$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa File: 5b40db24-8ec4-3c0c-8532-bd6a84169001.roa (raw, json) Hash identifier: c8LjewwTcxsmmpZFTIwh2rPfZT45VQQX9j1vgl7wVBQ= Subject key identifier: 3E:F6:2F:09:34:78:FC:F1:E4:33:A4:12:F0:87:D9:70:D5:DC:A0:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0A092ED9CF9B9B447A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.242.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0a:09:2e:d9:cf:9b:9b:44:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=2d5f0963-94b3-4598-92da-32eb07b3494b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:51:c9:e5:81:25:c9:e2:dc:62:e7:8e:4f: 6c:92:d2:85:8c:46:03:b2:80:d6:ac:ee:29:49:b3: 59:03:1f:df:3d:39:bc:68:0c:7c:ba:f6:fb:6a:b7: 94:ed:b6:b0:8e:68:ab:00:fc:1b:6d:9a:24:10:23: 18:9f:27:86:8d:69:0d:54:d1:75:b7:64:d6:5d:48: d3:1b:1b:8e:8f:04:7c:64:9d:22:5f:f8:9a:cb:a3: e0:cf:f8:16:bd:ff:67:f4:85:16:5a:f9:08:ae:e0: d5:6c:fa:dd:23:7a:a8:2e:e1:4f:88:b9:4e:2a:b5: a8:87:45:fa:3e:8f:b7:24:53:59:af:84:0c:1c:16: 10:50:0d:02:42:13:13:cf:6a:02:7b:05:6d:f4:61: 35:70:32:58:d9:04:17:8a:58:e6:b4:2e:1e:f1:bb: 28:81:90:6f:a7:75:9c:db:fa:91:3f:c7:08:99:51: d1:62:e4:7d:78:51:24:b2:d0:61:58:91:34:48:2e: bb:7d:28:82:6c:c2:2f:7a:e0:df:10:88:a3:2e:13: 3f:1b:3e:a9:c2:af:b5:b4:15:a8:a0:be:86:0f:6c: 8d:ba:52:d7:87:6d:d5:6c:04:a2:60:e6:0f:e1:95: 8e:1d:fd:bf:3a:85:77:ae:37:95:1e:63:73:ee:3f: 68:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F6:2F:09:34:78:FC:F1:E4:33:A4:12:F0:87:D9:70:D5:DC:A0:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2a:0b:d0:24:c1:8f:41:b6:ec:03:6f:01:d4:20:c3:c9:f8: 3b:b3:27:ba:80:bf:5a:56:5e:36:3c:e4:34:40:49:2b:13:4d: 59:9c:d9:dd:09:c2:4b:29:82:ab:eb:be:03:b1:48:c4:bb:01: 82:a7:36:67:ba:e1:09:82:4b:21:fb:db:5f:3b:56:7d:7d:f8: ce:73:73:fa:4a:d3:78:3a:33:19:9a:91:b8:00:6f:45:d1:19: b5:bb:f1:97:68:c1:86:51:f5:01:99:4c:f6:ea:7b:1a:ed:54: 24:c1:f9:55:ec:72:38:08:8c:ba:9b:95:84:a8:11:63:34:a2: 09:52:5e:d9:8b:f8:8d:db:26:09:c5:5c:c8:58:b0:70:b6:9d: 21:9c:8d:6a:54:10:a0:1e:53:bf:f4:81:26:76:ab:63:68:28: d7:41:3f:d7:9b:1a:4f:a4:ed:13:4d:df:c9:eb:35:3b:74:e3: 39:c5:d4:e3:92:0c:b4:ea:8a:8e:82:43:5a:6e:e1:29:98:03: 97:e9:63:c8:e0:b8:7b:9d:98:da:b4:4d:3a:8f:be:6d:c4:46: 0c:58:ed:a6:1b:56:36:61:4c:6c:c5:cd:89:c3:84:bd:a1:28: 2e:f5:98:25:6d:f2:7b:42:21:5c:cd:49:d3:aa:a7:22:25:1c: 9d:9f:67:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwoJLtnPm5tEekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MmQ1ZjA5NjMtOTRiMy00NTk4LTkyZGEtMzJlYjA3YjM0OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjlRyeWBJcni3GLnjk9sktKFjEYDsoDWrO4p SbNZAx/fPTm8aAx8uvb7areU7bawjmirAPwbbZokECMYnyeGjWkNVNF1t2TWXUjT GxuOjwR8ZJ0iX/iay6Pgz/gWvf9n9IUWWvkIruDVbPrdI3qoLuFPiLlOKrWoh0X6 Po+3JFNZr4QMHBYQUA0CQhMTz2oCewVt9GE1cDJY2QQXiljmtC4e8bsogZBvp3Wc 2/qRP8cImVHRYuR9eFEkstBhWJE0SC67fSiCbMIveuDfEIijLhM/Gz6pwq+1tBWo oL6GD2yNulLXh23VbASiYOYP4ZWOHf2/OoV3rjeVHmNz7j9oOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD72Lwk0ePzx5DOkEvCH2XDV3KCOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWI0MGRiMjQtOGVjNC0z YzBjLTg1MzItYmQ2YTg0MTY5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIqC9AkwY9BtuwDbwHUIMPJ+DuzJ7qAv1pWXjY85DRASSsTTVmc2d0J wkspgqvrvgOxSMS7AYKnNme64QmCSyH72187Vn19+M5zc/pK03g6MxmakbgAb0XR GbW78ZdowYZR9QGZTPbqexrtVCTB+VXscjgIjLqblYSoEWM0oglSXtmL+I3bJgnF XMhYsHC2nSGcjWpUEKAeU7/0gSZ2q2NoKNdBP9ebGk+k7RNN38nrNTt04znF1OOS DLTqio6CQ1pu4SmYA5fpY8jguHudmNq0TTqPvm3ERgxY7aYbVjZhTGzFzYnDhL2h KC71mCVt8ntCIVzNSdOqpyIlHJ2fZ+g= -----END CERTIFICATE-----Generated at Mon Nov 25 01:03:15 2024 by rpki-client on console-ams.rpki-client.org