$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e3d54a8-2723-3f36-b78d-ae1908712144.roa File: 3e3d54a8-2723-3f36-b78d-ae1908712144.roa (raw, json) Hash identifier: odD9PN1c1V0c8pstCJFjmOvlFuHaa3sUDxYFe8eGz/M= Subject key identifier: C8:EB:48:74:8B:D0:9D:CB:AF:CF:9A:DC:86:A9:BE:0D:26:5A:B7:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DCA219851F0736E4F4528 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e3d54a8-2723-3f36-b78d-ae1908712144.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:ca:21:98:51:f0:73:6e:4f:45:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=4780525e-f8fa-4055-9ce3-63b3e6f00cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:e7:0d:cf:e4:30:7d:13:cf:ac:ae:79:26: 21:e6:20:d4:a5:a7:1a:3b:6a:6a:9d:cb:8e:6f:8e: 8d:48:f9:a7:31:0d:86:6d:1e:0f:1a:a2:be:f5:b5: 0e:15:f9:fd:06:ef:eb:b1:3d:79:b2:b9:d1:f0:11: d8:4b:7d:ab:24:db:bb:96:a5:89:be:74:d4:05:93: 3a:de:9a:db:0e:cc:fe:00:b7:bb:07:63:a7:99:73: 19:a5:6e:a7:2a:6f:ea:6f:cd:96:16:93:08:84:97: 5a:41:18:a9:70:89:fe:a2:88:81:11:37:88:00:c6: 47:01:73:e2:80:4c:d9:a8:bb:25:b1:fd:63:99:9b: a2:f3:32:e3:00:a2:36:ca:42:b1:9e:c5:a8:f1:68: c9:aa:a8:f3:e4:c9:8a:b8:37:83:02:0f:1c:bf:91: d7:c6:0c:2f:e2:59:03:df:5c:e5:5f:2e:75:3d:c2: 12:cf:12:14:cb:aa:53:a8:e0:76:13:d9:da:a4:a2: 45:e6:94:8f:9c:f7:aa:78:4d:19:53:df:b2:4c:29: c7:ad:3a:24:fd:ec:ab:a8:2d:79:08:b0:c7:a8:9f: 06:58:34:9f:f9:22:7c:cc:11:92:74:34:21:57:d2: 5e:bc:f2:56:d6:8d:f4:8b:15:f5:99:0d:75:1d:3d: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EB:48:74:8B:D0:9D:CB:AF:CF:9A:DC:86:A9:BE:0D:26:5A:B7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e3d54a8-2723-3f36-b78d-ae1908712144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:63:7f:85:5a:c3:8f:e0:9e:1a:0f:e6:cd:03:42:14:26:87: 43:a5:43:ee:87:3b:35:7d:a1:94:36:c3:29:9f:99:16:98:71: 63:ae:80:85:27:82:4a:d4:2b:43:c3:c4:71:cd:66:f2:19:bc: 24:77:ee:3b:30:67:6d:eb:82:97:23:0b:05:9a:0b:64:ad:7c: 59:10:a3:77:b9:18:6e:b8:55:8d:59:e4:4c:a1:13:76:cd:02: 38:b9:37:f9:d4:33:30:0b:34:a5:e4:c1:1f:6d:35:0b:13:b8: b2:4d:95:5c:9e:55:9b:3d:89:01:59:b3:de:b1:3e:4d:ad:ef: 0a:3d:1b:3f:a9:51:0f:42:0c:fd:d7:57:3b:8c:c8:ab:4a:82: 44:30:d9:5d:64:f9:68:6d:3b:38:c2:47:19:58:46:1b:a9:0e: 48:73:80:72:79:50:66:70:6b:04:aa:02:ac:f4:ba:26:c6:00: 48:d2:aa:e8:89:96:2b:7b:34:fc:f2:8c:7e:f8:08:ac:41:76: 23:55:67:39:6d:2a:0b:90:4a:d8:b1:5b:aa:77:e7:bb:72:33: b3:b9:5d:e8:e9:ff:3c:73:9a:07:f4:5d:d4:59:b1:fe:50:e9: 39:c1:0f:20:a3:67:d3:d7:04:31:6f:02:be:44:97:19:c4:22: 88:9d:bf:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcohmFHwc25PRSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NDc4MDUyNWUtZjhmYS00MDU1LTljZTMtNjNiM2U2ZjAwY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+LnDc/kMH0Tz6yueSYh5iDUpacaO2pqncuO b46NSPmnMQ2GbR4PGqK+9bUOFfn9Bu/rsT15srnR8BHYS32rJNu7lqWJvnTUBZM6 3prbDsz+ALe7B2OnmXMZpW6nKm/qb82WFpMIhJdaQRipcIn+ooiBETeIAMZHAXPi gEzZqLslsf1jmZui8zLjAKI2ykKxnsWo8WjJqqjz5MmKuDeDAg8cv5HXxgwv4lkD 31zlXy51PcISzxIUy6pTqOB2E9napKJF5pSPnPeqeE0ZU9+yTCnHrTok/eyrqC15 CLDHqJ8GWDSf+SJ8zBGSdDQhV9JevPJW1o30ixX1mQ11HT3pdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjrSHSL0J3Lr8+a3Iapvg0mWrdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UzZDU0YTgtMjcyMy0z ZjM2LWI3OGQtYWUxOTA4NzEyMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVjf4Vaw4/gnhoP5s0DQhQmh0OlQ+6HOzV9oZQ2wymfmRaYcWOugIUn gkrUK0PDxHHNZvIZvCR37jswZ23rgpcjCwWaC2StfFkQo3e5GG64VY1Z5EyhE3bN Aji5N/nUMzALNKXkwR9tNQsTuLJNlVyeVZs9iQFZs96xPk2t7wo9Gz+pUQ9CDP3X VzuMyKtKgkQw2V1k+WhtOzjCRxlYRhupDkhzgHJ5UGZwawSqAqz0uibGAEjSquiJ lit7NPzyjH74CKxBdiNVZzltKguQStixW6p357tyM7O5Xejp/zxzmgf0XdRZsf5Q 6TnBDyCjZ9PXBDFvAr5ElxnEIoidv9A= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org