$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa File: 53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa (raw, json) Hash identifier: PgyTATO57V0Pz4d5Tuq37wrHjllzwF4HVZslsGa5wU0= Subject key identifier: 25:77:33:DA:2C:52:C5:53:42:82:87:ED:D9:7D:38:37:98:AF:6B:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4BCB8F2FE9A48A8FA800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4b:cb:8f:2f:e9:a4:8a:8f:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=00d35f68-267c-471b-8e19-723d4d63217d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:cf:ea:4c:c1:c7:28:32:d0:a2:cb:f0:dd: 49:7e:5f:68:fd:58:9c:b1:74:73:e3:b1:49:e6:2f: 8d:51:f8:a5:18:79:b7:bd:24:ca:44:98:69:ff:85: bc:61:77:6d:b5:ec:99:c6:84:f0:74:4a:25:b9:0d: 73:56:46:47:8f:66:b6:b8:24:45:2e:72:b4:e0:de: 8f:70:79:83:f3:c5:92:82:88:02:fe:ff:d6:11:a0: 78:b1:2c:1d:47:95:e9:86:2f:00:8f:f5:f5:a3:6a: df:2b:d9:f8:11:d8:c8:04:60:24:64:67:fe:16:9c: b4:23:23:fb:aa:ec:fa:8b:3b:cf:4d:51:7d:c2:00: b4:b2:28:0b:74:2f:72:42:20:db:23:a8:10:35:10: b2:f5:a6:23:4f:22:a7:06:18:da:b5:d4:97:ce:0e: 84:ed:d6:e9:a3:cd:12:1f:12:07:5c:2f:d7:89:d4: ca:33:0b:43:86:f3:6c:1c:f6:05:0b:b7:97:bc:78: 3e:ea:94:32:26:28:f4:a5:6d:51:62:ec:28:ef:b7: ef:1c:0d:53:39:d5:bc:35:bc:17:c7:0d:b6:c1:d3: 3c:a2:2d:17:77:89:f6:26:1f:f9:74:a0:bd:ee:56: 4c:10:e6:57:9f:1c:f8:77:9b:57:e1:c5:7e:66:d9: de:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:77:33:DA:2C:52:C5:53:42:82:87:ED:D9:7D:38:37:98:AF:6B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e2:04:22:ca:8e:d9:d3:27:41:70:a4:91:9f:03:7d:2d:70: c4:35:82:95:1e:05:ab:50:85:8c:c4:73:52:7d:c8:5a:cb:94: c1:a2:8f:67:0a:7c:1c:81:10:2b:10:12:96:60:e7:28:05:85: 1f:17:99:51:f9:37:00:92:78:9c:7c:62:09:89:eb:ef:10:e6: d2:25:38:25:c3:bb:a1:fa:8e:a2:f6:9e:bf:81:f8:d2:37:82: 11:de:d8:1a:b6:ad:06:4e:cb:60:5f:78:ae:60:5f:08:b2:54: db:14:a6:2c:e7:e6:d9:7d:fe:d9:ad:0e:66:79:f0:0d:a1:7d: ca:91:0f:4b:a2:18:7c:e4:cc:10:60:af:f0:e3:28:42:e7:23: 47:1b:c5:8c:e5:ad:a2:4d:93:f3:57:1d:65:4f:b2:cd:a4:85: 52:c4:a0:32:57:a6:36:88:89:03:64:40:f8:ca:ea:cf:e6:23: 39:b6:8a:b1:23:d8:9c:f4:1d:81:47:5a:ec:d6:e0:e8:08:11: 42:55:ae:3c:55:78:69:f6:3f:c5:83:d9:35:0d:3a:5b:01:86: 45:a8:73:ce:8e:e4:38:5f:b2:f0:8b:18:80:42:84:78:c5:bd: 29:a0:62:9a:ea:4d:e8:3e:d9:9b:59:83:fd:5a:28:bc:93:02: e1:a0:30:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkvLjy/ppIqPqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MDBkMzVmNjgtMjY3Yy00NzFiLThlMTktNzIzZDRkNjMyMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqynP6kzBxygy0KLL8N1Jfl9o/VicsXRz47FJ 5i+NUfilGHm3vSTKRJhp/4W8YXdtteyZxoTwdEoluQ1zVkZHj2a2uCRFLnK04N6P cHmD88WSgogC/v/WEaB4sSwdR5Xphi8Aj/X1o2rfK9n4EdjIBGAkZGf+Fpy0IyP7 quz6izvPTVF9wgC0sigLdC9yQiDbI6gQNRCy9aYjTyKnBhjatdSXzg6E7dbpo80S HxIHXC/XidTKMwtDhvNsHPYFC7eXvHg+6pQyJij0pW1RYuwo77fvHA1TOdW8NbwX xw22wdM8oi0Xd4n2Jh/5dKC97lZMEOZXnxz4d5tX4cV+Ztne4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV3M9osUsVTQoKH7dl9ODeYr2tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNkM2VlYzUtNTJkNi0z ZDE2LTkxYTgtZDcxNWY0ZWJjNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACziBCLKjtnTJ0FwpJGfA30tcMQ1gpUeBatQhYzEc1J9yFrLlMGij2cK fByBECsQEpZg5ygFhR8XmVH5NwCSeJx8YgmJ6+8Q5tIlOCXDu6H6jqL2nr+B+NI3 ghHe2Bq2rQZOy2BfeK5gXwiyVNsUpizn5tl9/tmtDmZ58A2hfcqRD0uiGHzkzBBg r/DjKELnI0cbxYzlraJNk/NXHWVPss2khVLEoDJXpjaIiQNkQPjK6s/mIzm2irEj 2Jz0HYFHWuzW4OgIEUJVrjxVeGn2P8WD2TUNOlsBhkWoc86O5DhfsvCLGIBChHjF vSmgYprqTeg+2ZtZg/1aKLyTAuGgMJ0= -----END CERTIFICATE-----Generated at Sun Apr 28 15:54:04 2024 by rpki-client on console-fra.rpki-client.org