$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa File: a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa (raw, json) Hash identifier: WxNFG8js2p9Wwm26LZirtO2z97oZGuHnCCuU9ifLnzs= Subject key identifier: D0:1E:C9:CD:B0:CB:59:D0:E7:51:C2:B3:6A:21:15:1D:34:29:54:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC2BD26D7091F5FC12D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c2:bd:26:d7:09:1f:5f:c1:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=d6599a03-687d-452c-81d7-2b340372eb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:ce:ed:97:e3:88:8b:e3:21:17:90:48:0d: f7:fb:18:77:fa:ef:2e:d6:3b:79:33:39:0a:05:f8: 95:cf:46:2b:63:57:10:da:31:f5:41:49:1f:c5:0b: a2:7b:a3:33:fd:99:11:1f:40:2b:ff:02:8c:c1:59: dd:35:32:e9:30:c8:ef:74:c0:4a:09:61:e1:5b:ea: 11:58:09:ff:b0:f9:26:81:62:b7:2b:f1:63:3c:c0: a9:4b:e9:2d:46:fb:10:49:d8:4c:5b:ed:43:04:90: 98:8d:98:21:9c:4d:17:43:e8:17:07:ce:f6:77:f5: 6c:f9:e5:21:9b:92:0f:5f:08:01:ca:ef:36:17:1d: ca:a2:1b:80:5e:be:33:29:f1:2e:d6:3a:c3:fd:f8: 94:cc:47:91:61:98:18:93:a0:65:5f:95:37:ad:02: 6d:c3:e7:55:1c:68:58:0f:af:cd:cc:8e:45:f8:b3: 4c:06:c3:33:41:81:cf:4d:e9:f9:e1:3f:21:d5:5a: 6b:47:a6:f1:de:b0:56:61:ef:57:3e:65:f3:c7:06: b3:96:c9:31:de:3d:4e:99:ed:de:29:6e:93:ad:80: 14:43:34:17:72:1e:3c:b1:b6:e8:c7:e4:45:20:18: 5a:a2:e8:14:38:56:1c:79:fd:c7:d6:43:7b:ea:de: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1E:C9:CD:B0:CB:59:D0:E7:51:C2:B3:6A:21:15:1D:34:29:54:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e9:da:55:de:e9:bd:ec:6f:5a:a3:c1:11:40:6c:00:f0:cb: c9:51:05:52:91:f1:5d:21:d0:c2:08:a9:1b:ba:1f:bd:52:32: e7:db:c4:b4:23:71:33:a6:f2:6c:03:91:48:8e:b6:c3:4d:78: aa:68:e3:f7:ae:30:10:a7:6b:1d:35:ab:42:d6:19:40:8d:9a: 53:89:bc:57:4d:02:0b:e1:88:7f:05:b7:a7:c1:9b:0a:43:93: ef:82:86:ae:bb:d3:91:79:c2:b0:a0:ae:4f:d0:bc:c1:90:7e: b4:84:8b:f1:a0:f9:16:30:4c:d7:8a:09:85:43:7f:1a:3e:6c: bc:63:a9:dc:4d:81:f4:4e:86:43:7b:4b:69:9f:24:62:c4:b3: 7d:a2:77:c1:f4:6e:7d:f6:a9:41:d1:06:a3:42:1d:1a:c9:be: e0:48:ab:0a:e4:40:83:3a:e3:48:88:c9:1d:7e:ea:b2:cf:5a: 8f:6b:9a:de:40:6f:75:74:5b:32:38:47:c5:44:2f:ef:3e:4a: 8f:e6:05:03:fc:6a:6f:2a:43:24:54:66:aa:6f:da:34:22:d7: 0a:3c:10:42:95:30:73:48:f3:1d:f9:0d:9b:91:8f:d1:0c:64: 58:09:75:05:c4:be:51:65:ea:b7:9f:81:fb:3c:7d:e6:fc:a1: b2:a5:ee:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcK9JtcJH1/BLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZDY1OTlhMDMtNjg3ZC00NTJjLTgxZDctMmIzNDAzNzJlYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzzO7ZfjiIvjIReQSA33+xh3+u8u1jt5MzkK BfiVz0YrY1cQ2jH1QUkfxQuie6Mz/ZkRH0Ar/wKMwVndNTLpMMjvdMBKCWHhW+oR WAn/sPkmgWK3K/FjPMCpS+ktRvsQSdhMW+1DBJCYjZghnE0XQ+gXB872d/Vs+eUh m5IPXwgByu82Fx3KohuAXr4zKfEu1jrD/fiUzEeRYZgYk6BlX5U3rQJtw+dVHGhY D6/NzI5F+LNMBsMzQYHPTen54T8h1VprR6bx3rBWYe9XPmXzxwazlskx3j1Ome3e KW6TrYAUQzQXch48sbbox+RFIBhaougUOFYcef3H1kN76t6HZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAeyc2wy1nQ51HCs2ohFR00KVRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmNWI0YWYtMjVmYS0z ZTQ4LWI4YjMtNGRhNmVjOGY0MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDp2lXe6b3sb1qjwRFAbADwy8lRBVKR8V0h0MIIqRu6H71SMufbxLQj cTOm8mwDkUiOtsNNeKpo4/euMBCnax01q0LWGUCNmlOJvFdNAgvhiH8Ft6fBmwpD k++Chq6705F5wrCgrk/QvMGQfrSEi/Gg+RYwTNeKCYVDfxo+bLxjqdxNgfROhkN7 S2mfJGLEs32id8H0bn32qUHRBqNCHRrJvuBIqwrkQIM640iIyR1+6rLPWo9rmt5A b3V0WzI4R8VEL+8+So/mBQP8am8qQyRUZqpv2jQi1wo8EEKVMHNI8x35DZuRj9EM ZFgJdQXEvlFl6refgfs8feb8obKl7nY= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org