$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/674c3fa0-ee7d-322e-92f9-96a5049c2151.roa File: 674c3fa0-ee7d-322e-92f9-96a5049c2151.roa (raw, json) Hash identifier: hMddGdSU6rVSdD3k3QgBhAvuJcjTclQjkDFM8GcIP9s= Subject key identifier: FD:4E:4B:D4:AA:1A:C4:8D:8E:C0:CA:9E:81:29:1E:48:F1:D3:5C:37 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A74FF8E88AB6EFC16B860 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/674c3fa0-ee7d-322e-92f9-96a5049c2151.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.242.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:74:ff:8e:88:ab:6e:fc:16:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=3e32abfe-7845-4592-a1d5-28204dc68183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:3f:e1:9e:7a:30:37:66:48:75:cd:8f:d5: 8c:4d:71:85:70:f9:1f:9f:41:cb:19:d9:5d:67:0f: 3f:9c:4b:c3:88:bb:44:b8:79:81:68:1f:04:04:a5: bb:fd:a6:60:10:81:ea:9d:16:b4:12:eb:80:f8:8a: f5:b9:f6:86:bf:00:47:b2:cb:64:3e:18:7d:8f:a6: 5e:e0:0a:c6:e9:f8:ff:30:ba:e3:b0:e8:17:f3:2b: ba:1c:23:c8:9b:7a:b2:96:53:87:19:7f:0a:77:c9: 08:11:9f:f3:4d:4f:59:67:1d:d7:24:52:a0:ce:86: 41:16:35:e5:c7:2c:28:c2:d0:6f:e7:ac:6e:ba:6a: 7a:8c:aa:62:ed:8a:0e:be:44:ac:83:03:e4:6c:55: cd:72:fb:00:1d:27:d3:e8:c0:e6:e0:7e:0f:7c:f6: d1:bc:98:f2:cf:a6:20:1c:eb:7c:7b:c6:c9:39:fd: 6e:2a:50:cf:c7:8c:b6:7f:76:c1:2a:f1:a2:ce:cb: 55:ff:27:53:25:1d:e8:47:06:2c:da:59:49:78:15: f1:ad:cd:72:0e:69:fc:95:fd:4e:72:82:7e:28:47: 15:5f:ae:44:4f:1d:68:30:03:b3:90:57:5c:61:2d: 8b:f6:50:99:81:94:7b:ec:1e:37:2c:4d:46:6d:ef: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:4B:D4:AA:1A:C4:8D:8E:C0:CA:9E:81:29:1E:48:F1:D3:5C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/674c3fa0-ee7d-322e-92f9-96a5049c2151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0c:98:eb:19:46:b0:e6:7c:81:64:49:9a:21:29:e5:74:f9: 2a:36:6f:cc:c1:bc:68:17:ab:d0:03:ab:aa:2c:79:b7:67:e5: 16:62:5f:94:08:ba:d9:4b:1c:b4:6c:49:fe:d2:ff:bd:1f:81: 7b:16:2f:61:4f:36:4e:66:60:08:49:d5:43:c7:1b:99:f3:95: 62:9d:d2:0d:ef:9d:f5:ea:9d:5b:80:57:04:07:61:2f:d8:90: 94:90:3d:50:1c:47:57:f8:9d:1a:a7:fb:37:5f:fc:3d:22:e0: 88:4f:4e:c5:2f:c1:94:52:86:55:16:91:79:02:23:3a:0e:84: 99:37:5c:57:a5:e6:32:5d:15:bf:fc:34:8a:e6:29:72:fe:ce: 41:ea:41:11:09:04:b7:45:c1:0d:3f:32:e4:90:ea:5a:be:01: ee:a7:bf:1f:10:33:3b:4d:b5:62:2c:88:04:3b:42:87:13:09: 8a:18:9a:b3:4f:13:a0:eb:21:ac:51:e6:e8:43:3f:03:32:cb: 0b:e3:77:56:99:ac:83:c5:e9:c6:f6:3d:41:e3:95:9b:31:e4: 98:5f:0e:bd:47:1d:c9:e7:d2:95:a2:a3:d6:24:61:55:1a:32: c5:f1:96:3d:db:b3:db:1f:4e:02:bc:07:b6:14:c0:f3:6c:85: 82:bc:33:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnT/joirbvwWuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk M2UzMmFiZmUtNzg0NS00NTkyLWExZDUtMjgyMDRkYzY4MTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihk/4Z56MDdmSHXNj9WMTXGFcPkfn0HLGdld Zw8/nEvDiLtEuHmBaB8EBKW7/aZgEIHqnRa0EuuA+Ir1ufaGvwBHsstkPhh9j6Ze 4ArG6fj/MLrjsOgX8yu6HCPIm3qyllOHGX8Kd8kIEZ/zTU9ZZx3XJFKgzoZBFjXl xywowtBv56xuump6jKpi7YoOvkSsgwPkbFXNcvsAHSfT6MDm4H4PfPbRvJjyz6Yg HOt8e8bJOf1uKlDPx4y2f3bBKvGizstV/ydTJR3oRwYs2llJeBXxrc1yDmn8lf1O coJ+KEcVX65ETx1oMAOzkFdcYS2L9lCZgZR77B43LE1Gbe+QQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1OS9SqGsSNjsDKnoEpHkjx01w3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjc0YzNmYTAtZWU3ZC0z MjJlLTkyZjktOTZhNTA0OWMyMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8MmOsZRrDmfIFkSZohKeV0+So2b8zBvGgXq9ADq6osebdn5RZiX5QI utlLHLRsSf7S/70fgXsWL2FPNk5mYAhJ1UPHG5nzlWKd0g3vnfXqnVuAVwQHYS/Y kJSQPVAcR1f4nRqn+zdf/D0i4IhPTsUvwZRShlUWkXkCIzoOhJk3XFel5jJdFb/8 NIrmKXL+zkHqQREJBLdFwQ0/MuSQ6lq+Ae6nvx8QMztNtWIsiAQ7QocTCYoYmrNP E6DrIaxR5uhDPwMyywvjd1aZrIPF6cb2PUHjlZsx5JhfDr1HHcnn0pWio9YkYVUa MsXxlj3bs9sfTgK8B7YUwPNshYK8MyQ= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:41 2024 by rpki-client on console-fra.rpki-client.org