$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/583ef1a7-afa1-3f3f-8974-76fbfecbd628.roa File: 583ef1a7-afa1-3f3f-8974-76fbfecbd628.roa (raw, json) Hash identifier: pmVrybkJVDTz+qcgVZzg4hyt9blxRHuzV7iJ2kXSKXw= Subject key identifier: 1E:EB:7F:F3:1B:F9:E4:FF:31:CD:8B:3B:D4:A0:F2:AB:4F:8F:A0:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A783F27B359BF43D6ECC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/583ef1a7-afa1-3f3f-8974-76fbfecbd628.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:78:3f:27:b3:59:bf:43:d6:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=131fe349-c205-449b-abd4-582154c27af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:0c:aa:06:8e:2d:51:5a:20:f0:27:47:86: 10:51:7f:57:d6:f7:7a:2a:e6:54:54:cb:b8:5d:96: 82:fa:4e:ff:d6:cd:5c:97:be:c9:47:be:81:af:03: dd:e4:3f:05:66:af:e1:39:5b:26:46:d0:e1:52:1e: d4:51:00:67:0d:bc:7c:44:04:fe:4a:47:d8:10:cb: 9d:19:af:22:16:20:cf:14:46:9d:a3:99:4e:77:ca: 06:49:17:9c:79:18:12:ff:a5:05:08:3e:f0:ee:db: 51:57:4e:62:e7:a1:27:fa:5c:1f:a4:c8:61:96:bf: 09:ac:d8:f8:ef:10:cc:ef:ae:b1:be:31:f3:77:80: 39:d8:89:0f:5e:f8:08:27:e4:67:11:f7:b6:90:20: 28:9a:1f:7c:c0:17:3f:9e:0f:02:a6:60:26:92:f7: 14:65:82:f9:62:8c:76:64:c8:dc:a6:db:e3:5a:7b: 71:a2:f4:06:d7:9a:34:8e:03:ba:aa:c2:8b:93:e5: ec:a5:09:e2:9b:6e:ba:bc:f8:fc:b3:b8:14:13:88: 62:90:36:81:83:1f:c6:61:99:d0:11:b2:ba:88:78: e8:67:4c:e3:a8:e2:7e:0a:e5:b8:aa:43:16:a0:78: 7d:89:e7:20:69:fe:4c:a1:d5:4b:b6:ae:07:6b:10: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EB:7F:F3:1B:F9:E4:FF:31:CD:8B:3B:D4:A0:F2:AB:4F:8F:A0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/583ef1a7-afa1-3f3f-8974-76fbfecbd628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c0:e1:e5:bc:6f:02:8e:9e:bc:c5:58:55:a2:59:17:5a:b5: d2:6d:60:0c:05:0f:cd:60:f7:bd:8f:3d:7a:f1:c4:68:56:61: ca:61:cf:b7:23:26:c0:06:ae:af:43:d9:ec:12:b8:8b:1a:c1: 19:29:12:1b:71:db:69:68:97:ec:8a:59:ff:34:de:f5:cf:3b: c8:d5:3b:5f:5a:75:1c:7b:51:90:2f:3e:45:48:b2:e6:54:13: f7:bf:88:41:11:bb:b8:70:60:79:da:80:74:a9:69:63:63:85: 31:a6:df:32:2b:23:06:8c:e2:62:2b:6c:e4:8c:66:68:d4:51: 59:a3:eb:cd:b8:c3:47:67:75:f9:bb:1f:00:de:02:05:2f:3e: 35:45:8b:06:9e:0a:e6:62:eb:11:b7:ff:ca:3e:17:69:20:bb: e1:5d:24:75:80:e5:2c:01:1e:31:e3:b3:80:96:64:a2:9b:af: eb:79:4f:d5:35:47:fd:a6:11:4d:a6:95:9d:78:3f:40:c3:73: 9b:00:1b:77:15:6f:02:fa:3d:bf:39:05:49:70:61:3e:2d:64: 09:bc:fb:51:43:8f:1b:ac:62:59:49:67:7d:a6:95:70:73:ca: 56:30:db:f8:ea:55:24:d2:d1:9e:fb:16:97:37:b8:c8:d1:4b: 54:1c:1c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKng/J7NZv0PW7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MTMxZmUzNDktYzIwNS00NDliLWFiZDQtNTgyMTU0YzI3YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL0MqgaOLVFaIPAnR4YQUX9X1vd6KuZUVMu4 XZaC+k7/1s1cl77JR76BrwPd5D8FZq/hOVsmRtDhUh7UUQBnDbx8RAT+SkfYEMud Ga8iFiDPFEado5lOd8oGSReceRgS/6UFCD7w7ttRV05i56En+lwfpMhhlr8JrNj4 7xDM766xvjHzd4A52IkPXvgIJ+RnEfe2kCAomh98wBc/ng8CpmAmkvcUZYL5Yox2 ZMjcptvjWntxovQG15o0jgO6qsKLk+XspQnim266vPj8s7gUE4hikDaBgx/GYZnQ EbK6iHjoZ0zjqOJ+CuW4qkMWoHh9iecgaf5ModVLtq4HaxD9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7rf/Mb+eT/Mc2LO9Sg8qtPj6DSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTgzZWYxYTctYWZhMS0z ZjNmLTg5NzQtNzZmYmZlY2JkNjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXA4eW8bwKOnrzFWFWiWRdatdJtYAwFD81g972PPXrxxGhWYcphz7cj JsAGrq9D2ewSuIsawRkpEhtx22lol+yKWf803vXPO8jVO19adRx7UZAvPkVIsuZU E/e/iEERu7hwYHnagHSpaWNjhTGm3zIrIwaM4mIrbOSMZmjUUVmj6824w0dndfm7 HwDeAgUvPjVFiwaeCuZi6xG3/8o+F2kgu+FdJHWA5SwBHjHjs4CWZKKbr+t5T9U1 R/2mEU2mlZ14P0DDc5sAG3cVbwL6Pb85BUlwYT4tZAm8+1FDjxusYllJZ32mlXBz ylYw2/jqVSTS0Z77Fpc3uMjRS1QcHK8= -----END CERTIFICATE-----Generated at Mon Nov 25 01:03:14 2024 by rpki-client on console-ams.rpki-client.org