$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa File: 3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa (raw, json) Hash identifier: 1LQPCYlXuairBVIQ1U923IkxkE43fJufKdo6xUy/Kxc= Subject key identifier: F3:75:7A:AD:A2:4D:4C:3B:A1:76:CB:CF:70:3C:B9:31:CA:4A:5A:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DCBFF365A8A077EB83C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:cb:ff:36:5a:8a:07:7e:b8:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=be9c125a-eccf-4f56-9384-3a9161d793b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:2c:e2:99:4a:47:11:82:c2:b2:30:c8:f9: 97:15:6f:3f:3a:5e:65:29:6e:32:7b:5b:db:50:09: 8d:13:cb:18:d2:70:82:c1:38:84:ee:e8:f5:a3:7e: 93:7d:43:d7:77:84:1f:18:69:4d:e2:1e:6a:56:af: 46:29:a4:1c:58:90:db:71:37:73:38:aa:bf:aa:42: 67:70:56:1a:ea:dd:39:2a:5c:4c:bb:d9:b3:53:0c: 17:14:46:99:13:1e:37:96:e2:db:97:7a:7e:74:6f: 8e:dc:af:72:c1:2b:b6:39:c5:30:e2:b8:d2:4b:13: 66:58:37:58:c0:1c:f0:43:df:a3:22:e0:12:0f:c1: f8:62:81:6c:86:0b:4d:16:24:bd:a1:68:be:a0:ec: f5:1a:ba:26:b5:a9:7b:d1:f8:62:31:53:61:b9:2c: 94:3c:d6:46:87:fe:60:9a:c6:52:8a:5b:85:e0:09: 4d:5e:1c:63:78:a9:49:71:f3:e7:be:b2:7e:52:87: ab:4e:c0:be:34:47:2a:0c:d7:0b:2a:2a:d1:f2:51: 65:ee:0b:3c:19:85:62:8e:47:db:74:3a:92:cc:e3: 63:a6:85:7d:2d:ed:cb:af:24:44:df:7a:df:6d:29: e3:1c:8b:2f:dd:69:e9:33:8d:97:b2:9d:dd:e2:ba: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:75:7A:AD:A2:4D:4C:3B:A1:76:CB:CF:70:3C:B9:31:CA:4A:5A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c2:df:ac:b7:ed:8b:87:25:5a:f4:3f:13:5c:b3:69:56:51: 80:5d:b8:a8:e2:8f:bd:d5:e0:ee:74:8c:3e:96:09:a3:34:f3: cb:34:2e:25:b8:3f:3f:d5:75:4b:c0:cf:87:51:3f:ae:45:03: 3b:dd:c8:9a:6a:fc:05:0c:46:41:79:2c:37:e2:10:2c:6e:76: ef:2e:ff:72:64:55:a3:7e:50:6f:35:0f:42:77:6b:ef:f6:bb: 4c:de:31:4c:4e:c8:b5:2e:ea:b9:b4:d8:38:41:65:bc:f7:fb: ef:fe:02:9b:d2:85:f0:f4:ed:82:1a:0b:f9:5b:b7:d4:b9:01: 87:3e:63:65:be:a2:f6:93:87:20:dc:6c:eb:d8:4e:f4:c6:5a: fc:a7:e6:d0:4a:8c:ac:13:23:5e:91:11:da:9a:29:89:9f:d4: b1:0d:19:72:6f:35:38:74:5c:93:38:f3:a8:95:7c:13:d9:cc: 97:89:7e:d2:f1:e1:a3:0a:4f:47:6c:d0:01:36:1e:2d:d3:d0: 76:9f:5d:9c:28:60:fe:f6:e5:39:8f:94:7c:cc:f0:87:60:2c: c2:d5:72:02:c8:34:91:bc:29:38:73:80:6b:51:5d:87:d5:10: e0:6b:79:f3:54:b0:c2:d3:41:46:6f:3d:f9:d5:45:1e:0a:d3: d4:13:af:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcv/NlqKB364PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YmU5YzEyNWEtZWNjZi00ZjU2LTkzODQtM2E5MTYxZDc5M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU4s4plKRxGCwrIwyPmXFW8/Ol5lKW4ye1vb UAmNE8sY0nCCwTiE7uj1o36TfUPXd4QfGGlN4h5qVq9GKaQcWJDbcTdzOKq/qkJn cFYa6t05KlxMu9mzUwwXFEaZEx43luLbl3p+dG+O3K9ywSu2OcUw4rjSSxNmWDdY wBzwQ9+jIuASD8H4YoFshgtNFiS9oWi+oOz1Gromtal70fhiMVNhuSyUPNZGh/5g msZSiluF4AlNXhxjeKlJcfPnvrJ+UoerTsC+NEcqDNcLKirR8lFl7gs8GYVijkfb dDqSzONjpoV9Le3LryRE33rfbSnjHIsv3WnpM42Xsp3d4rrRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN1eq2iTUw7oXbLz3A8uTHKSlqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UwNGI2MDctZmRhNi0z YzFjLTg1ZmQtYTBlYWZhZDMwMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvC36y37YuHJVr0PxNcs2lWUYBduKjij73V4O50jD6WCaM088s0LiW4 Pz/VdUvAz4dRP65FAzvdyJpq/AUMRkF5LDfiECxudu8u/3JkVaN+UG81D0J3a+/2 u0zeMUxOyLUu6rm02DhBZbz3++/+ApvShfD07YIaC/lbt9S5AYc+Y2W+ovaThyDc bOvYTvTGWvyn5tBKjKwTI16REdqaKYmf1LENGXJvNTh0XJM486iVfBPZzJeJftLx 4aMKT0ds0AE2Hi3T0HafXZwoYP725TmPlHzM8IdgLMLVcgLINJG8KThzgGtRXYfV EOBrefNUsMLTQUZvPfnVRR4K09QTrzc= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:34 2024 by rpki-client on console-ams.rpki-client.org