$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe572f-9792-3c11-892a-f18bb9a98374.roa File: 36fe572f-9792-3c11-892a-f18bb9a98374.roa (raw, json) Hash identifier: w6V6ow5i8i38Yfe2/iXlw4a9z8WRX9AginmuEkSVh4I= Subject key identifier: 8C:65:49:71:81:59:46:3F:65:FA:17:57:E9:A7:1F:62:AB:90:4D:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E3EB6756F04827AB31880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe572f-9792-3c11-892a-f18bb9a98374.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:3e:b6:75:6f:04:82:7a:b3:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=b5ae3a98-060a-49f3-9889-88d54936764a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:c8:d7:4a:73:17:44:75:b0:67:bb:19:71: 98:78:e7:31:c6:25:fe:b6:28:dd:c9:93:b0:cf:29: e5:3b:8f:99:c0:23:39:93:42:43:eb:6c:91:76:d5: 75:3e:55:43:73:1e:e2:b6:be:4d:6a:0b:91:16:d0: ee:5a:d0:af:a8:59:79:68:ab:00:96:76:fb:14:53: 98:50:52:0e:4a:12:6c:00:3c:bb:b4:b5:58:fb:66: 57:8f:33:2b:19:23:06:e7:53:1a:9e:0b:a4:3e:90: 57:e5:2d:b9:11:bb:0b:cb:f3:c8:09:55:df:93:cd: 07:90:50:3c:75:0a:9c:88:99:1d:a9:cc:ed:67:2c: fd:15:f6:66:85:38:0e:f6:66:6c:1c:ca:4b:78:21: d5:41:5d:61:82:2c:55:ee:92:32:50:66:87:3c:a0: 5d:49:1b:9b:0b:17:28:b7:74:0d:d6:77:b5:4d:db: c5:da:ea:51:de:06:3e:ac:4d:4a:70:f8:45:78:cf: 0a:b2:e8:a6:3b:db:c3:67:02:bf:63:6a:a6:3c:a3: 52:d1:ae:1b:20:c5:3a:84:e1:45:99:96:a3:ae:86: ca:39:d5:5e:37:4b:56:2f:9e:f7:3b:ae:e2:aa:30: a0:43:a6:72:71:4a:ce:f7:c5:eb:30:86:c2:90:28: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:65:49:71:81:59:46:3F:65:FA:17:57:E9:A7:1F:62:AB:90:4D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe572f-9792-3c11-892a-f18bb9a98374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:52:90:8d:fd:ad:c3:77:9a:19:af:25:02:d0:6c:bb:0d:5e: 03:fd:4a:05:28:41:bc:12:19:ad:8d:39:75:39:88:dc:ff:0a: 39:ae:ce:c7:ec:87:12:9e:e2:0b:b3:6d:f8:5a:a5:13:86:60: 83:8d:c5:9b:c0:dc:a0:c2:01:b4:2e:6f:16:a8:5b:2b:a4:d1: 39:9f:a5:9c:d8:1f:39:4c:e2:6c:b6:e6:f1:23:c1:cb:27:1c: fb:6b:d9:e3:f4:34:32:2c:a8:bf:2d:12:1e:cb:55:01:7e:c9: fa:0f:94:7c:1f:73:e6:09:1f:e7:6a:01:37:5d:61:b8:c1:a0: 85:3a:af:c2:5f:5c:c2:54:27:4e:a0:8f:58:07:85:ea:25:f5: 03:51:58:0c:30:84:9f:bb:93:d2:48:4b:b5:79:88:7a:42:9e: e4:a6:54:9d:d4:13:b5:0d:10:2f:b2:4a:df:06:2b:77:26:48: 15:d5:40:a1:93:ed:e3:7f:59:c2:d4:6e:70:ae:31:f6:34:e5: 03:e0:32:c6:4f:ac:92:51:c8:02:d4:90:0c:23:70:5b:c3:a9: 4e:9a:2d:14:73:b6:3f:ca:36:c7:67:4a:cf:2b:d5:b3:7b:07: 94:a3:9a:1c:24:d4:6f:6b:f9:7d:0e:08:c1:00:5a:6a:c7:c1: d4:8b:be:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPj62dW8EgnqzGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YjVhZTNhOTgtMDYwYS00OWYzLTk4ODktODhkNTQ5MzY3NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyDI10pzF0R1sGe7GXGYeOcxxiX+tijdyZOw zynlO4+ZwCM5k0JD62yRdtV1PlVDcx7itr5NaguRFtDuWtCvqFl5aKsAlnb7FFOY UFIOShJsADy7tLVY+2ZXjzMrGSMG51MangukPpBX5S25EbsLy/PICVXfk80HkFA8 dQqciJkdqcztZyz9FfZmhTgO9mZsHMpLeCHVQV1hgixV7pIyUGaHPKBdSRubCxco t3QN1ne1TdvF2upR3gY+rE1KcPhFeM8KsuimO9vDZwK/Y2qmPKNS0a4bIMU6hOFF mZajrobKOdVeN0tWL573O67iqjCgQ6ZycUrO98XrMIbCkCjNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxlSXGBWUY/ZfoXV+mnH2KrkE1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzZmZTU3MmYtOTc5Mi0z YzExLTg5MmEtZjE4YmI5YTk4Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtSkI39rcN3mhmvJQLQbLsNXgP9SgUoQbwSGa2NOXU5iNz/Cjmuzsfs hxKe4guzbfhapROGYIONxZvA3KDCAbQubxaoWyuk0TmfpZzYHzlM4my25vEjwcsn HPtr2eP0NDIsqL8tEh7LVQF+yfoPlHwfc+YJH+dqATddYbjBoIU6r8JfXMJUJ06g j1gHheol9QNRWAwwhJ+7k9JIS7V5iHpCnuSmVJ3UE7UNEC+ySt8GK3cmSBXVQKGT 7eN/WcLUbnCuMfY05QPgMsZPrJJRyALUkAwjcFvDqU6aLRRztj/KNsdnSs8r1bN7 B5Sjmhwk1G9r+X0OCMEAWmrHwdSLvjs= -----END CERTIFICATE-----Generated at Sun Apr 28 16:51:18 2024 by rpki-client on console-ams.rpki-client.org