$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa File: 3d8f5d90-a69d-3cd8-a196-091546b82b17.roa (raw, json) Hash identifier: KF9a5XW8LOR0ymeOxUCEJJbpoINSyhMeiR8JcMbHmMg= Subject key identifier: 67:42:9E:8E:3C:B3:C4:A9:22:5F:AE:21:D5:2E:65:98:57:66:6D:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DCB960BE2514904BB4440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:cb:96:0b:e2:51:49:04:bb:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=040ecc21-6c06-4694-a954-2b402ce680c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2a:34:bc:60:1a:a3:c0:ab:fe:66:2c:0e:93: 78:9b:f0:4c:d4:67:a1:69:db:27:64:a4:14:c3:95: 26:fe:40:68:55:f3:e3:53:9c:6d:ab:d9:4e:74:69: 4a:18:e3:84:79:a2:5b:f3:fb:00:8f:a1:34:76:c8: 00:69:51:e7:fb:90:40:29:5f:ff:2b:73:34:59:cd: 43:4b:d4:6c:d5:29:90:91:8c:82:1b:82:8a:24:61: a9:6f:4e:0b:49:5b:32:3d:07:d7:dc:a9:3b:20:83: 98:65:35:d5:5a:0d:c8:43:e9:0e:93:72:1e:d2:5f: 47:6f:20:cf:7d:c4:ca:25:35:3e:c8:d0:27:36:51: 29:ce:b0:7f:9d:1f:d2:10:2c:08:51:2e:bc:3d:dc: 56:c5:b4:e8:ad:37:b2:cd:fc:f0:8b:6d:3c:5f:ab: 64:0e:c3:21:36:12:02:fb:1d:6c:e6:27:55:80:db: 70:cb:e1:25:63:e7:fe:3b:c5:10:64:d0:dd:c1:03: 0b:40:db:9d:c4:12:3b:e0:b7:e4:21:34:26:23:0a: f2:7e:fb:1b:65:c7:22:73:f3:3b:99:55:5b:de:63: 98:b4:a4:d6:c5:5d:05:21:0b:d8:bf:26:53:07:54: 94:c2:ae:56:b7:56:4b:b7:f0:30:d1:21:5b:d9:e2: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:42:9E:8E:3C:B3:C4:A9:22:5F:AE:21:D5:2E:65:98:57:66:6D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:48:e9:96:6b:75:18:14:76:17:dd:4d:02:5c:5c:9d:70:fb: 99:80:1e:ac:c4:8f:45:c1:bc:fa:08:79:b8:d9:94:fa:20:06: c7:e8:b5:c7:e3:ff:fa:b3:7f:ce:91:ad:a3:1a:8c:2d:22:70: 81:2e:36:99:7f:67:90:b3:0d:91:c1:14:b3:93:40:10:6a:07: 93:d8:42:df:c8:34:e2:41:05:9e:21:77:be:13:db:49:97:34: 03:bf:e7:a0:55:f0:59:b0:d8:1e:55:33:f0:65:b0:5c:30:3f: bd:41:c2:c6:de:c6:e3:6d:5a:89:c3:13:24:c0:25:89:6b:dc: 3d:f0:cb:de:d7:c4:be:95:f7:b5:3e:5e:e0:66:b7:6d:a0:e6: 82:61:2d:e7:61:2b:40:bb:2b:c9:3b:b1:b4:5d:29:85:e7:35: 1e:a6:be:28:65:bd:d0:ee:c6:e7:96:fb:37:72:3d:e1:6f:26: dd:b1:45:7f:71:5b:ab:8a:12:d9:b4:3e:a4:28:6f:79:2f:27: 32:7a:ef:4f:11:ad:61:24:fd:49:0b:79:5b:5f:9a:30:ec:42: f9:78:27:38:28:15:02:dd:df:b4:16:10:38:2a:73:5f:9f:3b: e8:0d:39:48:ee:86:8b:d9:3a:59:23:26:0f:9a:3b:f1:0d:81: 56:92:0b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcuWC+JRSQS7REAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MDQwZWNjMjEtNmMwNi00Njk0LWE5NTQtMmI0MDJjZTY4MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yo0vGAao8Cr/mYsDpN4m/BM1GehadsnZKQU w5Um/kBoVfPjU5xtq9lOdGlKGOOEeaJb8/sAj6E0dsgAaVHn+5BAKV//K3M0Wc1D S9Rs1SmQkYyCG4KKJGGpb04LSVsyPQfX3Kk7IIOYZTXVWg3IQ+kOk3Ie0l9HbyDP fcTKJTU+yNAnNlEpzrB/nR/SECwIUS68PdxWxbTorTeyzfzwi208X6tkDsMhNhIC +x1s5idVgNtwy+ElY+f+O8UQZNDdwQMLQNudxBI74LfkITQmIwryfvsbZccic/M7 mVVb3mOYtKTWxV0FIQvYvyZTB1SUwq5Wt1ZLt/Aw0SFb2eLgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdCno48s8SpIl+uIdUuZZhXZm08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Q4ZjVkOTAtYTY5ZC0z Y2Q4LWExOTYtMDkxNTQ2YjgyYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBI6ZZrdRgUdhfdTQJcXJ1w+5mAHqzEj0XBvPoIebjZlPogBsfotcfj //qzf86RraMajC0icIEuNpl/Z5CzDZHBFLOTQBBqB5PYQt/INOJBBZ4hd74T20mX NAO/56BV8Fmw2B5VM/BlsFwwP71BwsbexuNtWonDEyTAJYlr3D3wy97XxL6V97U+ XuBmt22g5oJhLedhK0C7K8k7sbRdKYXnNR6mvihlvdDuxueW+zdyPeFvJt2xRX9x W6uKEtm0PqQob3kvJzJ6708RrWEk/UkLeVtfmjDsQvl4JzgoFQLd37QWEDgqc1+f O+gNOUjuhovZOlkjJg+aO/ENgVaSCzo= -----END CERTIFICATE-----Generated at Sun Apr 28 18:13:14 2024 by rpki-client on console-ams.rpki-client.org