$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa File: 42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa (raw, json) Hash identifier: LRkTtKCkCA6P237EK37fjRa/+G75zETf1lDPJZqvNVE= Subject key identifier: 70:10:D9:77:40:56:47:EA:91:67:30:98:22:DB:C8:6C:1A:5D:9C:D6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0ED6AAC43385EC469200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0e:d6:aa:c4:33:85:ec:46:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=abc520ae-9deb-4aa8-a46f-f3a4dcdd3100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:0d:41:54:1d:b4:98:8b:19:2f:9a:e9:09: 7b:86:89:70:33:26:6e:9e:81:39:a3:e7:0b:5d:34: c0:6b:b0:92:60:09:a3:25:af:86:1f:34:a6:f0:9f: 0e:1c:3c:02:b1:a5:95:c6:5c:d2:94:ac:4f:74:a2: 35:84:08:69:db:7c:05:d5:f0:4e:6a:eb:52:a5:f8: 6e:63:15:ec:d7:65:35:4a:b4:f8:35:b3:7b:e7:82: 94:d3:ea:ac:84:d3:2d:a4:8f:8b:93:f6:3e:b7:12: 08:87:50:e7:b1:44:97:7a:65:be:7a:69:b0:58:7f: d4:db:21:67:16:4c:f7:3c:54:ec:3a:b8:b0:3f:39: 4e:4b:dd:55:c7:af:68:bf:53:ce:93:c5:e0:2c:f1: 62:76:5b:c9:44:42:0a:77:69:a3:f2:20:8b:1a:49: d1:a7:db:8f:ae:10:ed:40:ea:14:1f:c8:1a:e9:d7: 71:87:96:5a:c6:76:27:53:bf:d6:70:6e:03:91:62: 1a:89:10:58:80:db:5a:42:94:1b:63:4b:d5:7b:50: cd:cf:24:19:97:26:6b:4b:88:0d:41:15:00:15:55: ec:45:ae:d5:ad:50:9f:ec:06:4d:c1:dc:5f:be:e1: 5d:f3:7b:00:86:52:f2:b6:da:75:5f:c5:12:1a:b2: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:D9:77:40:56:47:EA:91:67:30:98:22:DB:C8:6C:1A:5D:9C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:78:84:bf:d5:c4:e7:2e:14:95:38:b8:f6:9b:72:9b:2f:b8: 64:63:10:47:9c:5c:0b:3c:57:c2:d6:be:82:a0:79:ce:bc:26: 4b:16:4a:9f:06:3f:e0:29:7a:48:d6:30:65:9e:8a:58:ca:fb: ac:61:44:3d:16:8d:6b:55:b0:7e:ed:f6:56:68:b1:12:5f:b4: bc:fa:d5:0b:2a:46:46:58:80:7b:2f:3e:e2:d9:90:2e:8d:11: 52:5c:77:62:8b:0b:64:31:31:4d:ef:af:f1:cd:4b:ee:28:57: 85:dd:cd:37:cc:2d:81:cf:34:8d:ff:49:32:b1:a4:73:ba:22: 03:f6:7a:fc:1b:81:22:37:bb:2d:dd:89:22:c1:06:4c:eb:2b: 88:aa:34:79:53:74:41:7f:7e:8e:ac:71:32:08:80:1f:87:0f: 1b:50:b0:15:5b:0e:7e:15:83:20:c2:53:e2:b4:42:9a:82:ee: 02:05:48:c1:bf:80:81:79:ab:60:1b:71:5b:8d:6c:dc:59:7a: 15:f9:fb:ff:04:b5:44:b2:8c:bf:a2:e3:ee:d2:fa:a6:7a:57: f8:5b:b0:56:e1:49:d4:0f:15:a5:20:2a:b1:48:57:2e:c5:77: 0d:19:a1:80:50:be:82:34:9d:96:25:fb:b9:7c:ab:35:bc:5b: 36:0e:25:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw7WqsQzhexGkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YWJjNTIwYWUtOWRlYi00YWE4LWE0NmYtZjNhNGRjZGQzMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg8NQVQdtJiLGS+a6Ql7holwMyZunoE5o+cL XTTAa7CSYAmjJa+GHzSm8J8OHDwCsaWVxlzSlKxPdKI1hAhp23wF1fBOautSpfhu YxXs12U1SrT4NbN754KU0+qshNMtpI+Lk/Y+txIIh1DnsUSXemW+emmwWH/U2yFn Fkz3PFTsOriwPzlOS91Vx69ov1POk8XgLPFidlvJREIKd2mj8iCLGknRp9uPrhDt QOoUH8ga6ddxh5ZaxnYnU7/WcG4DkWIaiRBYgNtaQpQbY0vVe1DNzyQZlyZrS4gN QRUAFVXsRa7VrVCf7AZNwdxfvuFd83sAhlLyttp1X8USGrK5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAQ2XdAVkfqkWcwmCLbyGwaXZzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDJlMzdhN2ItZThhMC0z NjY2LWI2ZDUtZDQzN2I0YWUyZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ4hL/VxOcuFJU4uPabcpsvuGRjEEecXAs8V8LWvoKgec68JksWSp8G P+ApekjWMGWeiljK+6xhRD0WjWtVsH7t9lZosRJftLz61QsqRkZYgHsvPuLZkC6N EVJcd2KLC2QxMU3vr/HNS+4oV4XdzTfMLYHPNI3/STKxpHO6IgP2evwbgSI3uy3d iSLBBkzrK4iqNHlTdEF/fo6scTIIgB+HDxtQsBVbDn4VgyDCU+K0QpqC7gIFSMG/ gIF5q2AbcVuNbNxZehX5+/8EtUSyjL+i4+7S+qZ6V/hbsFbhSdQPFaUgKrFIVy7F dw0ZoYBQvoI0nZYl+7l8qzW8WzYOJWY= -----END CERTIFICATE-----Generated at Mon Nov 25 01:17:08 2024 by rpki-client on console-fra.rpki-client.org