$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa File: 875e1d65-b3a3-3f98-a573-0d5574a74afe.roa (raw, json) Hash identifier: saX3/Exw2/8e78u2FNibYPU9qGpHNfvOEnVck9ani74= Subject key identifier: D2:FB:61:06:53:87:12:C3:AB:C3:C3:BE:28:98:8D:AB:14:18:BD:8B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC1A8B086BB7A4A910880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c1:a8:b0:86:bb:7a:4a:91:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=7b9c366a-4f51-45e8-af9e-38c3da67dbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:14:f5:c9:b4:f5:75:06:7f:49:9c:95:6a: 54:73:4c:41:e7:60:97:27:95:88:5e:e9:94:dd:d7: 97:5f:a3:dc:f2:e3:e5:f7:03:2e:3d:5a:49:60:4c: c9:9f:19:9c:fa:e4:66:7a:68:69:50:b6:07:47:a6: 3f:32:b5:08:6e:f1:7b:41:6f:82:a7:b7:e6:f4:74: 01:74:14:ed:f4:b0:c8:c6:b4:25:13:0a:ca:97:c2: ee:6b:cf:a5:23:ae:e4:f1:c9:a0:3b:a5:90:5a:51: 7d:6a:0e:f1:88:0b:fc:9a:02:5a:4b:0d:cc:69:66: 7b:9b:4b:ea:04:b3:a3:7f:cb:cd:c5:84:89:a2:bf: 9b:d4:1c:9e:0c:bd:7c:a5:98:aa:b1:c8:e4:b0:8f: 50:6b:9c:fa:91:49:5c:90:23:68:9f:75:b4:f5:b1: f2:25:03:21:8b:d6:52:31:29:d1:75:57:d2:a8:1e: 25:00:73:cd:d1:f0:12:18:95:d8:8d:fe:ce:9e:8d: 45:75:fe:5d:3f:d0:3a:d2:51:81:f0:9d:36:b5:c6: 23:de:8b:03:e2:b4:8e:d9:a8:9c:60:52:f7:42:55: 21:e3:76:cf:29:6f:04:26:e9:8f:38:f1:8f:a9:bb: 68:4b:d4:65:f6:40:a6:85:b8:86:86:13:b3:7a:0c: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:61:06:53:87:12:C3:AB:C3:C3:BE:28:98:8D:AB:14:18:BD:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875e1d65-b3a3-3f98-a573-0d5574a74afe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1f:74:19:4d:5f:38:bb:37:41:61:44:51:19:26:f8:99:35: 46:0e:d6:94:7b:44:2c:12:9f:f6:6b:72:3e:8e:ae:36:2d:c3: 57:02:81:0a:26:eb:92:22:2d:9c:9b:b5:e2:fb:e5:88:60:30: 53:76:2d:b3:54:56:26:a5:ad:a7:07:e1:16:78:59:d9:95:31: 65:b1:d4:59:2f:3f:14:cd:f0:b7:89:63:51:07:5b:d5:db:bc: 1b:12:ad:da:2a:7b:a5:62:c0:f1:1b:06:54:f2:04:ef:8e:95: 2a:32:b9:25:81:a9:c2:ac:6f:86:ee:8b:35:13:37:b8:36:bc: 9f:50:4c:7d:2f:58:a8:f0:ff:ba:e0:c8:b9:e1:2b:9d:05:cc: a5:fa:53:b8:50:35:96:7d:b0:df:d3:f9:f3:98:15:4d:18:07: fe:2d:10:62:4b:6c:a2:51:67:2b:75:76:bb:53:1a:e6:a8:7c: 93:22:9e:dd:cd:d8:62:3b:eb:e4:0a:e3:88:f8:fd:b3:19:66: 4d:f6:e6:04:f2:48:ee:4a:7a:a8:27:a3:d6:4a:c2:69:2e:43: 89:91:62:77:16:9b:60:7d:7e:0b:a9:ae:ee:df:e2:c6:2b:cc: 31:8e:6a:0d:63:43:e7:ef:63:a7:bd:1a:39:31:4f:61:06:90: 74:dd:02:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcGosIa7ekqRCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk N2I5YzM2NmEtNGY1MS00NWU4LWFmOWUtMzhjM2RhNjdkYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4U9cm09XUGf0mclWpUc0xB52CXJ5WIXumU 3deXX6Pc8uPl9wMuPVpJYEzJnxmc+uRmemhpULYHR6Y/MrUIbvF7QW+Cp7fm9HQB dBTt9LDIxrQlEwrKl8Lua8+lI67k8cmgO6WQWlF9ag7xiAv8mgJaSw3MaWZ7m0vq BLOjf8vNxYSJor+b1ByeDL18pZiqscjksI9Qa5z6kUlckCNon3W09bHyJQMhi9ZS MSnRdVfSqB4lAHPN0fASGJXYjf7Ono1Fdf5dP9A60lGB8J02tcYj3osD4rSO2aic YFL3QlUh43bPKW8EJumPOPGPqbtoS9Rl9kCmhbiGhhOzegxpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL7YQZThxLDq8PDviiYjasUGL2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODc1ZTFkNjUtYjNhMy0z Zjk4LWE1NzMtMGQ1NTc0YTc0YWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcfdBlNXzi7N0FhRFEZJviZNUYO1pR7RCwSn/Zrcj6OrjYtw1cCgQom 65IiLZybteL75YhgMFN2LbNUVialracH4RZ4WdmVMWWx1FkvPxTN8LeJY1EHW9Xb vBsSrdoqe6ViwPEbBlTyBO+OlSoyuSWBqcKsb4buizUTN7g2vJ9QTH0vWKjw/7rg yLnhK50FzKX6U7hQNZZ9sN/T+fOYFU0YB/4tEGJLbKJRZyt1drtTGuaofJMint3N 2GI76+QK44j4/bMZZk325gTySO5Keqgno9ZKwmkuQ4mRYncWm2B9fgupru7f4sYr zDGOag1jQ+fvY6e9GjkxT2EGkHTdAiQ= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:39 2024 by rpki-client on console-ams.rpki-client.org