$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa File: 85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa (raw, json) Hash identifier: LxKyKj+7afTCi+3REBuI0zPXnUaFx0q5c7d5ezmt3Gk= Subject key identifier: 41:17:09:B8:DA:58:FE:96:77:5A:8E:B6:25:F2:75:7C:B9:19:8B:F3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC00746F1B00FAE9DC580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c0:07:46:f1:b0:0f:ae:9d:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=7e72a7ba-c4dc-45b3-a80a-0d32a48e5e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8d:c9:76:6f:ea:5b:98:de:89:86:7b:75:95: 04:02:ff:9e:66:96:51:8c:95:5c:f0:86:4e:f4:24: 3c:74:75:c4:4c:8b:b7:e0:ae:2d:a2:1a:34:3f:17: 73:93:0c:56:1a:fd:38:10:c7:27:6c:35:72:7a:08: d3:0f:e0:18:5a:f7:e5:4d:83:ac:35:cb:f5:29:34: 58:ef:af:d8:c4:a8:b6:69:d5:07:52:9b:05:fc:d3: 69:0b:bf:ed:b3:6b:7f:e9:a3:a0:95:91:78:fb:bf: eb:ad:0b:a5:da:3b:80:84:4a:96:a4:76:48:2c:30: 37:03:4f:4b:e5:b9:16:37:49:06:49:5e:f1:ad:07: 65:c4:6d:a2:2b:7b:6a:0b:7d:e0:61:a8:a2:57:b1: ba:5d:ac:dc:e7:a7:2a:0a:6b:44:b1:31:51:1d:35: 0b:d1:31:62:ee:1e:09:5e:2c:a0:db:7f:5f:3f:70: 1c:97:38:42:ac:6a:04:bd:cb:ae:e4:34:8b:6e:c7: 14:14:2b:f3:17:56:7a:43:75:67:e3:2d:d5:eb:be: 02:5a:6b:db:37:39:d8:cb:3c:0b:ac:3c:a4:5d:db: 02:91:a9:21:db:be:40:ac:f3:41:bd:3c:bb:16:a6: 53:7b:7d:fe:d2:1a:bc:b0:5a:09:d2:d5:2d:d1:bf: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:09:B8:DA:58:FE:96:77:5A:8E:B6:25:F2:75:7C:B9:19:8B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9e:9d:b8:04:06:01:54:04:7c:ce:d3:2b:b2:c7:3f:c7:30: 5f:90:ae:2f:18:89:f5:a2:37:20:e4:d1:e7:98:06:6f:2d:78: 71:ba:50:db:ff:53:e1:47:e5:d0:29:3b:b2:a0:14:2c:d0:f1: 1a:c0:4d:1c:05:5c:fa:5c:da:88:59:d4:7d:80:14:cb:25:c3: ca:64:45:23:f8:cf:79:5d:0d:b2:9a:f4:10:22:f1:42:d0:f4: 64:c8:df:4c:3e:3f:2d:3a:cc:ec:37:94:63:36:ff:a4:68:0f: c4:9d:1a:28:03:6f:5c:d3:40:0f:71:e5:32:fd:98:d8:83:8b: 55:f1:10:bd:a5:c9:c1:d4:5a:3d:71:fa:65:31:2e:72:60:bc: 55:a1:57:65:4f:48:19:84:c3:73:50:34:34:eb:7d:b4:5b:e8: 86:39:c7:74:b7:1d:5c:60:2d:08:63:a8:fe:73:8a:17:7d:7b: a1:df:58:f9:9e:bf:2e:0d:24:2c:95:60:48:68:05:4a:31:4c: 7d:1b:8b:dd:ef:91:fd:8b:51:a1:66:09:8d:44:38:81:90:cf: 62:29:26:5a:e1:c5:52:5c:44:98:83:2e:d3:e9:e4:c9:0c:56: 00:36:32:33:94:7c:d0:b4:d0:ed:44:3d:9a:57:31:23:95:b1: 87:df:63:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcAHRvGwD66dxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk N2U3MmE3YmEtYzRkYy00NWIzLWE4MGEtMGQzMmE0OGU1ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA243Jdm/qW5jeiYZ7dZUEAv+eZpZRjJVc8IZO 9CQ8dHXETIu34K4toho0PxdzkwxWGv04EMcnbDVyegjTD+AYWvflTYOsNcv1KTRY 76/YxKi2adUHUpsF/NNpC7/ts2t/6aOglZF4+7/rrQul2juAhEqWpHZILDA3A09L 5bkWN0kGSV7xrQdlxG2iK3tqC33gYaiiV7G6Xazc56cqCmtEsTFRHTUL0TFi7h4J Xiyg239fP3AclzhCrGoEvcuu5DSLbscUFCvzF1Z6Q3Vn4y3V674CWmvbNznYyzwL rDykXdsCkakh275ArPNBvTy7FqZTe33+0hq8sFoJ0tUt0b/sSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEXCbjaWP6Wd1qOtiXydXy5GYvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVmYmIyOWQtYWIzNS0z OGZhLWIwZWQtOWRlM2EyZGFkZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOenbgEBgFUBHzO0yuyxz/HMF+Qri8YifWiNyDk0eeYBm8teHG6UNv/ U+FH5dApO7KgFCzQ8RrATRwFXPpc2ohZ1H2AFMslw8pkRSP4z3ldDbKa9BAi8ULQ 9GTI30w+Py06zOw3lGM2/6RoD8SdGigDb1zTQA9x5TL9mNiDi1XxEL2lycHUWj1x +mUxLnJgvFWhV2VPSBmEw3NQNDTrfbRb6IY5x3S3HVxgLQhjqP5zihd9e6HfWPme vy4NJCyVYEhoBUoxTH0bi93vkf2LUaFmCY1EOIGQz2IpJlrhxVJcRJiDLtPp5MkM VgA2MjOUfNC00O1EPZpXMSOVsYffY7s= -----END CERTIFICATE-----Generated at Sun Apr 28 14:15:27 2024 by rpki-client on console-ams.rpki-client.org