$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa File: 8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa (raw, json) Hash identifier: brw73ib3ADL5K2NfnzaKb8vvbTnkKMadJFM8BueniSw= Subject key identifier: 8B:BD:01:40:4F:E2:88:76:0A:9A:29:FB:72:78:B7:C8:31:EA:9C:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4B110C2E2EF460ED52D0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4b:11:0c:2e:2e:f4:60:ed:52:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=e6e7c079-8439-4d02-a1b9-233ba9a39baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:95:80:75:e4:c3:bb:98:84:14:7c:69:f0:a7: 62:d2:ad:d8:5e:22:07:61:dd:62:02:b9:00:19:3f: 3c:8f:1f:33:8c:35:ad:a9:67:ab:09:47:36:07:3a: 30:4a:d9:9b:aa:e0:fc:a3:88:a2:82:6d:00:8e:b7: a2:12:dc:c9:84:75:15:31:b2:46:9e:3d:50:54:e2: 68:7b:a5:97:80:ac:54:44:aa:ad:7e:19:ed:0d:0c: 6b:cc:a0:d8:3b:75:ec:a6:b8:22:c2:57:40:2c:e5: a6:9f:34:ef:2f:36:9a:40:57:03:59:d6:0d:73:a8: bb:ac:16:6b:e9:e8:fe:37:0f:8a:d1:08:25:28:50: 93:fd:e2:20:46:85:29:9b:ff:3b:16:6f:be:4d:ab: b8:90:a5:f5:e1:81:c8:0a:c4:cf:fe:8a:fc:3e:07: 27:79:a5:c8:d6:a6:ce:67:0d:98:4e:6e:b0:49:d8: 6a:bd:ce:9d:d9:8c:a0:91:36:2b:59:2a:9e:dc:5c: dd:17:34:a9:f4:ca:46:d9:00:9f:91:b0:32:85:17: 17:55:45:46:a3:ca:ee:df:22:ba:72:a4:ac:d6:1c: f1:07:09:4e:0d:34:bb:6e:9a:3c:27:b4:80:d7:b7: ac:80:a9:26:e7:6b:33:a0:d5:a1:8c:05:fc:79:59: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BD:01:40:4F:E2:88:76:0A:9A:29:FB:72:78:B7:C8:31:EA:9C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:60:fa:ce:41:6b:0f:cc:fb:ef:12:fa:e4:ed:ad:1a:a4:26: fa:a1:9c:20:df:73:cd:82:15:b4:1d:4f:d2:80:ba:0e:b4:89: 17:94:38:27:3b:d9:af:4f:90:07:71:70:96:94:c8:12:ab:94: 7a:74:86:3e:7a:9c:2f:d5:65:ec:91:1f:02:8e:a4:ac:63:4a: 3f:33:6c:52:b2:db:11:86:04:f9:46:fe:9a:26:8b:82:5a:8c: 7b:66:05:fc:4e:15:04:f4:c8:19:0a:d2:fe:09:91:b2:e6:9d: 30:31:62:d4:03:cb:e4:a5:b8:b8:fa:eb:16:33:78:d5:f2:ab: 14:a4:8a:e7:00:45:8f:a2:f2:f5:49:a5:91:27:03:cc:c4:a4: d3:f3:ad:47:1a:4c:47:a3:42:12:d3:92:c5:54:83:b6:f8:f2: 17:41:45:96:4e:6c:f7:13:9f:65:a8:a8:16:3a:81:22:8c:36: 10:da:bf:20:75:7b:88:15:5e:16:d6:f9:da:15:7f:3e:ad:fa: 50:81:2a:f8:5a:68:3d:bd:7c:e6:9a:12:1c:f2:3e:7d:a9:ea: 46:82:a6:66:92:96:63:02:45:36:c8:c1:26:16:e6:51:eb:f1: 2e:76:ef:ad:72:3d:60:29:0d:e2:af:be:01:d9:36:c4:1a:3b: 3e:0e:31:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPksRDC4u9GDtUtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZTZlN2MwNzktODQzOS00ZDAyLWExYjktMjMzYmE5YTM5YmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pWAdeTDu5iEFHxp8Kdi0q3YXiIHYd1iArkA GT88jx8zjDWtqWerCUc2BzowStmbquD8o4iigm0AjreiEtzJhHUVMbJGnj1QVOJo e6WXgKxURKqtfhntDQxrzKDYO3XsprgiwldALOWmnzTvLzaaQFcDWdYNc6i7rBZr 6ej+Nw+K0QglKFCT/eIgRoUpm/87Fm++Tau4kKX14YHICsTP/or8PgcneaXI1qbO Zw2YTm6wSdhqvc6d2YygkTYrWSqe3FzdFzSp9MpG2QCfkbAyhRcXVUVGo8ru3yK6 cqSs1hzxBwlODTS7bpo8J7SA17esgKkm52szoNWhjAX8eVk0ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu9AUBP4oh2Cpop+3J4t8gx6pzZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZmYTViNjctM2Q2ZC0z OWNiLTg3YzItMDI3ZTk5OGRiZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1g+s5Baw/M++8S+uTtrRqkJvqhnCDfc82CFbQdT9KAug60iReUOCc7 2a9PkAdxcJaUyBKrlHp0hj56nC/VZeyRHwKOpKxjSj8zbFKy2xGGBPlG/pomi4Ja jHtmBfxOFQT0yBkK0v4JkbLmnTAxYtQDy+SluLj66xYzeNXyqxSkiucARY+i8vVJ pZEnA8zEpNPzrUcaTEejQhLTksVUg7b48hdBRZZObPcTn2WoqBY6gSKMNhDavyB1 e4gVXhbW+doVfz6t+lCBKvhaaD29fOaaEhzyPn2p6kaCpmaSlmMCRTbIwSYW5lHr 8S52761yPWApDeKvvgHZNsQaOz4OMUY= -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:44 2024 by rpki-client on console-fra.rpki-client.org