$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json) Hash identifier: ffqHuzFJmo7y4IX9O8RAsQ7boaMgjRRldPCcb2awpNE= Subject key identifier: AE:C0:0C:3C:74:0E:26:0F:19:4C:56:27:E2:72:35:10:D9:D1:81:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4B1D8844B5A8EB85DCC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4b:1d:88:44:b5:a8:eb:85:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=144de80b-9ba9-4d4d-bb6d-8a41a75fc111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:f7:5a:90:c1:71:8e:7a:a3:4c:c2:df:d2: 13:e9:6d:85:cd:d7:c1:e0:9d:9e:d0:db:9d:58:a8: 14:af:aa:86:86:f6:43:44:92:26:3d:9c:7b:d0:7b: bb:2b:27:45:e3:06:8c:e8:69:b9:ef:0b:fd:11:c3: bb:da:c2:c8:2b:c9:03:d3:cd:52:91:50:94:91:ee: 9c:27:88:7e:fa:28:e7:b2:ae:e6:f8:5a:d6:9c:ae: a8:54:b8:3b:60:ef:0e:72:a4:55:d1:e0:17:40:15: 15:84:ae:1c:2d:5c:c6:55:91:08:90:62:3c:20:23: f7:db:f3:8e:c7:bf:7b:ae:9c:09:02:2c:c4:33:44: 6a:cb:ce:93:2a:a8:a0:b4:1c:af:42:d5:4d:a6:2f: 0f:9f:73:11:c7:48:ab:bf:5e:4e:23:b0:80:3b:02: 16:66:05:13:48:a4:37:95:b0:02:92:a2:fe:de:03: c4:3d:e3:3b:10:62:3d:4e:25:6f:4f:c6:c3:61:90: 25:23:c0:f5:55:b4:0c:04:1d:c4:a7:2e:a3:0c:07: 5d:af:b2:b9:a4:f3:c6:a3:bb:73:95:8f:b0:5f:8c: eb:57:e7:55:08:1c:7b:a7:b9:07:2f:da:f8:cd:9a: bd:ed:31:f7:98:8a:4d:fb:62:c1:03:19:3f:63:98: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C0:0C:3C:74:0E:26:0F:19:4C:56:27:E2:72:35:10:D9:D1:81:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:99:6a:e2:c3:4f:e8:26:0c:0e:97:45:18:fa:0e:e7:03:c4: ee:b9:da:64:9a:30:a2:c2:a0:5a:38:46:63:72:d5:d8:1a:45: e2:13:d3:c7:34:41:ac:5e:f5:89:03:36:af:96:8e:4e:0b:84: ec:8f:49:0d:60:51:89:85:01:03:65:d4:3d:6f:23:15:d3:b5: 10:20:f6:1f:28:18:f4:5a:2f:e1:cc:cb:22:45:04:c2:2b:91: 44:83:c9:85:de:4c:e7:75:30:d2:75:bc:d0:25:e7:dd:da:27: d6:51:9c:f8:a9:75:66:ed:5a:de:b8:2c:70:e1:64:d1:b3:f8: 36:c6:f3:a0:01:6d:f5:5a:73:cc:3b:93:87:6f:31:82:d3:00: 80:5c:14:8e:e9:23:18:54:80:d5:78:b4:47:df:0c:9a:33:8c: d2:63:8a:e3:47:48:de:c8:62:ec:19:c9:af:8b:0b:16:a8:c0: d3:ca:55:37:e7:6d:a5:06:96:f4:c2:92:23:70:48:ef:69:56: dd:7e:93:c7:7f:7f:75:15:b5:36:04:82:08:8b:89:3c:84:19: bc:ad:3f:45:96:87:d9:f3:46:0a:d9:74:e1:78:be:31:90:57: 36:34:7f:70:d6:d1:6d:18:0e:da:47:fd:da:13:90:76:55:97: 71:a9:ad:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPksdiES1qOuF3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MTQ0ZGU4MGItOWJhOS00ZDRkLWJiNmQtOGE0MWE3NWZjMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgij3WpDBcY56o0zC39IT6W2FzdfB4J2e0Nud WKgUr6qGhvZDRJImPZx70Hu7KydF4waM6Gm57wv9EcO72sLIK8kD081SkVCUke6c J4h++ijnsq7m+FrWnK6oVLg7YO8OcqRV0eAXQBUVhK4cLVzGVZEIkGI8ICP32/OO x797rpwJAizEM0Rqy86TKqigtByvQtVNpi8Pn3MRx0irv15OI7CAOwIWZgUTSKQ3 lbACkqL+3gPEPeM7EGI9TiVvT8bDYZAlI8D1VbQMBB3Epy6jDAddr7K5pPPGo7tz lY+wX4zrV+dVCBx7p7kHL9r4zZq97TH3mIpN+2LBAxk/Y5iXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7ADDx0DiYPGUxWJ+JyNRDZ0YEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5MDY1OTMtNzUxOC0z NzE3LTkzYTEtMzZmNDE1NjI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiZauLDT+gmDA6XRRj6DucDxO652mSaMKLCoFo4RmNy1dgaReIT08c0 Qaxe9YkDNq+Wjk4LhOyPSQ1gUYmFAQNl1D1vIxXTtRAg9h8oGPRaL+HMyyJFBMIr kUSDyYXeTOd1MNJ1vNAl593aJ9ZRnPipdWbtWt64LHDhZNGz+DbG86ABbfVac8w7 k4dvMYLTAIBcFI7pIxhUgNV4tEffDJozjNJjiuNHSN7IYuwZya+LCxaowNPKVTfn baUGlvTCkiNwSO9pVt1+k8d/f3UVtTYEggiLiTyEGbytP0WWh9nzRgrZdOF4vjGQ VzY0f3DW0W0YDtpH/doTkHZVl3GprWM= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:36 2024 by rpki-client on console-ams.rpki-client.org