$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa File: 3ae3fcc4-d441-3516-8729-64fbcb355694.roa (raw, json) Hash identifier: DnCl4OFWTT0mGiE1eu7g9BqJi5d/IXuHxcYm1V1e3mo= Subject key identifier: E4:26:8D:80:1A:0B:29:C4:07:A6:21:47:79:EB:FC:87:33:E5:AE:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B11EBF41696371D7BAC70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:11:eb:f4:16:96:37:1d:7b:ac:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=bfa436c9-baa9-4c9b-b033-3b9876fd4f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:df:ec:dc:54:40:39:84:97:0d:0c:24:ba:e8: a1:97:26:4e:9f:60:6e:d3:a9:e3:21:ef:d0:03:13: be:4e:9b:89:f8:ab:4b:5a:b5:38:18:74:76:d4:ea: 20:d4:11:ce:62:62:ee:c1:66:7f:52:36:da:8e:9b: 3c:fe:04:2c:14:62:bc:ff:d1:04:0a:cd:7f:ff:65: 49:e4:9c:17:3a:dc:17:2e:d6:fa:2a:23:e7:a8:c5: 7d:db:da:06:19:a3:c2:96:7b:c2:e2:ba:f1:54:ad: 29:e2:ec:d6:00:1f:49:5a:6e:26:64:4b:20:03:89: f7:26:fd:24:63:25:4b:bd:73:2f:99:d9:65:ea:34: 99:df:90:2d:97:7a:00:f1:5b:b0:c8:ea:cb:6d:4f: aa:ff:e5:5a:9d:db:3a:15:0f:14:2d:cc:d6:b1:6d: 38:5e:42:5b:a3:3c:07:e7:a8:bd:e1:1c:2c:db:53: ec:81:99:bc:6a:2f:96:8e:70:94:fd:23:13:97:92: 6c:3a:db:f4:fd:bb:04:94:6a:78:fd:40:43:1d:30: e6:b7:95:a7:e1:16:e9:0a:87:d3:3b:0a:5d:98:2b: e1:19:47:da:bc:f2:00:5e:7e:82:b6:bd:06:3b:ae: 95:13:cf:14:73:64:2e:f7:e2:61:fb:24:67:fb:cd: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:26:8D:80:1A:0B:29:C4:07:A6:21:47:79:EB:FC:87:33:E5:AE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:63:8c:2a:d1:54:c8:aa:a5:d7:27:bd:ca:be:23:69:96:36: 70:dd:f1:8e:1a:67:c9:16:c9:c0:ab:86:6d:4e:22:f3:1c:b5: 92:8c:c6:89:83:48:14:09:e0:b3:57:60:44:4f:17:6a:cc:77: 2c:8c:e1:f9:1a:c7:9a:ae:3e:fe:37:05:63:5b:e4:d8:e7:39: 17:fb:72:35:d8:76:ab:ae:01:6e:d5:93:ba:62:ee:49:ed:d1: d2:91:30:a3:ee:1b:13:4b:75:d1:44:34:ee:3c:6d:9e:b8:fd: 4a:ea:b6:81:bc:d7:81:67:85:05:15:81:20:51:05:71:ae:4a: 48:ba:78:89:85:fe:5c:ce:5e:df:3a:3f:f7:d6:08:18:49:7c: 68:59:03:a6:31:8c:fe:56:a5:d4:0d:e6:48:fe:3e:2d:83:16: 85:22:ae:9c:7b:74:e8:01:63:63:98:5a:ab:9c:89:a0:75:0c: 7d:05:08:e2:c9:4c:40:0f:77:3c:03:82:0e:aa:b2:2b:ff:f2: 7a:b2:fb:13:8f:e5:3b:68:8c:a9:ac:a5:75:50:46:64:a6:4a: 57:7e:c0:2c:23:3c:1d:2c:08:79:fb:be:c5:e9:eb:3a:b4:39: 3b:6f:07:19:59:fc:a0:8e:06:9a:3f:e5:53:f2:18:cb:41:ab: a8:ba:c8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKxHr9BaWNx17rHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YmZhNDM2YzktYmFhOS00YzliLWIwMzMtM2I5ODc2ZmQ0ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN/s3FRAOYSXDQwkuuihlyZOn2Bu06njIe/Q AxO+TpuJ+KtLWrU4GHR21Oog1BHOYmLuwWZ/Ujbajps8/gQsFGK8/9EECs1//2VJ 5JwXOtwXLtb6KiPnqMV929oGGaPClnvC4rrxVK0p4uzWAB9JWm4mZEsgA4n3Jv0k YyVLvXMvmdll6jSZ35Atl3oA8VuwyOrLbU+q/+Vands6FQ8ULczWsW04XkJbozwH 56i94Rws21PsgZm8ai+WjnCU/SMTl5JsOtv0/bsElGp4/UBDHTDmt5Wn4RbpCofT OwpdmCvhGUfavPIAXn6Ctr0GO66VE88Uc2Qu9+Jh+yRn+83t7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQmjYAaCynEB6YhR3nr/Icz5a4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FlM2ZjYzQtZDQ0MS0z NTE2LTg3MjktNjRmYmNiMzU1Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxjjCrRVMiqpdcnvcq+I2mWNnDd8Y4aZ8kWycCrhm1OIvMctZKMxomD SBQJ4LNXYERPF2rMdyyM4fkax5quPv43BWNb5NjnORf7cjXYdquuAW7Vk7pi7knt 0dKRMKPuGxNLddFENO48bZ64/UrqtoG814FnhQUVgSBRBXGuSki6eImF/lzOXt86 P/fWCBhJfGhZA6YxjP5WpdQN5kj+Pi2DFoUirpx7dOgBY2OYWquciaB1DH0FCOLJ TEAPdzwDgg6qsiv/8nqy+xOP5TtojKmspXVQRmSmSld+wCwjPB0sCHn7vsXp6zq0 OTtvBxlZ/KCOBpo/5VPyGMtBq6i6yLA= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:35 2024 by rpki-client on console-ams.rpki-client.org