$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa File: 6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa (raw, json) Hash identifier: 1otFEoJZYamamePTmIa8hewOaPiVgzmkb3y8oPDTeh4= Subject key identifier: 34:FA:95:18:79:55:C2:50:BE:54:8E:23:87:BE:97:E8:AB:8C:D5:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E3EC73BFF6F0FC6E32C10 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:3e:c7:3b:ff:6f:0f:c6:e3:2c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=14500409-db59-4218-b29e-f4ca1dc32494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:0e:8e:64:8b:9c:58:37:3e:d3:e1:e4:14: db:85:4d:21:05:1e:52:91:61:ea:df:39:ca:97:e8: 2d:84:2d:f8:eb:48:e9:8b:dc:02:b1:fc:f7:f7:41: 25:a1:b9:41:ab:31:01:57:13:1b:19:78:dc:d5:27: c6:c7:00:64:f3:81:85:67:e0:cb:45:dd:79:f0:57: 1c:f3:71:12:0b:dd:1c:c9:23:43:ad:ae:8a:f9:a4: 63:0e:18:5f:60:ce:7b:5b:4e:03:ea:74:e2:b0:98: 47:5a:50:45:e0:16:07:bb:62:b5:33:2b:29:ba:46: 04:53:1b:38:07:5d:b4:7c:96:59:6a:0c:4f:ab:4a: 3e:0f:e0:e7:2b:52:be:f7:18:2b:5c:92:8a:5d:a7: 6d:fe:86:1c:18:ff:93:da:8e:3b:8b:94:c6:5d:db: 5d:03:35:dd:24:f0:34:c6:a1:5a:4d:30:11:22:b2: 01:a3:12:12:1e:49:83:d4:51:54:9e:f2:fd:a5:99: 60:8d:6b:6d:3e:99:e8:b5:77:f3:8d:42:23:dd:40: 41:c5:34:16:91:0f:25:f4:cd:84:2c:24:fc:d2:0f: 41:dd:d6:7d:0f:52:c7:5a:15:84:94:c2:15:c5:44: 45:a3:e3:38:8a:ad:05:c4:10:de:43:4e:9b:c1:88: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FA:95:18:79:55:C2:50:BE:54:8E:23:87:BE:97:E8:AB:8C:D5:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:76:8e:0b:61:90:56:f4:61:bf:ce:7a:78:56:b0:9e:53:18: a4:6e:55:80:22:a6:f4:a9:c9:ca:24:cf:35:1c:15:1a:17:19: 80:a6:70:ad:13:41:98:b6:5a:65:74:f8:c1:8b:a9:2d:3c:8e: bc:61:7b:d9:70:e6:28:e8:cc:ef:3b:2c:a6:40:f0:fd:bf:3b: 7b:15:da:e9:e1:c5:45:1e:7d:82:94:32:06:b8:3a:1d:c3:80: 89:62:81:37:d4:b3:60:c5:d1:46:04:eb:5a:11:7f:d1:6e:4f: 03:81:e4:da:23:50:14:96:a1:3a:7e:b8:11:8f:7b:b9:34:84: 65:19:18:6b:a5:ff:c4:39:48:ce:32:32:fe:43:c8:3b:81:d2: c9:3e:b3:81:4f:93:52:a8:1d:2f:d2:96:60:1d:3f:36:df:cf: 88:86:a4:a9:86:d9:d2:fd:2f:fb:2a:cb:f7:19:b8:d1:d5:86: fd:69:5b:38:95:6b:04:76:02:01:f0:ce:0b:83:d9:f6:89:89: 30:60:48:12:3c:de:27:ff:58:f2:8a:1a:71:7b:7a:43:7f:a3: bf:b7:c1:7e:9b:ae:26:e2:75:49:a0:e7:f7:e4:fb:b2:b9:79: 6b:c0:38:8d:48:fa:3d:5d:b4:58:0d:6f:82:5b:cc:fb:b4:af: 65:b4:fe:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPj7HO/9vD8bjLBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MTQ1MDA0MDktZGI1OS00MjE4LWIyOWUtZjRjYTFkYzMyNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ0OjmSLnFg3PtPh5BTbhU0hBR5SkWHq3znK l+gthC3460jpi9wCsfz390EloblBqzEBVxMbGXjc1SfGxwBk84GFZ+DLRd158Fcc 83ESC90cySNDra6K+aRjDhhfYM57W04D6nTisJhHWlBF4BYHu2K1MyspukYEUxs4 B120fJZZagxPq0o+D+DnK1K+9xgrXJKKXadt/oYcGP+T2o47i5TGXdtdAzXdJPA0 xqFaTTARIrIBoxISHkmD1FFUnvL9pZlgjWttPpnotXfzjUIj3UBBxTQWkQ8l9M2E LCT80g9B3dZ9D1LHWhWElMIVxURFo+M4iq0FxBDeQ06bwYh8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT6lRh5VcJQvlSOI4e+l+irjNXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRkOWMwZjUtNTg0Ny0z YjhmLTkxNmQtM2U5ZWIyMTkwMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR2jgthkFb0Yb/OenhWsJ5TGKRuVYAipvSpycokzzUcFRoXGYCmcK0T QZi2WmV0+MGLqS08jrxhe9lw5ijozO87LKZA8P2/O3sV2unhxUUefYKUMga4Oh3D gIligTfUs2DF0UYE61oRf9FuTwOB5NojUBSWoTp+uBGPe7k0hGUZGGul/8Q5SM4y Mv5DyDuB0sk+s4FPk1KoHS/SlmAdPzbfz4iGpKmG2dL9L/sqy/cZuNHVhv1pWziV awR2AgHwzguD2faJiTBgSBI83if/WPKKGnF7ekN/o7+3wX6bribidUmg5/fk+7K5 eWvAOI1I+j1dtFgNb4JbzPu0r2W0/qo= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org