$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa File: a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa (raw, json) Hash identifier: cayxLDG9BGSM1R06FPJZB+cN+K07q1GceYQv9Et7PFg= Subject key identifier: C4:C9:07:8F:F9:8F:19:20:A4:0C:BB:B3:89:64:52:5B:5B:9D:95:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0F27F814E563E5B67010 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0f:27:f8:14:e5:63:e5:b6:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=7aecd63e-3a81-4452-ac36-e7f5b1c1d835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:f5:fc:08:92:41:1a:84:56:51:b3:a8:ea: f5:4b:bf:08:0c:f2:2e:85:77:0e:83:c7:03:4a:24: b7:12:87:cd:88:25:2b:9f:2b:ac:e4:41:69:d1:cc: a0:45:2c:18:1c:c8:20:97:3d:5e:55:ac:7c:06:fc: 83:6f:9c:15:2a:fb:e8:74:ce:5b:c8:c1:75:e9:09: 6a:3a:e4:37:14:ac:b8:d3:be:08:bf:18:76:df:75: f9:ed:76:a9:5d:9b:5d:75:2f:53:b2:bf:33:cd:ee: 4b:3d:eb:90:b5:3b:4c:79:e5:58:90:9e:b3:54:da: 28:b2:e2:89:c4:fe:69:d8:47:3b:aa:9a:75:7f:28: c9:87:e1:a4:34:9f:1c:64:9d:3c:11:bf:b1:a7:c7: af:ad:51:57:53:31:7f:85:18:a8:fb:92:64:f8:97: 58:aa:86:51:d6:fd:27:8c:3d:93:80:79:58:b4:40: e0:87:f3:2f:0d:5f:de:15:4a:ac:57:db:87:62:1a: a9:f4:0b:b3:88:af:8b:e4:d0:13:1a:b4:db:9d:52: 17:33:d1:07:5f:f3:0c:7a:78:7e:43:7d:25:44:80: 6e:63:04:4d:02:c8:f9:7d:67:51:8b:09:0d:21:dc: 73:cd:96:6a:1d:80:e9:ce:c7:8b:81:e8:e7:44:7f: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C9:07:8F:F9:8F:19:20:A4:0C:BB:B3:89:64:52:5B:5B:9D:95:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:15:07:9e:e8:82:35:c1:ff:eb:2e:05:06:28:e6:0e:49:3f: e3:8e:61:3c:86:ff:32:22:2d:03:80:60:f4:10:cf:78:fa:4a: 97:61:01:d1:ea:bc:16:c2:ce:0d:56:9f:8c:1a:70:93:f4:fa: 4b:df:81:b2:f2:ad:df:50:02:22:c3:03:bf:88:ab:5a:4e:3e: a5:9c:be:dd:c1:e9:39:7a:7b:d4:af:5a:65:02:4b:06:23:7b: 38:39:d4:c8:23:6f:16:36:21:65:2d:37:a2:e6:ec:b9:a3:65: 21:ad:66:62:25:0e:98:56:e5:87:4a:4b:73:2a:c6:0f:44:52: 48:96:bb:75:1d:2d:9c:df:a6:5e:00:b5:04:88:f1:50:48:0e: 93:0d:b4:99:f6:e9:e7:43:21:18:e1:90:80:26:52:c7:b5:12: 4a:63:9f:a1:d9:23:ea:3b:58:1a:02:9b:66:14:eb:c5:ce:29: 1a:95:8f:ea:61:b2:da:2e:9c:d9:88:50:36:f3:9e:b9:d7:b9: f6:d3:23:80:de:a3:5f:1e:03:7c:be:cb:05:f5:5d:4a:36:42: 86:35:c4:43:91:29:ea:11:38:2b:a8:49:0c:b0:e4:33:e3:82: c3:c9:3e:58:f9:99:e2:f2:b9:3e:74:3b:74:cb:d0:99:2f:03: 73:a5:e3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw8n+BTlY+W2cBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk N2FlY2Q2M2UtM2E4MS00NDUyLWFjMzYtZTdmNWIxYzFkODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCf1/AiSQRqEVlGzqOr1S78IDPIuhXcOg8cD SiS3EofNiCUrnyus5EFp0cygRSwYHMgglz1eVax8BvyDb5wVKvvodM5byMF16Qlq OuQ3FKy4074Ivxh233X57XapXZtddS9Tsr8zze5LPeuQtTtMeeVYkJ6zVNoosuKJ xP5p2Ec7qpp1fyjJh+GkNJ8cZJ08Eb+xp8evrVFXUzF/hRio+5Jk+JdYqoZR1v0n jD2TgHlYtEDgh/MvDV/eFUqsV9uHYhqp9AuziK+L5NATGrTbnVIXM9EHX/MMenh+ Q30lRIBuYwRNAsj5fWdRiwkNIdxzzZZqHYDpzseLgejnRH+ukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTJB4/5jxkgpAy7s4lkUltbnZWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTE3OTNiZmEtOGI3Zi0z MWYzLWIzOTUtMzQyZjY5YmRmYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUVB57ogjXB/+suBQYo5g5JP+OOYTyG/zIiLQOAYPQQz3j6SpdhAdHq vBbCzg1Wn4wacJP0+kvfgbLyrd9QAiLDA7+Iq1pOPqWcvt3B6Tl6e9SvWmUCSwYj ezg51MgjbxY2IWUtN6Lm7LmjZSGtZmIlDphW5YdKS3Mqxg9EUkiWu3UdLZzfpl4A tQSI8VBIDpMNtJn26edDIRjhkIAmUse1Ekpjn6HZI+o7WBoCm2YU68XOKRqVj+ph stounNmIUDbznrnXufbTI4Deo18eA3y+ywX1XUo2QoY1xEORKeoROCuoSQyw5DPj gsPJPlj5meLyuT50O3TL0JkvA3Ol47Q= -----END CERTIFICATE-----Generated at Fri Nov 22 01:36:19 2024 by rpki-client on console-ams.rpki-client.org