$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dac075-1c7f-3649-9e99-4499bb9a2714.roa File: 76dac075-1c7f-3649-9e99-4499bb9a2714.roa (raw, json) Hash identifier: fhc0qYKb7s1OX8NupBvs/ru8mFUUd8khWAwpJ/SIyHA= Subject key identifier: D2:5B:CC:F0:BF:07:FE:0C:DA:49:26:62:A8:23:0A:27:DA:26:09:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E49FC9648A34FE29056C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dac075-1c7f-3649-9e99-4499bb9a2714.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:49:fc:96:48:a3:4f:e2:90:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=87a6eed0-bc7e-4cc3-b5cf-fbb997b8b915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:06:54:3d:97:0f:07:3a:24:c4:a0:66:a0:b8: 8e:f7:85:24:3d:0b:a2:bf:29:b0:48:c5:3c:5a:d4: 4f:b4:42:38:52:63:52:05:de:9f:01:8f:ae:b4:1e: 5c:69:10:d2:b8:b3:0d:8f:f8:7a:6f:80:15:94:bd: 19:9c:aa:ab:64:80:bf:9c:ac:82:5a:18:71:24:11: bc:07:75:05:3f:b6:b6:56:05:6b:6c:1e:75:bb:a7: c9:fa:41:18:a4:b6:ab:63:2d:91:75:f8:6a:3c:99: 54:9f:e2:f2:1f:18:26:fb:58:d1:5b:2e:eb:e6:14: 6e:60:ca:b4:b0:26:fd:9e:67:c3:50:62:ec:85:51: 78:76:fb:a1:04:a9:42:ea:be:e2:4d:3b:15:da:18: 74:c4:34:b2:70:85:4a:c7:e4:d2:66:89:56:dc:f2: c3:14:75:6e:2d:53:73:33:36:4c:b5:6e:0a:ca:d9: 11:4f:b0:c7:77:ff:1f:3d:48:4e:92:94:95:11:f5: 6e:e9:aa:71:5f:11:62:c9:4f:24:ae:97:21:27:30: de:2c:69:f8:1d:e4:4b:f3:bb:74:2d:3b:29:2c:ee: e7:93:8e:0b:d1:2c:b9:5c:27:77:2e:eb:d2:ed:80: 51:31:91:ca:fa:5f:c3:e1:3d:f0:e5:2d:99:5f:d9: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5B:CC:F0:BF:07:FE:0C:DA:49:26:62:A8:23:0A:27:DA:26:09:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dac075-1c7f-3649-9e99-4499bb9a2714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:bd:5b:39:62:c8:4f:d1:17:03:4e:41:75:b4:8c:8e:c9:2c: b9:ff:d3:a2:26:84:f3:fb:db:d0:51:32:67:73:36:32:96:4a: e1:ed:fc:b4:25:2d:fb:bc:37:de:09:2b:4c:36:84:b2:68:64: 4f:bc:7b:a1:a9:aa:65:90:79:64:e8:e5:b6:27:13:1f:6f:46: f1:2d:c9:db:fd:18:b4:ce:c2:0d:24:4f:9d:8d:70:d9:04:61: 9d:cd:08:f0:af:c4:b0:de:15:b5:cf:cd:08:ef:94:c3:c6:f9: 41:3d:f3:71:ee:fc:57:93:56:0a:9d:19:fa:0d:f7:7e:dd:8f: 88:8f:6e:0e:08:5a:c1:81:12:64:e5:62:8f:57:8c:e7:8f:f6: 1a:83:94:21:a3:c3:a1:4e:46:50:ff:6e:9f:27:3e:f2:d0:f8: e4:87:40:66:47:19:34:0b:74:52:31:55:74:2c:86:6c:b8:7e: 33:bc:af:77:c5:ff:7e:8f:66:23:c9:0e:b5:bd:c0:0c:7c:62: bc:e5:35:59:76:4f:f6:0d:82:aa:da:7d:52:1e:0e:c0:54:ed: 47:21:67:a4:71:75:09:52:0b:dd:b9:65:57:15:21:18:b6:41: d5:79:bd:6f:bd:04:cd:d9:c3:40:2f:77:5d:65:41:2d:b9:d0: 0d:e6:65:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkn8lkijT+KQVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ODdhNmVlZDAtYmM3ZS00Y2MzLWI1Y2YtZmJiOTk3YjhiOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAZUPZcPBzokxKBmoLiO94UkPQuivymwSMU8 WtRPtEI4UmNSBd6fAY+utB5caRDSuLMNj/h6b4AVlL0ZnKqrZIC/nKyCWhhxJBG8 B3UFP7a2VgVrbB51u6fJ+kEYpLarYy2RdfhqPJlUn+LyHxgm+1jRWy7r5hRuYMq0 sCb9nmfDUGLshVF4dvuhBKlC6r7iTTsV2hh0xDSycIVKx+TSZolW3PLDFHVuLVNz MzZMtW4KytkRT7DHd/8fPUhOkpSVEfVu6apxXxFiyU8krpchJzDeLGn4HeRL87t0 LTspLO7nk44L0Sy5XCd3LuvS7YBRMZHK+l/D4T3w5S2ZX9nTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJbzPC/B/4M2kkmYqgjCifaJgl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzZkYWMwNzUtMWM3Zi0z NjQ5LTllOTktNDQ5OWJiOWEyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG9WzliyE/RFwNOQXW0jI7JLLn/06ImhPP729BRMmdzNjKWSuHt/LQl Lfu8N94JK0w2hLJoZE+8e6GpqmWQeWTo5bYnEx9vRvEtydv9GLTOwg0kT52NcNkE YZ3NCPCvxLDeFbXPzQjvlMPG+UE983Hu/FeTVgqdGfoN937dj4iPbg4IWsGBEmTl Yo9XjOeP9hqDlCGjw6FORlD/bp8nPvLQ+OSHQGZHGTQLdFIxVXQshmy4fjO8r3fF /36PZiPJDrW9wAx8YrzlNVl2T/YNgqrafVIeDsBU7UchZ6RxdQlSC925ZVcVIRi2 QdV5vW+9BM3Zw0Avd11lQS250A3mZc8= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org