$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa File: 426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa (raw, json) Hash identifier: CnjUi6Hw4eEsA+GY9Nj+jqVQ7wgfwLHCH3/1HoeM77s= Subject key identifier: 77:F7:35:78:96:78:09:85:BE:EC:42:47:51:9C:91:7A:A0:AC:BE:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC25373F294D553529000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c2:53:73:f2:94:d5:53:52:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=d625a3f8-fa84-45d2-9cb9-bb236aa69d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:41:2d:d7:5a:3f:d1:89:18:00:e3:db:77: 78:76:54:95:b6:98:8e:f8:69:bb:70:4f:a7:ec:9e: 7e:11:99:c7:94:13:0a:48:b9:d9:60:39:01:8c:7e: fa:d2:ab:22:be:e6:57:4d:48:fa:4d:b2:f4:87:15: 45:7b:f8:ef:58:58:86:5a:6b:6c:83:85:c3:1e:27: ee:0d:b2:aa:13:ae:73:8c:9b:66:cf:7a:08:61:4c: ba:92:bb:2b:44:a5:8b:18:b6:7e:81:ff:14:fe:b3: 01:5a:6f:c8:3c:cf:e9:a0:f9:b9:c6:20:5f:2b:1c: 52:14:51:e0:17:d8:86:b1:3e:59:03:67:60:bc:6b: 0f:43:7c:f5:b5:67:bf:40:7a:b8:45:74:f1:d7:73: aa:d9:27:f7:0a:50:d9:4a:17:4d:15:ab:bb:54:5f: a1:40:9d:22:fb:f6:42:bc:3c:aa:e6:b9:de:d3:72: 0c:d3:ec:95:4a:b8:e7:d5:44:5a:23:23:95:16:8d: e4:7f:a3:38:64:83:6a:81:a1:87:27:9e:ef:74:1e: c4:af:11:1f:95:0f:80:2d:69:64:62:f9:05:dd:60: 99:32:30:70:d6:13:ef:0e:7f:99:00:60:e7:7e:9a: b3:1c:43:65:50:35:f5:f1:c1:30:b8:ce:b8:71:aa: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:35:78:96:78:09:85:BE:EC:42:47:51:9C:91:7A:A0:AC:BE:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/426fc1e1-19ca-3a4c-a464-18b15ae70b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:44:a1:16:0b:9c:93:ef:b9:c6:ba:94:c9:05:c8:2d:b0:f2: 44:0d:b6:ed:44:2e:5b:9e:a7:8a:49:f9:5e:f5:23:14:fe:3e: 75:77:96:7d:46:00:bc:71:41:e9:9f:34:0c:37:3c:a9:bd:17: 6c:8e:83:fb:b6:e2:fa:25:01:6c:63:e5:f0:50:07:86:b0:25: bf:8e:93:78:d0:a1:fd:52:b9:b8:52:4b:99:47:40:c5:d2:07: fd:3d:de:82:8b:4a:89:7f:1c:38:b5:c3:73:cc:b0:cd:67:fc: 22:e5:57:0c:93:c8:bf:a0:84:fb:3b:d0:1a:28:60:9f:40:40: 7f:fb:c8:34:b7:46:00:96:28:55:86:93:ae:ca:f4:0a:3c:b1: 65:55:1a:f6:3e:b1:db:1f:4d:a0:e1:dd:94:57:1d:1e:3a:7f: a5:2c:06:e1:2d:35:a4:d8:ec:82:71:5a:19:8d:03:d7:7e:6a: fb:a6:e0:cf:a9:82:5a:2c:82:35:84:f6:73:f4:e2:95:b5:de: 0c:67:f4:db:35:30:64:c3:60:e8:73:3f:9d:c2:25:5f:dc:59: 64:c6:c0:86:45:3f:4a:ba:a1:09:9f:48:69:59:9b:95:b3:97: fc:4c:68:18:da:c8:8b:e4:52:b6:58:88:3d:a6:f2:b0:9e:63: 88:99:a9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcJTc/KU1VNSkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZDYyNWEzZjgtZmE4NC00NWQyLTljYjktYmIyMzZhYTY5ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR1BLddaP9GJGADj23d4dlSVtpiO+Gm7cE+n 7J5+EZnHlBMKSLnZYDkBjH760qsivuZXTUj6TbL0hxVFe/jvWFiGWmtsg4XDHifu DbKqE65zjJtmz3oIYUy6krsrRKWLGLZ+gf8U/rMBWm/IPM/poPm5xiBfKxxSFFHg F9iGsT5ZA2dgvGsPQ3z1tWe/QHq4RXTx13Oq2Sf3ClDZShdNFau7VF+hQJ0i+/ZC vDyq5rne03IM0+yVSrjn1URaIyOVFo3kf6M4ZINqgaGHJ57vdB7ErxEflQ+ALWlk YvkF3WCZMjBw1hPvDn+ZAGDnfpqzHENlUDX18cEwuM64caqb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf3NXiWeAmFvuxCR1GckXqgrL5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDI2ZmMxZTEtMTljYS0z YTRjLWE0NjQtMThiMTVhZTcwYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBEoRYLnJPvuca6lMkFyC2w8kQNtu1ELluep4pJ+V71IxT+PnV3ln1G ALxxQemfNAw3PKm9F2yOg/u24volAWxj5fBQB4awJb+Ok3jQof1SubhSS5lHQMXS B/093oKLSol/HDi1w3PMsM1n/CLlVwyTyL+ghPs70BooYJ9AQH/7yDS3RgCWKFWG k67K9Ao8sWVVGvY+sdsfTaDh3ZRXHR46f6UsBuEtNaTY7IJxWhmNA9d+avum4M+p glosgjWE9nP04pW13gxn9Ns1MGTDYOhzP53CJV/cWWTGwIZFP0q6oQmfSGlZm5Wz l/xMaBjayIvkUrZYiD2m8rCeY4iZqVI= -----END CERTIFICATE-----Generated at Sun Apr 28 15:54:03 2024 by rpki-client on console-fra.rpki-client.org