:63:19:25:4d:40:6f:3f:2f:45:49:db: 61:0c:78:b6:d6:5b:9d:1e:6e:ed:27:60:19:45:2a: a8:57:b7:71:78:88:87:eb:e1:e9:37:00:d6:25:c7: b4:f8:8b:04:d8:e4:1c:7a:e7:03:bc:63:3a:71:a6: 7c:9e:fe:1a:83:bc:ef:ce:76:17:47:0f:a1:b6:43: a9:45:b0:b8:fa:d5:b9:62:79:ae:b4:fa:55:21:cd: 8c:dc:b8:8f:f1:95:fe:ad:f0:cc:a0:02:1b:4c:9b: 4e:11:ad:66:50:54:30:fd:04:a9:55:3a:a0:9d:81: 05:fd:ec:ff:21:a3:d1:c8:5c:c6:4f:3b:4e:fa:f9: 55:88:1c:80:18:26:48:e7:da:e6:2a:cd:c4:2a:39: e6:95:69:19:78:1b:8f:cb:77:c5:4e:f7:d9:6a:01: 90:8b:3d:f0:6d:33:a8:a6:e1:09:c2:4b:5d:5f:77: 46:26:30:57:b9:2f:04:5b:3e:26:5d:d6:7a:18:f6: b6:cc:9d:21:9b:33:f2:3e:b9:df:34:2f:57:85:79: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:44:69:63:75:DA:64:91:D7:CC:8A:CE:83:80:03:FA:6F:37:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:69:6c:86:ff:3c:d1:92:1c:12:3d:ae:cd:80:c7:25:2a:89: 2b:fb:34:50:06:f6:d2:50:95:22:10:25:4c:a1:13:26:89:be: fc:b2:09:ab:eb:3f:26:c5:a2:16:97:2a:4b:9d:10:7c:f0:fd: cc:25:c6:5a:2c:bb:08:92:ef:d5:2f:a2:f6:e1:95:e8:2c:2e: 43:bc:63:43:34:5f:d3:c4:fa:5c:98:6b:61:5b:a6:99:e1:9b: e7:a8:67:39:ec:6a:ee:3d:99:61:cd:64:2e:6a:54:2b:46:f3: ed:d4:4e:81:74:2e:0a:64:74:b9:c0:e2:28:d4:53:66:84:36: 68:e4:e0:b6:01:d7:a8:5c:1a:59:36:18:3c:24:20:65:2f:56: 43:a8:80:7f:51:53:89:a8:19:0c:42:e4:b0:1f:58:4d:0a:03: 37:b5:7a:32:a1:85:f5:34:a5:5c:79:b1:41:85:e9:09:f8:44: 89:5a:4a:83:4c:79:6c:47:2a:21:b3:e9:fd:67:07:68:1b:fb: 02:a2:fa:7c:b4:e9:9f:66:66:8a:9d:d8:94:ef:c0:90:33:c8: 70:f4:0b:16:d2:f1:86:fe:6c:3f:da:95:65:b8:f0:f3:0d:e8: 84:ec:45:7e:0f:42:55:a6:22:a2:2c:a1:26:19:3b:d9:2f:2e: 80:fe:df:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcnj2IRb5xYGJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OTgzNjNmZjAtNjAxYi00ZjI4LThlNDYtNzBiNmRmNWU0OTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfeCx+JpxS2h1gxAaLyBNBG290FdNl/IbNdE XykrcEUBN9k0pxffeVVDe1K2SWvBYxklTUBvPy9FSdthDHi21ludHm7tJ2AZRSqo V7dxeIiH6+HpNwDWJce0+IsE2OQceucDvGM6caZ8nv4ag7zvznYXRw+htkOpRbC4 +tW5YnmutPpVIc2M3LiP8ZX+rfDMoAIbTJtOEa1mUFQw/QSpVTqgnYEF/ez/IaPR yFzGTztO+vlViByAGCZI59rmKs3EKjnmlWkZeBuPy3fFTvfZagGQiz3wbTOopuEJ wktdX3dGJjBXuS8EWz4mXdZ6GPa2zJ0hmzPyPrnfNC9XhXlsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4yRGljddpkkdfMis6DgAP6bzeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkOThkZTctODJlNS0z Mjk0LTg3YmQtZGEwYzk2YzlmYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdpbIb/PNGSHBI9rs2AxyUqiSv7NFAG9tJQlSIQJUyhEyaJvvyyCavr PybFohaXKkudEHzw/cwlxlosuwiS79UvovbhlegsLkO8Y0M0X9PE+lyYa2Fbppnh m+eoZznsau49mWHNZC5qVCtG8+3UToF0LgpkdLnA4ijUU2aENmjk4LYB16hcGlk2 GDwkIGUvVkOogH9RU4moGQxC5LAfWE0KAze1ejKhhfU0pVx5sUGF6Qn4RIlaSoNM eWxHKiGz6f1nB2gb+wKi+ny06Z9mZoqd2JTvwJAzyHD0CxbS8Yb+bD/alWW48PMN 6ITsRX4PQlWmIqIsoSYZO9kvLoD+3yE= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org