$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa File: 40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa (raw, json) Hash identifier: Cwb3NXIViF5JdbJxRMDmGd/H/tB2TjdDzLZ2lyCAbaU= Subject key identifier: 30:C8:69:10:CE:EC:8B:08:36:AA:FC:8C:7A:B2:18:1D:45:68:BC:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E04905B4EB8D1497BBBC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:04:90:5b:4e:b8:d1:49:7b:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=8e9c6212-3caf-4de8-bfd3-c327c939c98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:b2:c7:b2:36:7e:78:69:57:00:73:e5:81: 3b:96:30:10:ad:2b:b0:42:73:2c:00:d2:5a:3e:9a: 17:13:db:40:2c:6a:2c:02:bf:5d:5c:83:02:23:ee: 72:7c:09:60:a7:e4:4f:41:35:f9:c6:5d:d0:97:3c: 3b:72:d3:d4:7d:a8:3d:f4:b6:74:71:b8:7b:ad:2b: 10:db:a3:7e:3e:c4:d7:e1:ab:9c:c6:c2:7c:9f:53: eb:3c:4b:31:af:f0:da:19:e2:f3:b6:85:68:ba:4e: 35:c6:b7:73:24:50:4f:3f:b9:f3:66:bb:b0:5f:c5: 1d:ba:0e:51:40:0a:71:4c:a3:4d:6b:dc:7b:cb:40: d5:39:2a:b5:cd:2e:77:df:53:e8:b9:c2:17:e3:ef: 73:60:c8:3b:4f:fe:df:ec:a9:82:35:5c:f7:a6:16: 00:da:39:d3:16:70:1b:d3:6b:4f:ba:b9:2b:1a:25: db:d8:54:dd:6f:2a:cf:a3:cc:65:09:8a:99:52:90: d9:08:ea:26:40:c8:9c:73:f2:18:b4:18:53:bf:8c: 8c:8d:a8:ae:0c:df:cb:22:21:5a:d0:45:c9:e2:a0: 33:7a:7e:9f:51:21:b1:13:5a:ae:8a:59:27:c7:95: a4:17:c8:4b:4b:dc:84:97:ad:0a:b4:2a:ad:20:e0: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C8:69:10:CE:EC:8B:08:36:AA:FC:8C:7A:B2:18:1D:45:68:BC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f8:f8:ad:54:1e:b4:fd:20:94:3a:52:65:06:dd:5a:55:33: 32:01:64:59:1b:d2:23:11:c2:2b:65:a6:31:7a:ed:bd:35:d1: 69:f0:cb:f1:35:30:d4:b0:97:3d:90:a3:f2:16:32:1c:77:09: 64:62:e8:7c:56:2b:20:e8:35:cc:04:11:b1:c2:ab:3d:a5:ea: 23:26:1c:44:7e:28:00:f8:a8:43:ff:29:2e:98:72:6c:37:d4: 1b:99:2a:ad:cf:1a:31:08:0b:ad:09:91:37:ee:ae:5c:51:f5: 1f:11:4e:74:a6:d4:a5:de:9a:dd:09:fd:ee:7e:fb:32:5d:a4: 43:80:33:45:20:72:7d:74:4f:80:c3:c1:18:5c:92:49:61:70: 4a:41:60:8e:2e:ee:3f:21:fc:fd:3b:75:ca:5d:ac:bd:27:8e: 75:58:1c:1a:cc:6f:aa:5e:e7:4f:1d:ce:58:fd:f0:25:8e:9c: 0a:3f:9b:90:b0:ff:f1:26:99:03:f8:56:d4:eb:41:ca:ef:90: 34:81:49:71:d5:f2:bf:10:17:b2:33:3c:87:96:35:0e:65:6f: 8a:bb:0c:1a:1e:c6:cb:ff:12:59:de:90:f1:93:a7:ff:e8:40: f8:e5:a5:65:17:d0:47:b4:6e:2f:5e:c0:53:71:c7:54:e2:50: 68:55:42:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPgSQW0640Ul7u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OGU5YzYyMTItM2NhZi00ZGU4LWJmZDMtYzMyN2M5MzljOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjayyx7I2fnhpVwBz5YE7ljAQrSuwQnMsANJa PpoXE9tALGosAr9dXIMCI+5yfAlgp+RPQTX5xl3Qlzw7ctPUfag99LZ0cbh7rSsQ 26N+PsTX4aucxsJ8n1PrPEsxr/DaGeLztoVouk41xrdzJFBPP7nzZruwX8Udug5R QApxTKNNa9x7y0DVOSq1zS5331PoucIX4+9zYMg7T/7f7KmCNVz3phYA2jnTFnAb 02tPurkrGiXb2FTdbyrPo8xlCYqZUpDZCOomQMicc/IYtBhTv4yMjaiuDN/LIiFa 0EXJ4qAzen6fUSGxE1quilknx5WkF8hLS9yEl60KtCqtIOBrHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDIaRDO7IsINqr8jHqyGB1FaLwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBiM2JkMWMtYTc1NS0z M2I4LThlMTItMjBjNmQ2ZTFmOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX4+K1UHrT9IJQ6UmUG3VpVMzIBZFkb0iMRwitlpjF67b010Wnwy/E1 MNSwlz2Qo/IWMhx3CWRi6HxWKyDoNcwEEbHCqz2l6iMmHER+KAD4qEP/KS6Ycmw3 1BuZKq3PGjEIC60JkTfurlxR9R8RTnSm1KXemt0J/e5++zJdpEOAM0Ugcn10T4DD wRhckklhcEpBYI4u7j8h/P07dcpdrL0njnVYHBrMb6pe508dzlj98CWOnAo/m5Cw //EmmQP4VtTrQcrvkDSBSXHV8r8QF7IzPIeWNQ5lb4q7DBoexsv/ElnekPGTp//o QPjlpWUX0Ee0bi9ewFNxx1TiUGhVQgE= -----END CERTIFICATE-----Generated at Sun Apr 28 00:51:07 2024 by rpki-client on console-ams.rpki-client.org