$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa File: 8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa (raw, json) Hash identifier: dnWbISu6ZLGVQBhonPZ3eiFI/KouwDhWFWA5QIkgUhs= Subject key identifier: 21:10:79:16:1A:81:DF:A7:F4:D7:0F:B9:05:79:0B:D6:49:20:A3:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC4BBD156F3F9BB058180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c4:bb:d1:56:f3:f9:bb:05:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=83f16d7a-5e7d-4f37-808c-3e074ce9f05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:84:7e:e3:67:4d:98:b1:12:0a:34:f7:ba: 0a:3e:cf:6a:0d:6b:20:c3:6f:8b:02:78:8e:eb:56: a1:f5:c5:e1:74:44:e1:36:53:06:08:d0:09:5a:40: 9c:3b:f7:12:d7:8e:f7:22:23:79:8f:b9:4c:aa:9b: c0:45:f0:63:4f:ae:d4:f5:7e:6e:6f:20:f1:55:26: 1c:75:ba:2b:cb:21:69:4d:d5:48:e1:32:cb:15:12: 0b:e0:59:42:a3:86:f9:24:1b:47:6c:e7:56:4a:25: eb:e1:22:40:8d:21:05:b0:f6:1b:08:e7:57:db:53: e2:f8:b5:25:b8:29:e3:a8:7e:3f:60:a2:52:c6:41: 71:b5:56:7e:2a:e0:e5:93:a2:95:ed:c4:1b:ca:13: 1c:24:99:88:b4:94:2e:5f:64:fc:21:1c:0d:ba:80: e1:03:36:5d:0e:8d:87:c0:e8:44:a3:f5:6c:c8:77: 48:53:54:75:0d:be:bb:74:ab:be:4f:11:ca:a4:82: cd:63:2e:1d:20:a7:93:bd:6d:77:96:04:e6:cf:37: b6:ef:69:8e:20:1f:32:19:75:c9:af:b2:ef:b8:81: 75:ff:74:df:a0:af:bd:3c:e4:24:80:31:d9:41:e0: 4e:ed:5b:27:65:76:16:ff:4d:7e:17:eb:d3:fb:80: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:79:16:1A:81:DF:A7:F4:D7:0F:B9:05:79:0B:D6:49:20:A3:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a3:25:55:63:9b:8e:51:51:57:2b:8f:c4:1a:b0:73:40:80: 2d:fa:d1:6c:c5:f0:1b:78:1b:9e:72:1a:d3:78:2b:c4:f1:51: 4a:5d:7a:64:13:2d:3b:11:06:38:a2:96:6a:3c:d3:79:c6:e4: 55:ab:1c:7a:37:4a:8f:0a:10:75:2e:74:18:e8:47:1f:db:83: 9e:8a:d8:59:19:8a:d4:fe:c0:1a:5b:7c:02:6b:b1:26:e3:2a: f2:49:4e:33:1e:7a:6e:7a:3b:39:8b:ab:69:a9:29:be:6b:f4: 08:f2:d3:01:e2:25:b9:a9:2a:bf:8f:a0:85:c8:af:6f:15:94: 21:1e:c9:67:19:8b:a1:e9:74:72:f4:5e:1b:63:81:f9:60:33: ba:a0:68:45:64:2e:0b:20:0d:c5:29:ec:30:c9:90:79:bb:3c: 66:3a:84:10:14:18:ac:2b:66:34:a7:1d:46:53:a3:b6:43:de: da:ed:aa:da:aa:3f:02:89:20:62:87:04:e9:86:6c:00:fd:ce: 0d:57:55:7b:4a:48:fe:7a:de:52:03:8c:66:b1:b7:d9:ec:2c: 87:55:d9:6b:b1:c4:da:a9:10:32:fa:a6:53:a8:e8:fc:21:fe: 27:f6:c9:70:47:0b:29:01:ee:39:c7:db:10:ce:51:73:da:d8: e2:22:74:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcS70Vbz+bsFgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ODNmMTZkN2EtNWU3ZC00ZjM3LTgwOGMtM2UwNzRjZTlmMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCiEfuNnTZixEgo097oKPs9qDWsgw2+LAniO 61ah9cXhdEThNlMGCNAJWkCcO/cS1473IiN5j7lMqpvARfBjT67U9X5ubyDxVSYc dboryyFpTdVI4TLLFRIL4FlCo4b5JBtHbOdWSiXr4SJAjSEFsPYbCOdX21Pi+LUl uCnjqH4/YKJSxkFxtVZ+KuDlk6KV7cQbyhMcJJmItJQuX2T8IRwNuoDhAzZdDo2H wOhEo/VsyHdIU1R1Db67dKu+TxHKpILNYy4dIKeTvW13lgTmzze272mOIB8yGXXJ r7LvuIF1/3TfoK+9POQkgDHZQeBO7VsnZXYW/01+F+vT+4CI6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEQeRYagd+n9NcPuQV5C9ZJIKP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGNkMDMxNGYtYjk4Mi0z OGY2LWFkYmMtNmNmNjYzMWRlMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIajJVVjm45RUVcrj8QasHNAgC360WzF8Bt4G55yGtN4K8TxUUpdemQT LTsRBjiilmo803nG5FWrHHo3So8KEHUudBjoRx/bg56K2FkZitT+wBpbfAJrsSbj KvJJTjMeem56OzmLq2mpKb5r9Ajy0wHiJbmpKr+PoIXIr28VlCEeyWcZi6HpdHL0 XhtjgflgM7qgaEVkLgsgDcUp7DDJkHm7PGY6hBAUGKwrZjSnHUZTo7ZD3trtqtqq PwKJIGKHBOmGbAD9zg1XVXtKSP563lIDjGaxt9nsLIdV2WuxxNqpEDL6plOo6Pwh /if2yXBHCykB7jnH2xDOUXPa2OIidAk= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org