$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa File: a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa (raw, json) Hash identifier: RAcR3PoUwC+7cmWNs5Gj3z7yFvpvet0yHBOmbVSkxp0= Subject key identifier: 59:FE:27:E7:B7:17:40:91:C2:5A:3F:00:C5:29:44:8B:CB:DB:41:D3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E2D145FE5F396981AAF40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 99.197.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:2d:14:5f:e5:f3:96:98:1a:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=263d33ed-1020-4cd6-9d43-2bc91ad2a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:ca:66:b7:23:55:b9:c6:de:c4:94:82:e2: aa:22:69:85:97:c6:81:d5:d6:63:c2:7f:03:69:f8: 42:ae:4e:7d:c9:8c:c8:a9:ff:00:2e:2a:38:df:d0: fc:b2:3e:58:e2:72:5c:8b:48:3b:37:bb:71:bf:f9: 92:75:33:c1:06:6c:4c:58:67:3b:50:d3:fb:8c:93: 26:f5:55:1a:b5:19:92:1d:41:24:ac:00:91:ac:ec: b0:fc:34:f5:7e:02:8f:13:78:ed:2c:df:00:3a:e6: 98:d3:81:8f:86:c6:ab:b2:bb:dd:20:a8:96:c3:a8: f0:52:5d:90:c4:d1:b5:a8:99:c6:35:69:89:d7:bc: ee:9f:d6:47:8f:cd:7b:1c:ac:eb:19:5e:6a:eb:f3: ae:1d:e5:60:6c:44:21:ff:a6:b3:a7:7a:d6:c9:a4: 52:19:25:af:bb:2c:19:60:f3:f6:f9:d2:c6:3f:3e: a6:1d:67:d4:3d:93:db:ed:b3:ba:59:93:40:db:6f: 7c:23:8c:63:b2:b2:fc:d0:d3:0b:ee:7c:2b:e9:d3: 04:11:b9:a9:4b:aa:ad:2d:56:8f:66:32:d2:b9:6e: 38:bf:80:95:f7:f1:af:ef:ec:30:f6:89:49:87:0c: 89:0c:29:ec:76:ab:f1:85:b3:15:b3:b2:a9:58:b5: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:27:E7:B7:17:40:91:C2:5A:3F:00:C5:29:44:8B:CB:DB:41:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4239e8f-07a1-313a-a7a8-9a2479cfa30d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 99.197.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3a:c5:dd:f0:39:fc:04:90:ae:b3:a9:e5:e8:7b:30:ae:69: f3:29:11:67:df:eb:26:bc:61:38:38:09:3c:47:69:e5:6f:07: 29:23:c5:b1:5f:88:fc:23:99:a8:3f:cd:9f:e7:96:90:83:b1: b6:b6:b2:c8:34:51:e7:16:0f:5b:c7:f5:10:b3:90:ca:1a:9f: 04:d3:00:54:09:19:6a:70:40:0a:63:fe:e3:2e:c7:a1:b2:c4: db:6f:aa:db:a7:dc:53:28:82:b0:0e:50:ca:c0:9b:df:7c:a5: 14:fa:8d:24:b2:a3:61:ae:04:32:09:51:6f:54:8a:64:b2:57: 20:f9:8b:3e:a3:1e:89:fc:1f:a5:ce:d9:79:3e:a0:14:b7:bc: aa:d0:60:32:6b:df:b9:0e:bd:7f:f8:73:cc:63:48:67:10:d1: 7c:36:22:9e:78:7c:08:a8:ee:e2:03:98:53:4e:33:00:89:f5: 46:ce:8c:87:38:d2:e0:9c:ac:ad:a4:6b:26:22:ca:d2:f8:a5: ae:70:97:1c:ff:b9:89:a4:77:86:46:c5:36:7f:52:87:60:33: cf:07:a4:ea:57:d6:56:e1:23:17:ce:49:fd:8c:f0:62:33:b6: 76:3e:1b:a1:d9:f5:37:cf:f5:44:ec:6c:a5:1c:d6:f9:c4:43: b7:67:fa:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPi0UX+Xzlpgar0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MjYzZDMzZWQtMTAyMC00Y2Q2LTlkNDMtMmJjOTFhZDJhMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBPKZrcjVbnG3sSUguKqImmFl8aB1dZjwn8D afhCrk59yYzIqf8ALio439D8sj5Y4nJci0g7N7txv/mSdTPBBmxMWGc7UNP7jJMm 9VUatRmSHUEkrACRrOyw/DT1fgKPE3jtLN8AOuaY04GPhsarsrvdIKiWw6jwUl2Q xNG1qJnGNWmJ17zun9ZHj817HKzrGV5q6/OuHeVgbEQh/6azp3rWyaRSGSWvuywZ YPP2+dLGPz6mHWfUPZPb7bO6WZNA2298I4xjsrL80NML7nwr6dMEEbmpS6qtLVaP ZjLSuW44v4CV9/Gv7+ww9olJhwyJDCnsdqvxhbMVs7KpWLXoZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn+J+e3F0CRwlo/AMUpRIvL20HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQyMzllOGYtMDdhMS0z MTNhLWE3YTgtOWEyNDc5Y2ZhMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY6xd3wOfwEkK6zqeXoezCuafMpEWff6ya8YTg4CTxHaeVvBykjxbFf iPwjmag/zZ/nlpCDsba2ssg0UecWD1vH9RCzkMoanwTTAFQJGWpwQApj/uMux6Gy xNtvqtun3FMogrAOUMrAm998pRT6jSSyo2GuBDIJUW9UimSyVyD5iz6jHon8H6XO 2Xk+oBS3vKrQYDJr37kOvX/4c8xjSGcQ0Xw2Ip54fAio7uIDmFNOMwCJ9UbOjIc4 0uCcrK2kayYiytL4pa5wlxz/uYmkd4ZGxTZ/UodgM88HpOpX1lbhIxfOSf2M8GIz tnY+G6HZ9TfP9UTsbKUc1vnEQ7dn+q4= -----END CERTIFICATE-----Generated at Sun Apr 28 16:51:24 2024 by rpki-client on console-ams.rpki-client.org