$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa File: 35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa (raw, json) Hash identifier: 75QZIZk+GDqsvzrq6YSBH+uyI3PD1/9dNahm5WDIFBQ= Subject key identifier: BE:BB:F3:5F:88:A1:5E:DA:4E:88:51:77:0D:4B:35:0A:14:80:05:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4C26A644EB32DC662600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4c:26:a6:44:eb:32:dc:66:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=a820032d-51f5-4e87-92f0-e49ebd69a403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:22:92:0a:74:70:ab:7c:2e:90:7e:cd:4a: 0a:ed:f3:98:5f:14:f7:5b:0b:6a:03:8e:d3:a2:e0: 71:67:37:f1:9d:0f:38:c0:fc:36:d4:8a:69:3a:06: a9:e4:a6:1f:7d:ab:9d:3f:12:6c:9a:2f:14:cf:75: 1f:65:b2:4f:25:aa:f0:72:a5:0b:e8:76:d8:90:50: 4c:13:bd:a8:89:92:3d:1b:9a:db:fb:56:5f:89:48: 7c:ed:39:26:37:81:d1:25:f8:03:28:4a:a0:94:07: 00:37:eb:3d:22:91:68:f2:e6:bd:b2:af:88:fa:4e: 7c:bd:82:48:a5:da:ae:0c:d1:c3:4d:01:90:0a:0b: ac:15:82:b9:c2:60:be:22:81:02:0f:cc:b0:ed:99: bb:e8:52:d6:95:c9:3e:d6:41:ad:90:7d:1b:cc:07: a1:2b:87:39:05:bd:19:29:50:3b:86:11:c8:db:b9: 3e:35:c3:8b:c9:c2:3e:41:54:fd:38:4d:81:d3:70: 96:43:f1:ca:c7:20:27:f7:e7:3d:24:83:36:da:90: f3:41:c3:96:20:2e:e7:85:bf:85:d1:26:e1:29:21: b8:87:61:19:e4:d8:32:8a:2b:cc:6f:0b:f1:50:22: 02:5b:4b:fb:bc:18:16:71:36:d2:22:b6:a4:c3:b4: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BB:F3:5F:88:A1:5E:DA:4E:88:51:77:0D:4B:35:0A:14:80:05:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cf:83:a5:ba:d5:c1:15:f3:2d:29:61:9f:31:75:14:ac:ca: c0:d9:7d:ca:9b:71:36:29:9e:fe:43:0d:88:e0:cc:8c:f9:10: ec:25:e9:7d:f7:b3:62:92:fd:8a:4d:02:0c:b3:4a:bd:bb:ae: b2:07:35:d7:88:77:17:e5:42:c0:bc:b6:24:6e:0f:99:75:dc: f2:77:4f:c4:cb:05:59:35:11:1c:c6:59:c0:f0:0b:88:10:3a: 73:47:fe:3a:84:f7:65:2f:a8:62:05:a1:0a:db:14:da:f7:70: a5:2f:a2:f9:b0:6b:ce:d3:b9:82:b9:4e:b6:1b:e2:1e:e9:fb: 90:1a:19:74:2b:85:b1:dc:a8:6e:40:c4:5f:e1:f6:1c:75:4f: eb:aa:ec:d4:a9:7f:6d:b7:47:c2:fb:19:2c:50:0a:2c:d3:36: 09:ed:4a:7f:2b:cd:de:59:46:fe:5d:75:f0:f8:86:64:c4:3c: 1d:62:55:d2:66:50:bb:fd:39:db:c4:15:ce:6a:47:9f:cb:b7: 4d:69:b6:e7:e9:10:32:af:99:4a:9a:6f:e3:77:3c:88:22:47: 27:57:e6:bf:9e:8e:44:aa:92:e7:c0:0c:d4:7c:29:f7:fb:2c: 76:a8:67:77:e0:50:91:55:a5:58:46:21:64:8e:be:cb:c2:d2: ed:44:4c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkwmpkTrMtxmJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YTgyMDAzMmQtNTFmNS00ZTg3LTkyZjAtZTQ5ZWJkNjlhNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hYikgp0cKt8LpB+zUoK7fOYXxT3WwtqA47T ouBxZzfxnQ84wPw21IppOgap5KYffaudPxJsmi8Uz3UfZbJPJarwcqUL6HbYkFBM E72oiZI9G5rb+1ZfiUh87TkmN4HRJfgDKEqglAcAN+s9IpFo8ua9sq+I+k58vYJI pdquDNHDTQGQCgusFYK5wmC+IoECD8yw7Zm76FLWlck+1kGtkH0bzAehK4c5Bb0Z KVA7hhHI27k+NcOLycI+QVT9OE2B03CWQ/HKxyAn9+c9JIM22pDzQcOWIC7nhb+F 0SbhKSG4h2EZ5NgyiivMbwvxUCICW0v7vBgWcTbSIrakw7REeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6781+IoV7aTohRdw1LNQoUgAWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzVhNThhNmQtM2ZmNi0z NWVjLTkxZWYtZGI5ZTAyMjI3MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArPg6W61cEV8y0pYZ8xdRSsysDZfcqbcTYpnv5DDYjgzIz5EOwl6X33 s2KS/YpNAgyzSr27rrIHNdeIdxflQsC8tiRuD5l13PJ3T8TLBVk1ERzGWcDwC4gQ OnNH/jqE92UvqGIFoQrbFNr3cKUvovmwa87TuYK5TrYb4h7p+5AaGXQrhbHcqG5A xF/h9hx1T+uq7NSpf223R8L7GSxQCizTNgntSn8rzd5ZRv5ddfD4hmTEPB1iVdJm ULv9OdvEFc5qR5/Lt01ptufpEDKvmUqab+N3PIgiRydX5r+ejkSqkufADNR8Kff7 LHaoZ3fgUJFVpVhGIWSOvsvC0u1ETK8= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org