$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa File: 7271c280-8ac0-3c17-ac66-d4537440da47.roa (raw, json) Hash identifier: gt4g3qdQHoDlsfI485eplmKSJHNXwB9aWdqQCtNpAJk= Subject key identifier: 4C:DB:93:22:FC:81:4E:2D:89:B2:02:A7:C7:A3:58:F4:BC:17:86:0E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0F1C9FF8D6B8F8FABA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0f:1c:9f:f8:d6:b8:f8:fa:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=56e1dd4d-054b-4848-8afb-dd8f0f9ac93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:2d:e8:97:01:2c:42:f4:aa:06:97:61:2b: 74:04:f2:58:a4:2f:d4:7e:75:d6:f8:ae:4a:ed:75: 12:66:b6:67:98:90:37:44:09:d9:a3:3a:37:f4:2a: e8:95:de:ef:2a:be:26:da:33:54:7f:4d:f2:08:5d: 43:5c:82:d4:dd:b5:95:69:fb:99:1d:ec:7d:13:c7: eb:8e:97:f1:9a:c3:e0:75:f2:a0:23:a1:05:06:7c: 58:6d:51:74:71:6d:b2:3e:7d:78:24:e2:07:88:ee: b8:30:65:70:5a:39:9b:ef:33:d3:70:af:83:aa:77: e4:4e:d9:a6:ef:b1:4a:b7:0d:e6:3a:ca:c0:4f:a2: d9:26:6c:49:92:fa:44:af:6b:1a:27:c3:af:16:77: 6a:c7:f0:68:a7:80:0c:80:57:fd:80:1b:3b:cb:9d: 55:c8:62:50:d0:e3:bf:49:21:29:ca:3a:5d:5e:ed: 50:c0:0b:43:5a:66:ed:af:58:67:a1:f9:86:30:31: 81:e6:c2:ff:b1:6f:cc:e7:b4:30:2f:5e:4d:2d:1b: 78:0c:26:ea:ab:54:d3:f0:62:bb:7e:46:f6:10:fe: 06:ec:ca:6f:35:41:ec:24:6d:6c:dd:4e:aa:65:64: f8:89:7c:a9:e0:d7:3e:53:4a:2f:9d:25:b5:63:87: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DB:93:22:FC:81:4E:2D:89:B2:02:A7:C7:A3:58:F4:BC:17:86:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:78:c9:e6:94:2b:0d:96:a3:e9:b6:bd:22:aa:ec:65:04:de: 03:ff:f6:32:b8:91:f6:8b:78:f6:f3:7e:a2:45:08:50:f0:82: 10:da:b9:8f:ed:c2:ab:0b:03:aa:65:60:cc:44:a6:35:8e:5d: 75:2b:51:ca:3a:99:e6:7e:fc:a4:8d:5e:7e:93:d8:a8:11:84: b8:69:5f:f8:0f:ce:24:00:a5:b8:02:67:62:1d:37:da:c0:c5: e4:ad:ed:39:6e:28:a0:0e:6b:33:b5:36:db:72:14:b4:ff:d3: f6:85:30:91:df:dc:1b:76:0c:a0:0a:e8:d5:1e:cd:ee:a7:8e: 6c:8c:6b:5d:a3:68:d9:4a:0a:5e:bc:d9:03:62:95:49:fd:b3: ed:56:e9:07:84:80:5a:c6:b2:1d:d6:8d:07:0a:e0:54:05:17: ba:91:e4:47:82:c5:91:b1:8b:7d:5d:e7:80:bb:dd:e6:92:11: 64:f6:b9:fe:3b:2f:9b:6a:53:ff:2c:1d:f2:2f:ea:ed:3e:bc: ec:91:1e:2d:e2:55:4d:73:e3:f8:96:9d:fb:9a:37:39:da:04: 84:44:01:b1:b9:de:82:d5:44:cd:17:b7:6f:bd:a8:7e:83:79: 0d:3b:16:2b:e5:1e:8f:29:a0:40:04:eb:7a:3a:91:cf:68:e9: a4:8b:ce:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw8cn/jWuPj6uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NTZlMWRkNGQtMDU0Yi00ODQ4LThhZmItZGQ4ZjBmOWFjOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7wt6JcBLEL0qgaXYSt0BPJYpC/UfnXW+K5K 7XUSZrZnmJA3RAnZozo39Crold7vKr4m2jNUf03yCF1DXILU3bWVafuZHex9E8fr jpfxmsPgdfKgI6EFBnxYbVF0cW2yPn14JOIHiO64MGVwWjmb7zPTcK+DqnfkTtmm 77FKtw3mOsrAT6LZJmxJkvpEr2saJ8OvFndqx/Bop4AMgFf9gBs7y51VyGJQ0OO/ SSEpyjpdXu1QwAtDWmbtr1hnofmGMDGB5sL/sW/M57QwL15NLRt4DCbqq1TT8GK7 fkb2EP4G7MpvNUHsJG1s3U6qZWT4iXyp4Nc+U0ovnSW1Y4dxWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzbkyL8gU4tibICp8ejWPS8F4YOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzI3MWMyODAtOGFjMC0z YzE3LWFjNjYtZDQ1Mzc0NDBkYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA94yeaUKw2Wo+m2vSKq7GUE3gP/9jK4kfaLePbzfqJFCFDwghDauY/t wqsLA6plYMxEpjWOXXUrUco6meZ+/KSNXn6T2KgRhLhpX/gPziQApbgCZ2IdN9rA xeSt7TluKKAOazO1NttyFLT/0/aFMJHf3Bt2DKAK6NUeze6njmyMa12jaNlKCl68 2QNilUn9s+1W6QeEgFrGsh3WjQcK4FQFF7qR5EeCxZGxi31d54C73eaSEWT2uf47 L5tqU/8sHfIv6u0+vOyRHi3iVU1z4/iWnfuaNznaBIREAbG53oLVRM0Xt2+9qH6D eQ07FivlHo8poEAE63o6kc9o6aSLziE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:45 2024 by rpki-client on console-fra.rpki-client.org