$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa File: 494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa (raw, json) Hash identifier: bskk1kyvzrh7ls0u0bnwQAkC7sSnwt0ZHOSAwtAiv6o= Subject key identifier: 12:57:50:8E:A1:50:B6:32:71:E8:38:78:B9:54:A0:C5:1F:E3:00:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DFDD1BD55AA150635BD50 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:fd:d1:bd:55:aa:15:06:35:bd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=4c6d1d5e-4895-4b0f-a72d-64a9f25f6117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:66:79:a3:bb:b0:7f:d8:fc:ba:db:75:4f:04: 1d:60:da:8b:90:3c:21:03:8e:77:b4:e4:6d:6a:1d: 61:ff:6f:ce:4b:0c:78:9e:83:05:43:01:43:01:19: 27:fe:9f:83:4f:38:46:6a:3a:d9:0e:db:cc:30:ad: 85:76:1f:df:6c:e7:0b:a4:bd:af:23:bb:16:e8:e9: 21:50:d3:33:48:e5:d3:e6:de:89:1d:d9:f9:69:52: 19:5f:48:35:37:0d:b8:51:25:03:81:57:26:58:4b: 8f:76:74:0c:2a:71:63:21:cd:80:7c:a4:21:57:db: 65:4d:19:4d:e0:11:1d:5a:e6:52:90:07:1e:fb:a7: 08:ab:8c:a6:e7:76:e4:fa:fd:39:db:9b:02:0d:88: 15:ad:51:62:1e:5d:e6:f5:f2:d0:49:b8:6a:2c:b0: c3:4c:f3:9e:ec:87:8e:3a:f7:02:1f:7d:63:a1:a9: ad:81:a3:97:15:67:1f:8a:a2:8c:f3:a2:a9:23:31: ec:50:ec:79:a4:35:20:11:68:78:75:79:bd:de:9e: 21:b7:8a:37:c8:10:25:8c:bb:1e:72:01:30:80:ce: e1:18:6e:b3:75:cd:be:e5:1f:f7:df:10:31:c6:52: 25:49:00:d3:ba:cf:b4:ee:c7:fa:30:37:3c:0a:d5: 62:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:50:8E:A1:50:B6:32:71:E8:38:78:B9:54:A0:C5:1F:E3:00:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4f:8b:7d:b6:e8:64:b2:eb:d2:30:76:7b:37:a8:49:16:70: a4:23:c4:cb:56:7a:96:d2:16:72:42:c4:43:8b:ed:d7:cc:15: e3:9e:af:3c:06:37:cb:24:60:36:bd:32:55:a8:7a:0d:cd:2e: 5e:41:f7:32:cd:2e:0a:be:e5:d2:fc:d2:e7:18:2f:7d:8d:c0: 98:25:6f:ac:41:14:e1:8d:12:c8:fa:3b:54:31:c7:03:20:b0: 1d:80:fa:89:30:89:e2:b7:74:be:c0:da:23:a6:3a:04:6c:32: f6:78:0e:89:ce:a2:ed:90:d6:52:27:bf:df:c7:14:ac:73:bf: f1:dc:49:4a:22:41:b1:28:3c:ca:fb:92:33:f6:2e:e0:62:98: 31:1a:ce:c6:ce:e4:19:10:73:e0:8b:fb:cd:ec:4c:0e:e1:2b: 88:8b:c8:69:30:17:15:b6:6c:54:39:88:f3:c4:5e:05:9e:a5: c9:e1:f0:88:29:93:1f:55:d8:2d:d0:77:9e:40:f2:a1:87:e5: 2a:72:73:1d:1a:60:c7:7c:93:e1:39:0c:1d:3c:6c:7b:c1:97: 38:da:7e:1e:ec:c1:d9:38:ca:91:cb:b8:a2:40:64:e7:7a:60: 9e:c9:5d:20:d3:23:f0:f3:b7:eb:40:a5:9e:f8:cf:39:1c:d4: c8:d7:f1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPf3RvVWqFQY1vVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NGM2ZDFkNWUtNDg5NS00YjBmLWE3MmQtNjRhOWYyNWY2MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGZ5o7uwf9j8utt1TwQdYNqLkDwhA453tORt ah1h/2/OSwx4noMFQwFDARkn/p+DTzhGajrZDtvMMK2Fdh/fbOcLpL2vI7sW6Okh UNMzSOXT5t6JHdn5aVIZX0g1Nw24USUDgVcmWEuPdnQMKnFjIc2AfKQhV9tlTRlN 4BEdWuZSkAce+6cIq4ym53bk+v0525sCDYgVrVFiHl3m9fLQSbhqLLDDTPOe7IeO OvcCH31joamtgaOXFWcfiqKM86KpIzHsUOx5pDUgEWh4dXm93p4ht4o3yBAljLse cgEwgM7hGG6zdc2+5R/33xAxxlIlSQDTus+07sf6MDc8CtViBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJXUI6hULYyceg4eLlUoMUf4wBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk0ZDVmYTMtMzA5YS0z Zjg1LThlYjQtYTFiNTlmZmM2YzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpPi3226GSy69Iwdns3qEkWcKQjxMtWepbSFnJCxEOL7dfMFeOerzwG N8skYDa9MlWoeg3NLl5B9zLNLgq+5dL80ucYL32NwJglb6xBFOGNEsj6O1QxxwMg sB2A+okwieK3dL7A2iOmOgRsMvZ4DonOou2Q1lInv9/HFKxzv/HcSUoiQbEoPMr7 kjP2LuBimDEazsbO5BkQc+CL+83sTA7hK4iLyGkwFxW2bFQ5iPPEXgWepcnh8Igp kx9V2C3Qd55A8qGH5Spycx0aYMd8k+E5DB08bHvBlzjafh7swdk4ypHLuKJAZOd6 YJ7JXSDTI/Dzt+tApZ74zzkc1MjX8Tw= -----END CERTIFICATE-----Generated at Sat Apr 27 15:14:02 2024 by rpki-client on console-ams.rpki-client.org