$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa File: 89bb151f-5c2a-3e02-8e58-24e220a54b24.roa (raw, json) Hash identifier: kUkvS8TLGMbLm2SqnWqs25kL8+S8QqTAO0fZMwqhfjc= Subject key identifier: 5B:29:DA:93:8B:83:59:03:B6:CC:5F:07:C1:53:AC:7D:29:8F:F3:2B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC4EA6865C9C5D55915E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c4:ea:68:65:c9:c5:d5:59:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=dcb3575f-6a78-44b7-8440-534d4d7c1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:54:f6:d2:61:9d:dc:ce:52:7c:68:df:8a: 7d:bf:3c:9c:14:49:9d:3a:3e:0c:5d:24:a6:ed:1c: 9f:5f:05:a0:3d:4a:44:cc:bc:fb:3a:22:1b:5e:9c: cc:ff:4c:ee:06:bd:96:f6:49:83:8c:34:90:aa:75: e0:df:4c:db:bb:b5:9f:0c:c9:43:8b:45:7b:f5:61: 06:eb:d4:fa:a0:71:45:c6:5d:43:00:c1:18:fc:21: 63:15:00:da:b9:d8:3f:41:f5:95:74:c6:9a:2a:52: 9f:a9:3e:89:75:56:83:46:66:46:a5:5c:15:56:bb: a1:d3:c3:3a:4a:39:e9:13:8c:93:85:38:e1:83:83: b6:97:12:5f:3d:69:ef:a7:6c:d5:29:33:30:8b:ef: e3:28:36:ae:10:a7:92:f9:62:88:30:5f:a3:ee:c6: dd:6d:89:2e:61:a6:70:eb:2e:f7:8b:2b:7c:64:4a: ec:ff:b7:d5:7b:0c:60:54:77:13:bf:5b:31:8a:2e: ae:e6:34:83:9c:a1:57:cc:a7:d2:41:75:4a:8f:3c: 5b:f0:90:a8:52:95:c1:20:e7:4e:35:0f:b4:0a:1f: 9b:4d:ae:d4:3e:9f:47:c7:ff:76:27:b5:b1:00:97: 4f:8e:c0:c4:c7:e1:16:b5:16:ec:75:82:64:05:6d: 98:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:29:DA:93:8B:83:59:03:B6:CC:5F:07:C1:53:AC:7D:29:8F:F3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:77:c8:1e:bb:eb:d0:76:e3:0a:1b:8d:ff:c4:4e:a5:7a:b8: af:22:f3:48:d7:e8:ca:4b:ed:f4:f1:56:91:1e:92:27:aa:a3: 3d:a0:8b:95:84:5b:79:37:ff:dc:f2:b3:5c:f0:99:21:ae:cd: d1:af:1e:b7:f5:2c:fc:59:22:63:ec:ff:7f:f9:94:28:1e:28: 55:8e:4f:a3:ec:1d:40:c3:66:b0:1a:c4:88:04:89:3f:c3:be: 75:6c:c8:94:ed:f1:3e:79:86:7e:83:99:44:83:fb:5b:af:9c: 1d:9f:db:d5:95:27:29:cb:ce:6d:e6:5d:1b:1e:04:14:0a:51: ac:50:26:2a:1e:f7:16:9d:24:5b:9b:a9:8d:90:b7:77:0d:64: d7:52:8f:69:ec:9e:58:ba:3f:81:54:c6:89:45:df:2f:0d:bd: d1:00:9a:23:c9:5c:ab:b7:1c:53:25:d8:8f:a7:cd:63:72:59: 79:b3:65:eb:a8:ca:bf:99:6a:ed:49:50:82:d7:bb:89:af:d5: e0:81:3f:1a:bb:a0:06:f5:5c:ce:a7:b9:d7:59:74:11:bf:27: eb:f0:06:bc:4e:bc:32:b8:02:b0:fe:00:f4:88:1d:b1:52:fe: c2:67:9e:f2:cc:ee:e7:8b:88:37:ef:a3:15:2f:20:b3:a8:e7: 2a:e5:8c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcTqaGXJxdVZFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZGNiMzU3NWYtNmE3OC00NGI3LTg0NDAtNTM0ZDRkN2MxNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrlU9tJhndzOUnxo34p9vzycFEmdOj4MXSSm 7RyfXwWgPUpEzLz7OiIbXpzM/0zuBr2W9kmDjDSQqnXg30zbu7WfDMlDi0V79WEG 69T6oHFFxl1DAMEY/CFjFQDaudg/QfWVdMaaKlKfqT6JdVaDRmZGpVwVVruh08M6 SjnpE4yThTjhg4O2lxJfPWnvp2zVKTMwi+/jKDauEKeS+WKIMF+j7sbdbYkuYaZw 6y73iyt8ZErs/7fVewxgVHcTv1sxii6u5jSDnKFXzKfSQXVKjzxb8JCoUpXBIOdO NQ+0Ch+bTa7UPp9Hx/92J7WxAJdPjsDEx+EWtRbsdYJkBW2Y0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsp2pOLg1kDtsxfB8FTrH0pj/MrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODliYjE1MWYtNWMyYS0z ZTAyLThlNTgtMjRlMjIwYTU0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp3yB6769B24wobjf/ETqV6uK8i80jX6MpL7fTxVpEekieqoz2gi5WE W3k3/9zys1zwmSGuzdGvHrf1LPxZImPs/3/5lCgeKFWOT6PsHUDDZrAaxIgEiT/D vnVsyJTt8T55hn6DmUSD+1uvnB2f29WVJynLzm3mXRseBBQKUaxQJioe9xadJFub qY2Qt3cNZNdSj2nsnli6P4FUxolF3y8NvdEAmiPJXKu3HFMl2I+nzWNyWXmzZeuo yr+Zau1JUILXu4mv1eCBPxq7oAb1XM6nuddZdBG/J+vwBrxOvDK4ArD+APSIHbFS /sJnnvLM7ueLiDfvoxUvILOo5yrljK4= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:39 2024 by rpki-client on console-ams.rpki-client.org