$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa File: 3a89969d-cb44-3660-b08d-0ac39c358c16.roa (raw, json) Hash identifier: LmU4QGbn016WhVLxLeBPfzXA0Bz3UqHBro7vjiYB0os= Subject key identifier: 49:22:3F:2F:87:D7:44:A8:0B:81:DF:C8:0C:3D:A9:09:68:46:48:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E49362F0826E9BBAC9280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:49:36:2f:08:26:e9:bb:ac:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=92588ed2-0194-46b1-9719-523fcd5058f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:8d:6d:fb:28:b4:70:2d:b5:6d:a6:ae:ba: 63:75:99:f9:fe:65:4a:c0:66:22:17:19:e2:2c:67: 31:d4:91:cf:c8:77:80:71:9e:da:f9:36:ec:33:50: d8:82:90:41:3a:7d:6b:fb:5b:dc:a5:ab:7c:7f:88: a2:17:d4:15:7d:50:a3:3c:d2:4c:1d:d6:0e:9e:23: 74:b0:ce:7b:a4:4a:38:f5:53:11:83:07:53:67:b7: 2f:75:62:dd:c3:fa:d5:bf:7c:bc:58:57:1a:e2:1e: d7:c2:b4:13:56:7b:74:d7:f9:00:84:ae:66:eb:05: 06:ca:4c:83:01:b9:cc:00:5d:0b:25:72:45:a7:47: 5b:6c:63:6a:39:81:de:60:1d:4c:ac:00:b4:4e:df: b2:9f:39:d9:e7:17:ab:01:ec:cc:b9:45:3e:3d:91: ea:4b:c4:57:b5:50:8f:4e:6c:ea:75:45:f9:95:02: c5:57:e6:89:1e:30:b8:35:a2:08:24:a5:7f:8d:a2: 84:7c:70:6d:e0:ca:ca:f8:d4:49:80:0f:1a:63:87: ce:7a:19:70:c3:be:fc:e5:e6:c2:6a:23:81:58:cd: 7d:b1:35:c8:a5:13:5a:76:d5:00:ab:4d:e1:da:8d: 41:de:62:93:3b:b4:b2:8e:1d:72:e6:8d:df:eb:9f: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:3F:2F:87:D7:44:A8:0B:81:DF:C8:0C:3D:A9:09:68:46:48:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6b:b8:d3:17:8d:aa:8d:12:15:c1:2d:e4:d6:7c:9f:61:86: 35:fd:4a:2d:fa:77:e8:3f:05:fc:e2:7a:ce:22:71:22:d3:21: b2:09:0d:39:f0:2c:2b:ec:a2:7b:f5:64:71:07:3f:65:99:7a: f9:78:bb:2f:51:bf:4a:5f:6e:a0:13:d2:62:c9:d0:d1:65:80: 67:cc:fd:ee:eb:6c:ae:5f:7c:73:c8:70:b1:b7:d9:e2:24:e7: be:99:7d:b7:fc:73:9e:0d:67:e5:93:30:02:0f:f2:33:d2:04: 92:4a:92:b6:e0:08:77:00:03:97:fa:af:0e:fd:0f:e9:89:05: 75:23:15:01:93:7e:16:2e:26:ab:a8:c0:98:55:1c:f6:ba:05: 99:cd:c2:50:5e:c8:61:16:bd:b4:09:6e:98:f6:e7:25:59:19: 5e:aa:e9:77:b6:d2:c6:7c:c7:8a:bc:6d:72:b4:8a:17:f3:e5: e1:ad:f8:9c:8f:53:33:9c:dc:d0:e6:54:48:24:cf:1a:a1:b5: 3c:e4:f9:79:1c:31:26:e8:6a:8b:41:80:2f:df:1e:63:1b:a9: 7c:4d:9b:a1:88:6a:78:8a:67:73:be:5b:db:71:95:06:04:35: f9:e8:4e:b4:ac:43:eb:a0:62:10:8b:e9:74:e7:ac:ba:ca:d0: 84:a7:df:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkk2Lwgm6buskoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OTI1ODhlZDItMDE5NC00NmIxLTk3MTktNTIzZmNkNTA1OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBuNbfsotHAttW2mrrpjdZn5/mVKwGYiFxni LGcx1JHPyHeAcZ7a+TbsM1DYgpBBOn1r+1vcpat8f4iiF9QVfVCjPNJMHdYOniN0 sM57pEo49VMRgwdTZ7cvdWLdw/rVv3y8WFca4h7XwrQTVnt01/kAhK5m6wUGykyD AbnMAF0LJXJFp0dbbGNqOYHeYB1MrAC0Tt+ynznZ5xerAezMuUU+PZHqS8RXtVCP TmzqdUX5lQLFV+aJHjC4NaIIJKV/jaKEfHBt4MrK+NRJgA8aY4fOehlww7785ebC aiOBWM19sTXIpRNadtUAq03h2o1B3mKTO7Syjh1y5o3f65+lDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkiPy+H10SoC4HfyAw9qQloRkhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2E4OTk2OWQtY2I0NC0z NjYwLWIwOGQtMGFjMzljMzU4YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRruNMXjaqNEhXBLeTWfJ9hhjX9Si36d+g/Bfzies4icSLTIbIJDTnw LCvsonv1ZHEHP2WZevl4uy9Rv0pfbqAT0mLJ0NFlgGfM/e7rbK5ffHPIcLG32eIk 576Zfbf8c54NZ+WTMAIP8jPSBJJKkrbgCHcAA5f6rw79D+mJBXUjFQGTfhYuJquo wJhVHPa6BZnNwlBeyGEWvbQJbpj25yVZGV6q6Xe20sZ8x4q8bXK0ihfz5eGt+JyP UzOc3NDmVEgkzxqhtTzk+XkcMSboaotBgC/fHmMbqXxNm6GIaniKZ3O+W9txlQYE NfnoTrSsQ+ugYhCL6XTnrLrK0ISn35c= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org