$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931cbd4a-7a5f-3764-a8a0-3781ff0ad006.roa File: 931cbd4a-7a5f-3764-a8a0-3781ff0ad006.roa (raw, json) Hash identifier: deWFnKvm0gsTW3f/1zLtHZYYHa/+HtXFIRrWJzqUFs0= Subject key identifier: D5:B3:54:61:21:67:23:BF:05:FE:F2:3C:B6:FC:EE:1C:D8:FF:3D:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B116E335E2DAF99DE3740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931cbd4a-7a5f-3764-a8a0-3781ff0ad006.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:11:6e:33:5e:2d:af:99:de:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=92d5823f-f4bd-435d-8695-f102f554e438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:5d:20:db:b2:eb:4c:ac:c4:6c:83:4a:ee: 52:4e:4a:e2:d4:87:7b:91:b8:4f:a5:22:6b:88:e5: 28:37:4e:e6:de:35:b2:a6:35:8a:bc:e0:52:81:41: 74:ee:0d:71:a8:3f:dd:c3:91:37:e3:a1:75:94:95: 63:72:f7:ea:c3:37:b3:12:f6:d9:8f:1a:f1:b9:69: b9:09:38:38:a1:dd:d6:4f:13:b3:3c:03:ca:fa:90: 53:93:ba:32:f0:cf:a7:d1:ca:01:ca:7c:3a:ec:b5: 7d:76:fa:45:b5:19:4d:86:ef:ec:22:e0:e5:1d:3a: 81:3c:82:1b:67:1c:41:65:6d:99:ea:99:9f:0e:82: 58:82:24:7f:44:ec:fb:a3:32:02:ab:af:be:ed:ae: 49:a2:e7:e1:8c:57:d4:32:d3:b3:fb:a4:c7:67:41: af:77:ed:b3:2c:ca:57:0a:96:a1:f1:b5:9f:5b:11: b9:d2:f2:12:8d:93:74:0b:af:9a:58:85:51:e8:c9: 26:c1:a1:c5:4b:73:e2:74:24:55:cb:db:af:97:12: 8f:b7:93:8a:7d:b8:26:83:29:53:00:f0:c5:07:0f: 9b:ba:9a:1c:d9:06:df:c9:f6:82:2f:23:1f:3c:58: 4f:65:6e:bb:19:9c:d9:cf:e3:85:65:57:75:0e:60: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:54:61:21:67:23:BF:05:FE:F2:3C:B6:FC:EE:1C:D8:FF:3D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931cbd4a-7a5f-3764-a8a0-3781ff0ad006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4c:0a:ee:0b:42:15:ac:e9:27:21:6c:97:fa:d3:e0:b6:48: 81:d0:20:a9:7f:28:f5:5a:7c:a6:73:36:a3:9e:86:64:a5:e6: 74:e9:d8:97:61:20:14:3a:41:d6:01:03:63:21:49:30:a5:ea: c7:22:89:cc:15:22:1e:ce:69:32:f3:2c:63:25:c5:3c:76:c2: 97:ea:82:26:9b:24:30:27:84:29:f2:1f:a6:2b:82:36:58:3b: cb:9d:fc:c3:a1:11:4a:81:c5:d8:dd:2a:23:86:6b:b3:3f:8b: 89:9c:4e:dc:d9:cd:ca:b4:18:03:f8:73:7c:e6:02:6a:f2:18: 9e:7a:93:f4:a7:27:23:99:48:ed:2a:81:cf:99:02:e4:1d:8d: 2c:29:da:46:5c:e6:13:31:7e:18:4f:1d:22:de:3e:45:89:91: 16:e1:eb:84:b3:f2:77:4e:97:d0:e7:0f:96:a3:58:b2:76:1d: e1:da:7e:08:6c:0e:80:c4:a6:e8:90:ea:26:c4:76:bf:01:47: 0e:3c:8f:e2:72:d8:a7:2d:b5:7e:f7:80:28:a3:ff:ca:5d:9d: 68:3e:b7:4b:0a:c2:d4:5a:39:9f:52:85:d0:0f:b0:ec:67:a3: c5:84:54:10:57:69:05:8f:df:5c:20:e5:e3:0f:da:0f:27:bc: c3:3c:78:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKxFuM14tr5neN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk OTJkNTgyM2YtZjRiZC00MzVkLTg2OTUtZjEwMmY1NTRlNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGVdINuy60ysxGyDSu5STkri1Id7kbhPpSJr iOUoN07m3jWypjWKvOBSgUF07g1xqD/dw5E346F1lJVjcvfqwzezEvbZjxrxuWm5 CTg4od3WTxOzPAPK+pBTk7oy8M+n0coBynw67LV9dvpFtRlNhu/sIuDlHTqBPIIb ZxxBZW2Z6pmfDoJYgiR/ROz7ozICq6++7a5JoufhjFfUMtOz+6THZ0Gvd+2zLMpX Cpah8bWfWxG50vISjZN0C6+aWIVR6MkmwaHFS3PidCRVy9uvlxKPt5OKfbgmgylT APDFBw+bupoc2QbfyfaCLyMfPFhPZW67GZzZz+OFZVd1DmABIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWzVGEhZyO/Bf7yPLb87hzY/z3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTMxY2JkNGEtN2E1Zi0z NzY0LWE4YTAtMzc4MWZmMGFkMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtMCu4LQhWs6SchbJf60+C2SIHQIKl/KPVafKZzNqOehmSl5nTp2Jdh IBQ6QdYBA2MhSTCl6sciicwVIh7OaTLzLGMlxTx2wpfqgiabJDAnhCnyH6YrgjZY O8ud/MOhEUqBxdjdKiOGa7M/i4mcTtzZzcq0GAP4c3zmAmryGJ56k/SnJyOZSO0q gc+ZAuQdjSwp2kZc5hMxfhhPHSLePkWJkRbh64Sz8ndOl9DnD5ajWLJ2HeHafghs DoDEpuiQ6ibEdr8BRw48j+Jy2KcttX73gCij/8pdnWg+t0sKwtRaOZ9ShdAPsOxn o8WEVBBXaQWP31wg5eMP2g8nvMM8eGA= -----END CERTIFICATE-----Generated at Fri Nov 22 01:36:13 2024 by rpki-client on console-ams.rpki-client.org