$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add31e97-e69f-36aa-9d98-1b40932b98dc.roa File: add31e97-e69f-36aa-9d98-1b40932b98dc.roa (raw, json) Hash identifier: 4v/yPBX0uRnWSyWLF3OJjqoq8YCrVR/1zRnj8xs3wS4= Subject key identifier: 70:71:1F:C1:7C:28:2D:F6:8C:E9:22:FD:CB:CE:50:FE:07:BC:A0:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC64198CFE44B075D7F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add31e97-e69f-36aa-9d98-1b40932b98dc.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c6:41:98:cf:e4:4b:07:5d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=7761a0f7-7ef7-49f2-b5fb-5218d20e4ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c0:f7:f0:16:87:66:52:84:d3:a7:15:fd:c7: 37:3f:86:91:5a:94:9f:a8:f7:50:41:e4:f9:bc:24: 15:3f:10:97:18:58:80:6c:3b:c9:8c:f2:44:86:84: b3:90:8d:46:10:75:d5:dc:68:51:a3:d7:33:45:3c: e6:65:ac:45:1a:cf:6b:62:1f:93:d3:67:c2:f7:c4: 8f:c1:8c:af:8b:87:1a:24:7f:ff:84:f7:cb:8d:d6: bb:e6:25:bd:12:7f:7f:85:2f:e4:4e:39:8f:24:d3: 0f:5e:85:69:51:d8:e2:03:a1:ea:0c:ad:35:a8:cd: 34:f3:8b:3a:1d:ea:7f:7b:94:27:ca:62:07:9f:96: 76:26:56:fa:e3:49:f8:6e:6f:8a:bf:46:17:55:1c: 5f:2e:fa:6a:1e:54:62:92:c5:28:47:29:3c:19:58: a1:cf:40:d1:9a:0d:e6:87:a6:49:61:e8:63:85:17: e4:32:4d:27:b3:e0:71:70:9d:bb:36:e8:4d:82:6e: f9:95:76:b3:e0:86:b9:d2:b4:ee:cc:c3:39:57:13: 02:22:7c:45:0a:84:2e:ea:2a:01:6d:55:cc:89:51: 3b:c2:e9:58:a4:73:47:ae:8a:1a:84:b6:a3:ef:26: 83:d1:11:1e:12:fe:f7:c7:62:d3:0d:d6:5d:a2:39: 3f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:1F:C1:7C:28:2D:F6:8C:E9:22:FD:CB:CE:50:FE:07:BC:A0:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add31e97-e69f-36aa-9d98-1b40932b98dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:1b:2e:10:62:62:cd:20:fd:3d:ac:16:01:d9:6b:32:61:0e: a8:2d:21:01:7e:93:6f:4a:3c:85:34:62:b1:f7:71:a0:9e:32: 33:56:1e:54:3c:be:1d:59:58:77:c5:9e:c3:ab:ab:2a:8c:d1: d8:46:c3:80:a2:10:d7:8e:c0:63:b9:54:d1:f1:0c:09:fe:fd: d2:8f:10:50:1c:61:9c:a8:19:d4:fe:de:d7:ec:47:50:e8:d1: bc:f5:9f:ed:bb:9d:2f:3e:e3:bf:14:59:6b:00:d0:82:ec:82: 16:e7:2a:d6:06:fc:4c:00:74:56:20:d2:71:23:6f:20:62:72: f4:f0:8d:80:bb:ac:a1:e9:11:46:5d:f9:e6:f0:5f:76:4b:da: d1:c2:08:82:54:02:a9:a7:a9:a1:92:40:8c:2b:07:35:f6:b5: c6:ba:7e:82:3c:b1:d4:46:c1:b8:72:7a:40:78:14:9e:69:57: 68:c7:43:c0:1a:66:67:ee:b1:d1:f1:ea:7b:c0:ee:3e:69:30: f6:96:88:79:3c:c2:cc:ab:6c:fe:ed:1a:68:c9:34:25:cb:14: 5c:57:2a:05:5e:bc:d8:10:1a:39:b3:7d:20:98:d1:f2:67:d9: bd:f6:3e:b8:fe:5f:fe:35:7a:ba:3c:eb:79:6b:c4:eb:48:32: ba:17:91:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcZBmM/kSwddfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk Nzc2MWEwZjctN2VmNy00OWYyLWI1ZmItNTIxOGQyMGU0ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sD38BaHZlKE06cV/cc3P4aRWpSfqPdQQeT5 vCQVPxCXGFiAbDvJjPJEhoSzkI1GEHXV3GhRo9czRTzmZaxFGs9rYh+T02fC98SP wYyvi4caJH//hPfLjda75iW9En9/hS/kTjmPJNMPXoVpUdjiA6HqDK01qM0084s6 Hep/e5QnymIHn5Z2Jlb640n4bm+Kv0YXVRxfLvpqHlRiksUoRyk8GVihz0DRmg3m h6ZJYehjhRfkMk0ns+BxcJ27NuhNgm75lXaz4Ia50rTuzMM5VxMCInxFCoQu6ioB bVXMiVE7wulYpHNHrooahLaj7yaD0REeEv73x2LTDdZdojk/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBxH8F8KC32jOki/cvOUP4HvKBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWRkMzFlOTctZTY5Zi0z NmFhLTlkOTgtMWI0MDkzMmI5OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAbLhBiYs0g/T2sFgHZazJhDqgtIQF+k29KPIU0YrH3caCeMjNWHlQ8 vh1ZWHfFnsOrqyqM0dhGw4CiENeOwGO5VNHxDAn+/dKPEFAcYZyoGdT+3tfsR1Do 0bz1n+27nS8+478UWWsA0ILsghbnKtYG/EwAdFYg0nEjbyBicvTwjYC7rKHpEUZd +ebwX3ZL2tHCCIJUAqmnqaGSQIwrBzX2tca6foI8sdRGwbhyekB4FJ5pV2jHQ8Aa ZmfusdHx6nvA7j5pMPaWiHk8wsyrbP7tGmjJNCXLFFxXKgVevNgQGjmzfSCY0fJn 2b32Prj+X/41ero863lrxOtIMroXkTA= -----END CERTIFICATE-----Generated at Sat Apr 27 10:22:47 2024 by rpki-client on console-ams.rpki-client.org