$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa File: 612d23fb-4960-3992-9900-1108e1d14c07.roa (raw, json) Hash identifier: bQU8UMMdVHXrK77MgIfjGBrMJI4Pd4P3TT5JRXZxx7w= Subject key identifier: 70:A6:85:E1:BD:FD:05:9A:57:37:3F:E7:69:60:65:2F:A8:AB:99:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B097AA1A281A517217900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.242.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:09:7a:a1:a2:81:a5:17:21:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=6538cbc9-e5af-4024-8302-4a5cd6e1375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:da:d0:d5:82:4a:5b:e8:c7:29:76:87:e4: 81:62:9f:b1:8e:9f:5f:3f:68:bd:9b:9f:83:b9:6e: 56:30:5f:d4:15:e6:02:ca:dd:8d:7f:26:ff:79:8a: 2b:44:04:e7:23:a2:a6:fa:cc:12:f1:4a:1b:ac:49: 9c:d3:7a:0b:e6:fe:a6:ac:e0:9a:8e:a4:b4:98:51: 6b:a1:63:bc:d3:80:c3:7b:bc:ed:fb:a1:30:a2:96: c2:2d:80:29:4a:c7:86:42:ec:12:a3:d1:7f:a6:ab: 2d:2d:26:b2:34:b5:9c:0a:e7:95:80:98:f1:8a:22: 7a:c7:7a:97:e8:71:ee:aa:e9:5d:11:9d:73:60:d6: b2:8b:2d:54:53:86:0d:36:b8:5c:9c:b3:08:20:5d: b9:dd:c1:03:7a:22:a9:84:4d:7a:2a:e0:2c:18:04: 0f:c2:ef:94:30:0d:10:ce:fe:37:06:a2:20:e8:4e: 4e:8c:3c:3c:37:a1:1e:47:43:49:1f:21:0e:1f:ed: aa:20:be:ca:71:5c:1d:85:5e:26:20:18:03:5e:fb: 22:09:1e:65:95:e2:45:6f:c4:28:d0:0d:17:a0:79: 81:1c:96:ec:dc:74:a4:0c:b5:68:45:d8:50:58:fd: 64:63:04:ca:8b:c9:16:4f:18:5a:17:aa:fd:7c:d1: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:85:E1:BD:FD:05:9A:57:37:3F:E7:69:60:65:2F:A8:AB:99:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/612d23fb-4960-3992-9900-1108e1d14c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b3:cd:cc:7a:ef:7d:3d:c3:9a:e1:53:a8:d6:52:91:a4:58: f0:34:03:73:89:be:de:f3:3b:ac:c5:77:39:bc:89:b8:73:44: 23:e5:5b:a0:8d:d7:52:7f:74:97:28:67:16:2a:ee:4d:68:4c: e2:6f:9d:1a:70:79:2b:aa:90:8b:16:0f:0c:b1:ef:9f:c3:bc: 51:43:ac:8f:25:6a:55:af:f8:50:57:b1:08:75:91:17:e9:b1: e8:c2:3c:c6:da:d3:30:01:b5:93:bf:ec:d8:19:c7:13:79:17: 43:bf:63:04:74:ba:51:a7:64:52:fb:cd:bc:1f:ae:ff:55:70: ff:6f:01:5b:1d:ec:e3:15:c4:65:97:5d:90:75:24:14:37:cb: 14:e6:d7:7d:d0:c7:bd:a6:09:8a:af:25:e2:a6:2c:66:a6:93: 3d:46:83:6d:50:5b:da:d0:91:4a:eb:b8:be:35:69:fc:73:27: d1:23:b5:db:c6:1d:f1:34:8f:66:64:23:a2:88:35:1d:1d:11: 16:80:eb:09:ee:83:81:c2:96:ad:63:64:51:41:cf:81:31:01: 3d:cf:58:a5:2a:b8:f1:5d:22:83:bc:77:03:46:5e:4e:66:98: 11:ea:d7:2c:6d:6b:3c:ec:73:d8:3e:d7:6d:99:91:d5:37:96: 72:3c:16:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwl6oaKBpRcheQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NjUzOGNiYzktZTVhZi00MDI0LTgzMDItNGE1Y2Q2ZTEzNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkra0NWCSlvoxyl2h+SBYp+xjp9fP2i9m5+D uW5WMF/UFeYCyt2Nfyb/eYorRATnI6Km+swS8UobrEmc03oL5v6mrOCajqS0mFFr oWO804DDe7zt+6EwopbCLYApSseGQuwSo9F/pqstLSayNLWcCueVgJjxiiJ6x3qX 6HHuquldEZ1zYNayiy1UU4YNNrhcnLMIIF253cEDeiKphE16KuAsGAQPwu+UMA0Q zv43BqIg6E5OjDw8N6EeR0NJHyEOH+2qIL7KcVwdhV4mIBgDXvsiCR5lleJFb8Qo 0A0XoHmBHJbs3HSkDLVoRdhQWP1kYwTKi8kWTxhaF6r9fNG29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCmheG9/QWaVzc/52lgZS+oq5l5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjEyZDIzZmItNDk2MC0z OTkyLTk5MDAtMTEwOGUxZDE0YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIezzcx67309w5rhU6jWUpGkWPA0A3OJvt7zO6zFdzm8ibhzRCPlW6CN 11J/dJcoZxYq7k1oTOJvnRpweSuqkIsWDwyx75/DvFFDrI8lalWv+FBXsQh1kRfp sejCPMba0zABtZO/7NgZxxN5F0O/YwR0ulGnZFL7zbwfrv9VcP9vAVsd7OMVxGWX XZB1JBQ3yxTm133Qx72mCYqvJeKmLGamkz1Gg21QW9rQkUrruL41afxzJ9EjtdvG HfE0j2ZkI6KINR0dERaA6wnug4HClq1jZFFBz4ExAT3PWKUquPFdIoO8dwNGXk5m mBHq1yxtazzsc9g+122ZkdU3lnI8Fjg= -----END CERTIFICATE-----Generated at Fri Nov 22 01:35:51 2024 by rpki-client on console-ams.rpki-client.org