$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bffaa8-ed31-3be1-bd8f-866717cd5c99.roa File: 73bffaa8-ed31-3be1-bd8f-866717cd5c99.roa (raw, json) Hash identifier: elCWL2i0n0cf6lSHCKfBqkcR2TGdTb+qJwgC4IOjPcE= Subject key identifier: 64:F8:3D:39:98:41:E7:98:30:9E:22:A3:B7:C9:61:11:AB:18:10:1C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D889FBE7FA035232D1000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bffaa8-ed31-3be1-bd8f-866717cd5c99.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:88:9f:be:7f:a0:35:23:2d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=3f83af13-c094-4d01-8ddc-af6f746bbf0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:87:d6:71:d5:16:a4:99:3d:c8:72:62:7a:1a: dd:53:5d:11:15:3d:26:4e:c2:43:cb:d0:5d:a5:c2: 45:f7:0c:85:5a:b3:a7:c7:4f:fe:fe:d9:86:91:31: 11:9c:73:01:81:a4:a3:7e:49:88:53:76:c1:fb:c7: 0b:32:14:3f:dc:31:04:d0:20:db:f2:5a:53:81:e4: cf:95:e7:cd:4f:a9:6a:2b:e0:77:16:fc:d9:0c:c4: 15:3c:11:2f:23:fa:1f:22:2b:fa:e9:d3:14:d4:80: ac:32:99:02:c5:5c:6d:21:30:8e:ba:74:10:68:21: ae:d4:6f:a1:a9:78:72:1f:39:4e:96:99:55:9a:9b: d1:3d:60:71:3e:58:9f:3b:45:6f:a8:54:6d:3e:60: 80:ed:48:a4:4d:36:ba:b3:ab:95:00:c4:22:19:64: b5:b0:6a:f3:d2:24:82:5c:c4:c2:0d:aa:b9:50:e1: b5:7f:2f:14:8c:03:ea:da:07:18:6a:4f:54:38:59: 0b:d6:3b:26:f4:db:78:b3:4c:07:83:4c:07:cb:d0: e4:b3:56:82:c4:67:cd:5b:67:fa:86:7f:0e:ef:06: 42:c4:f6:8b:6c:d7:a6:d0:16:74:0e:19:28:1c:d7: cf:0a:5f:20:a0:c2:36:a9:50:2d:1b:75:e0:28:fa: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:3D:39:98:41:E7:98:30:9E:22:A3:B7:C9:61:11:AB:18:10:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/73bffaa8-ed31-3be1-bd8f-866717cd5c99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cc:2c:3c:a5:5a:a4:44:e7:db:6e:ed:d8:32:e7:8d:d7:b3: ba:18:f2:da:ed:05:23:69:66:e0:9a:6a:94:42:bb:ef:98:ed: 45:40:84:d4:51:37:e2:d0:03:96:7a:e1:08:77:b6:22:9c:9a: 79:dd:61:41:e4:17:a4:c3:15:5e:b3:da:b0:bd:7d:13:02:34: c6:fb:21:88:92:65:16:0a:e8:4b:81:ad:f8:be:ee:ae:74:e8: 30:6c:9d:f9:21:f6:c6:dd:ec:c2:16:bd:9d:ba:d5:94:69:a8: fc:ca:f6:4a:0e:d0:39:8a:9d:f1:f6:56:3e:ad:0b:ff:3c:59: 11:51:2b:e6:38:06:28:49:92:f5:34:ed:f1:04:eb:2c:36:75: 32:26:0a:8b:8a:f7:c9:7f:3d:aa:a1:13:f6:28:00:74:f4:1d: 3b:e8:61:07:7e:c5:93:37:c5:d1:90:c9:44:ef:27:7c:1d:9a: 8c:14:24:2a:3f:af:50:25:f7:29:ea:8a:a6:a7:b4:b1:72:16: 03:dd:27:16:1e:61:05:80:bd:13:5e:39:0d:10:18:f7:0f:b0: d0:23:9e:33:1d:9d:05:e1:d5:74:bc:ee:36:c6:be:a0:ff:76: e8:a7:af:c2:5d:e2:98:32:53:a1:a7:e3:91:2f:06:b8:c6:a7: 14:87:a1:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPYifvn+gNSMtEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk M2Y4M2FmMTMtYzA5NC00ZDAxLThkZGMtYWY2Zjc0NmJiZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhofWcdUWpJk9yHJiehrdU10RFT0mTsJDy9Bd pcJF9wyFWrOnx0/+/tmGkTERnHMBgaSjfkmIU3bB+8cLMhQ/3DEE0CDb8lpTgeTP lefNT6lqK+B3FvzZDMQVPBEvI/ofIiv66dMU1ICsMpkCxVxtITCOunQQaCGu1G+h qXhyHzlOlplVmpvRPWBxPlifO0VvqFRtPmCA7UikTTa6s6uVAMQiGWS1sGrz0iSC XMTCDaq5UOG1fy8UjAPq2gcYak9UOFkL1jsm9Nt4s0wHg0wHy9Dks1aCxGfNW2f6 hn8O7wZCxPaLbNem0BZ0DhkoHNfPCl8goMI2qVAtG3XgKPpxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT4PTmYQeeYMJ4io7fJYRGrGBAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzNiZmZhYTgtZWQzMS0z YmUxLWJkOGYtODY2NzE3Y2Q1Yzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK19MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7MLDylWqRE59tu7dgy543Xs7oY8trtBSNpZuCaapRCu++Y7UVAhNRR N+LQA5Z64Qh3tiKcmnndYUHkF6TDFV6z2rC9fRMCNMb7IYiSZRYK6EuBrfi+7q50 6DBsnfkh9sbd7MIWvZ261ZRpqPzK9koO0DmKnfH2Vj6tC/88WRFRK+Y4BihJkvU0 7fEE6yw2dTImCouK98l/PaqhE/YoAHT0HTvoYQd+xZM3xdGQyUTvJ3wdmowUJCo/ r1Al9ynqiqantLFyFgPdJxYeYQWAvRNeOQ0QGPcPsNAjnjMdnQXh1XS87jbGvqD/ duinr8Jd4pgyU6Gn45EvBrjGpxSHoSM= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:35 2024 by rpki-client on console-ams.rpki-client.org