$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa File: aa41224c-db93-3beb-92a8-b50f57229a2f.roa (raw, json) Hash identifier: SNy4PIjbamJln8jD+QUwDmrFxHl3ndxtTPyn965DJ2U= Subject key identifier: B2:25:E8:6D:3E:EA:27:02:C2:61:0B:71:21:88:DB:2A:78:DE:E3:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E40A9B671F7E68CB7FAC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:40:a9:b6:71:f7:e6:8c:b7:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=8d1b7334-693d-414e-98dc-6ca84f8e8c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:c5:22:65:4c:4c:17:07:4c:13:40:96:8b: 7a:d3:ce:58:e2:dd:b6:f3:12:51:59:3c:30:cf:47: 5e:8a:52:0b:23:39:e8:91:53:4f:5d:c2:44:4a:48: 17:73:f6:d7:e3:c1:ea:71:15:62:2e:43:94:5c:fc: 22:63:3b:80:77:d5:e5:4b:43:e5:fd:87:8b:8f:7d: e9:a5:b1:d4:48:8b:93:20:9f:a7:69:f5:fb:b9:92: 59:e8:3d:03:0f:be:43:80:31:5a:6f:05:10:76:71: 47:ce:c0:06:10:63:0e:db:53:34:eb:bd:24:e3:23: cc:b2:dc:24:dd:11:70:f4:25:48:2d:9a:63:5e:f8: 49:d7:25:6f:92:ff:21:cb:f9:f0:4f:03:fe:40:2b: a5:cf:ab:f1:66:bd:96:9f:b1:66:2e:af:9f:a8:6a: 0a:74:83:02:a9:39:ca:0b:b8:c7:aa:ed:17:9b:50: a6:0d:a1:23:b3:fa:32:84:6e:25:ac:86:e3:e9:97: 4d:de:f0:ce:8b:1c:4c:a7:2d:f9:88:fe:97:77:df: c4:31:4c:5b:d9:87:fe:af:72:da:c1:69:7d:60:b2: 65:1b:2e:a1:67:35:89:01:35:0e:ed:e7:75:07:4a: 34:e7:f9:f0:6b:59:a3:42:e5:ea:37:4a:9d:ab:c6: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:25:E8:6D:3E:EA:27:02:C2:61:0B:71:21:88:DB:2A:78:DE:E3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b6:3d:f5:c5:6f:da:72:98:98:db:60:a6:c2:53:46:61:e2: 06:a5:21:eb:86:36:36:0e:d1:cd:ef:b1:ba:30:38:83:02:32: 0f:31:2c:52:46:6e:94:7a:5a:e6:26:a0:8b:3d:e7:d6:d1:19: c5:d3:2f:1d:41:f1:f4:06:b2:35:a8:54:fd:c4:2d:06:d6:a8: 8b:a1:e5:c2:6b:5a:d6:6e:b2:f4:e1:1e:64:2d:77:57:7f:9c: 2e:f9:cb:45:ad:f0:78:29:b5:1e:95:ba:33:ca:06:88:fe:62: 3e:ea:b3:d1:81:a5:b7:6d:42:d3:a7:ee:38:65:9f:a7:75:86: 60:9a:e5:9b:31:59:89:20:73:82:cc:42:f4:ca:94:79:1a:ea: 19:cc:99:00:b8:12:c8:d5:1f:32:6a:54:ef:37:ba:6b:f0:fe: 3f:61:31:fa:2f:f8:d7:09:40:6e:87:34:d9:12:6e:60:44:85: e0:4c:40:0c:e8:b8:bb:26:5f:c4:15:9a:c3:69:62:a9:c0:a9: 25:7a:b4:33:8c:78:59:31:5d:b9:12:d0:13:3a:4b:4e:cd:40: 13:0a:4b:89:fe:0a:85:e8:67:60:1a:be:b0:ce:75:9e:e0:46: a6:06:98:9d:bf:b5:36:2d:3d:90:5c:a5:90:32:cc:09:72:95: 4b:67:f6:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkCptnH35oy3+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OGQxYjczMzQtNjkzZC00MTRlLTk4ZGMtNmNhODRmOGU4YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcDFImVMTBcHTBNAlot6085Y4t228xJRWTww z0deilILIznokVNPXcJESkgXc/bX48HqcRViLkOUXPwiYzuAd9XlS0Pl/YeLj33p pbHUSIuTIJ+nafX7uZJZ6D0DD75DgDFabwUQdnFHzsAGEGMO21M0670k4yPMstwk 3RFw9CVILZpjXvhJ1yVvkv8hy/nwTwP+QCulz6vxZr2Wn7FmLq+fqGoKdIMCqTnK C7jHqu0Xm1CmDaEjs/oyhG4lrIbj6ZdN3vDOixxMpy35iP6Xd9/EMUxb2Yf+r3La wWl9YLJlGy6hZzWJATUO7ed1B0o05/nwa1mjQuXqN0qdq8bJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIl6G0+6icCwmELcSGI2yp43uOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE0MTIyNGMtZGI5My0z YmViLTkyYTgtYjUwZjU3MjI5YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG2PfXFb9pymJjbYKbCU0Zh4galIeuGNjYO0c3vsbowOIMCMg8xLFJG bpR6WuYmoIs959bRGcXTLx1B8fQGsjWoVP3ELQbWqIuh5cJrWtZusvThHmQtd1d/ nC75y0Wt8HgptR6VujPKBoj+Yj7qs9GBpbdtQtOn7jhln6d1hmCa5ZsxWYkgc4LM QvTKlHka6hnMmQC4EsjVHzJqVO83umvw/j9hMfov+NcJQG6HNNkSbmBEheBMQAzo uLsmX8QVmsNpYqnAqSV6tDOMeFkxXbkS0BM6S07NQBMKS4n+CoXoZ2AavrDOdZ7g RqYGmJ2/tTYtPZBcpZAyzAlylUtn9vw= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:41 2024 by rpki-client on console-ams.rpki-client.org