$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa File: 3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa (raw, json) Hash identifier: jsMvq2sgr4MD6wM3+QgGvzgbk4ggu7C+ptyjdRdb/g8= Subject key identifier: D4:8C:55:73:1C:1D:C9:9D:66:18:00:29:AE:8A:23:0A:F7:58:34:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D71C4D072BEEF80493340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 40306 IP address blocks: 72.173.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:71:c4:d0:72:be:ef:80:49:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=f638adbb-b9d0-4065-aba3-4c1f319b69a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:e3:28:19:34:39:f2:a1:23:ed:33:c6:48: 99:4a:e6:8c:21:a0:5c:03:fb:d8:c2:a3:aa:ac:a8: 15:51:ed:62:96:a3:28:65:23:08:71:d6:76:24:7c: 6b:c9:ee:38:9a:d9:cd:0f:5f:2d:ab:6d:a8:f8:25: b7:73:db:1b:ef:9f:03:36:e6:ee:d3:61:e3:23:a5: 19:80:bc:d8:d3:93:eb:e9:c6:98:bb:29:1d:82:64: 36:a3:fd:da:e2:70:b9:58:e8:b4:d8:ad:a8:7a:6c: bb:13:72:6e:58:3b:d2:da:1f:d9:e1:77:35:b4:38: 3e:cb:5d:c6:1c:dd:6d:4f:1b:3d:1c:49:d1:87:04: 7d:52:bf:64:bb:81:85:b2:4e:9f:ac:dd:86:d0:01: 82:e6:00:a3:2c:72:67:0b:d2:cc:7b:a6:f6:3d:7b: b1:ff:8d:f2:6f:5a:d8:5a:18:9f:7a:52:08:25:84: ae:c5:4a:b2:eb:5e:2e:68:9e:d9:c8:11:5f:14:94: 98:e1:68:d5:85:bd:47:76:ad:6c:25:df:bc:bf:1b: b8:b6:27:00:d9:79:9c:fb:3a:41:ad:87:a6:03:3a: 2a:b7:37:d1:54:6b:28:16:5b:21:51:4e:e0:3d:e4: 0d:e7:12:cd:19:13:d1:c8:da:19:d3:2e:f8:d1:7e: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8C:55:73:1C:1D:C9:9D:66:18:00:29:AE:8A:23:0A:F7:58:34:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:03:ab:87:e1:ab:7f:20:1d:64:36:72:39:6b:e3:16:92:e3: f0:3d:58:61:65:e8:27:ab:51:f7:67:83:ab:d2:17:17:d0:d7: 48:48:fc:68:f4:af:dd:28:b6:27:fe:28:5a:ae:74:5e:78:14: 52:0b:63:4e:a6:1a:36:ea:b4:57:68:0b:9f:42:d1:c7:9f:af: d1:f6:b5:8a:e1:9c:b3:47:25:e4:fb:1e:cd:e5:0a:d2:92:2b: 06:b6:f9:b0:25:43:fb:1d:7a:6b:68:21:41:2e:5b:14:3c:f5: 6d:00:13:77:5f:83:26:c4:63:ae:3d:d5:e8:e3:e1:dc:fc:f2: 39:e6:62:72:78:7e:77:e9:c0:d3:78:7a:cf:21:b2:63:55:dc: cb:26:fb:1a:48:e5:c8:de:34:77:45:de:3d:b7:f9:dd:ce:9f: 7f:52:14:2c:d1:4e:16:1c:93:12:d6:df:9a:50:95:90:36:39: 9b:1d:6b:8e:93:18:a0:0c:7b:7f:56:15:aa:72:41:f7:7a:ca: 85:d9:56:61:50:62:6c:f8:b6:7d:cf:6c:c4:ce:85:3e:5a:60: 71:e3:e4:3f:c5:75:96:9a:e8:ff:56:ed:8e:38:72:52:46:ac: 01:ae:60:f0:66:ec:a5:d8:c3:88:61:d4:42:83:6b:c8:41:05: 35:4d:b1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPXHE0HK+74BJM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZjYzOGFkYmItYjlkMC00MDY1LWFiYTMtNGMxZjMxOWI2OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+TjKBk0OfKhI+0zxkiZSuaMIaBcA/vYwqOq rKgVUe1ilqMoZSMIcdZ2JHxrye44mtnND18tq22o+CW3c9sb758DNubu02HjI6UZ gLzY05Pr6caYuykdgmQ2o/3a4nC5WOi02K2oemy7E3JuWDvS2h/Z4Xc1tDg+y13G HN1tTxs9HEnRhwR9Ur9ku4GFsk6frN2G0AGC5gCjLHJnC9LMe6b2PXux/43yb1rY WhifelIIJYSuxUqy614uaJ7ZyBFfFJSY4WjVhb1Hdq1sJd+8vxu4ticA2Xmc+zpB rYemAzoqtzfRVGsoFlshUU7gPeQN5xLNGRPRyNoZ0y740X5ewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSMVXMcHcmdZhgAKa6KIwr3WDRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1ZTUwYzYtMWIyMC0z MzUxLTgwZDgtMjY0YjFlM2Y1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0Dq4fhq38gHWQ2cjlr4xaS4/A9WGFl6CerUfdng6vSFxfQ10hI/Gj0 r90otif+KFqudF54FFILY06mGjbqtFdoC59C0cefr9H2tYrhnLNHJeT7Hs3lCtKS Kwa2+bAlQ/sdemtoIUEuWxQ89W0AE3dfgybEY6491ejj4dz88jnmYnJ4fnfpwNN4 es8hsmNV3Msm+xpI5cjeNHdF3j23+d3On39SFCzRThYckxLW35pQlZA2OZsda46T GKAMe39WFapyQfd6yoXZVmFQYmz4tn3PbMTOhT5aYHHj5D/FdZaa6P9W7Y44clJG rAGuYPBm7KXYw4hh1EKDa8hBBTVNsaA= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org