$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa File: a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa (raw, json) Hash identifier: 9KpjQ6yRAXDSfWLWnChQCVcJnskeqsbgjOCoD1WX4Fg= Subject key identifier: 3F:52:CE:1A:E9:8A:B5:7B:DE:7E:86:81:E5:9A:59:C7:6A:76:47:B4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E39ECC384EA626A194540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 162.72.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:39:ec:c3:84:ea:62:6a:19:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=d8ce0243-a7e5-4cfa-af13-bc07c25cfd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:c0:72:95:0d:e8:4b:41:ac:b1:f8:a4:a2: 4a:00:b7:d0:01:f3:4c:4e:b5:11:c6:0c:50:79:36: 42:3f:98:e5:18:dc:8e:4f:cc:e1:a4:da:3b:8c:44: af:c9:c6:a1:29:28:69:a0:fb:48:7b:36:08:6c:05: 5f:e3:1f:0b:db:11:65:09:b1:35:0d:af:8c:0f:5f: 9c:06:6f:0c:a8:ea:13:59:65:a4:87:64:c8:7f:13: f1:e4:d9:dc:19:65:bc:e6:09:a0:1d:27:82:c2:15: af:07:84:d2:1e:f0:52:dc:7c:94:7f:c3:ed:e8:47: f9:a6:56:4b:71:03:aa:99:e1:15:f1:5f:ed:82:93: 36:6e:d4:dc:aa:b8:26:c7:97:71:23:fd:79:31:a5: c7:16:df:09:13:08:cd:7c:21:8a:b4:2d:70:3c:34: 16:38:30:5a:13:66:76:b5:25:de:05:18:5f:46:0f: 38:7d:93:ba:b2:c5:f8:00:c1:ed:0b:32:d5:49:27: 87:78:71:97:9b:09:7d:ae:aa:04:5b:a4:f9:7d:04: 81:48:de:ab:6c:60:df:0f:98:06:66:ea:1f:86:09: 6a:9d:54:db:0c:20:3f:09:5d:d1:30:4e:70:27:ea: 8e:66:58:5d:63:b3:b1:9a:2b:56:22:a4:e7:ae:6e: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:52:CE:1A:E9:8A:B5:7B:DE:7E:86:81:E5:9A:59:C7:6A:76:47:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d5f038-cb14-3a36-9df4-d5127a25dfd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:fc:b0:f4:45:df:f4:0d:03:04:c8:e9:d3:c2:ab:eb:cc:1f: 5f:e0:aa:70:64:da:69:da:49:7b:a2:ad:58:c4:37:9c:44:95: 1c:e9:28:7a:87:1b:59:e8:c6:5e:dd:bc:7c:ce:35:9c:e8:bb: 1a:23:a0:da:b6:05:51:f1:ca:3a:40:2f:f6:36:38:1d:ac:51: 90:e3:ed:21:db:c8:a8:9b:76:cd:50:a5:ca:80:92:cf:8e:29: d3:54:d2:72:25:b8:a3:00:b5:72:8a:11:10:3a:01:21:42:59: d4:99:c9:7d:eb:f9:14:ba:27:b0:98:3b:7f:bc:42:5d:d2:34: de:41:26:b8:ed:a8:c6:f7:00:75:bf:1f:4a:9d:01:e7:55:e7: ac:d0:da:29:20:18:c1:e1:db:4b:c7:3d:29:38:f3:b8:7b:af: 67:74:4d:d4:97:1d:5f:b8:f2:45:eb:4f:f2:72:e6:4a:c7:0f: c0:4e:82:bc:28:80:20:3c:2b:f0:99:ce:46:89:ee:89:00:31: 6a:63:87:7f:08:b6:0b:10:4b:86:7d:b4:ed:ff:ac:df:15:32: 1d:5e:38:9f:cc:10:26:9e:69:45:af:fa:cc:dc:40:d5:87:5c: db:30:ad:c9:9f:a8:7c:97:66:98:84:04:a8:56:25:63:bf:64: 69:d6:8f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPjnsw4TqYmoZRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZDhjZTAyNDMtYTdlNS00Y2ZhLWFmMTMtYmMwN2MyNWNmZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpLAcpUN6EtBrLH4pKJKALfQAfNMTrURxgxQ eTZCP5jlGNyOT8zhpNo7jESvycahKShpoPtIezYIbAVf4x8L2xFlCbE1Da+MD1+c Bm8MqOoTWWWkh2TIfxPx5NncGWW85gmgHSeCwhWvB4TSHvBS3HyUf8Pt6Ef5plZL cQOqmeEV8V/tgpM2btTcqrgmx5dxI/15MaXHFt8JEwjNfCGKtC1wPDQWODBaE2Z2 tSXeBRhfRg84fZO6ssX4AMHtCzLVSSeHeHGXmwl9rqoEW6T5fQSBSN6rbGDfD5gG ZuofhglqnVTbDCA/CV3RME5wJ+qOZlhdY7OxmitWIqTnrm5lEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9SzhrpirV73n6GgeWaWcdqdke0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTBkNWYwMzgtY2IxNC0z YTM2LTlkZjQtZDUxMjdhMjVkZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMX8sPRF3/QNAwTI6dPCq+vMH1/gqnBk2mnaSXuirVjEN5xElRzpKHqH G1noxl7dvHzONZzouxojoNq2BVHxyjpAL/Y2OB2sUZDj7SHbyKibds1QpcqAks+O KdNU0nIluKMAtXKKERA6ASFCWdSZyX3r+RS6J7CYO3+8Ql3SNN5BJrjtqMb3AHW/ H0qdAedV56zQ2ikgGMHh20vHPSk487h7r2d0TdSXHV+48kXrT/Jy5krHD8BOgrwo gCA8K/CZzkaJ7okAMWpjh38ItgsQS4Z9tO3/rN8VMh1eOJ/MECaeaUWv+szcQNWH XNswrcmfqHyXZpiEBKhWJWO/ZGnWj1Y= -----END CERTIFICATE-----Generated at Sun Apr 28 14:15:28 2024 by rpki-client on console-ams.rpki-client.org