$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af34dd58-8ed2-3543-b763-7807c9f26ff8.roa File: af34dd58-8ed2-3543-b763-7807c9f26ff8.roa (raw, json) Hash identifier: xdDsbzuE7Si2FgoxqEH+nA2w/Hicl53C8i7ilcUcUCY= Subject key identifier: DE:CA:F0:2F:50:99:03:4A:E2:CD:E0:65:47:B6:D9:3E:77:6A:D6:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E533F2E36CD56C02BFB70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af34dd58-8ed2-3543-b763-7807c9f26ff8.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 184.20.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:53:3f:2e:36:cd:56:c0:2b:fb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=1c391832-bc70-478a-b1db-a7a56a07a44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:1a:35:31:3f:1f:7c:01:ac:f0:46:aa:b9: 78:fe:c2:1f:79:2a:c0:b1:81:8f:3a:dc:cc:4a:7e: be:2c:94:ff:c5:f3:1d:9c:46:cf:da:e3:d8:ab:5d: e2:77:94:5d:d6:7b:37:32:15:4b:3b:ef:c2:b5:4c: d3:f2:c0:19:1c:5f:ac:33:0c:7f:99:a4:0a:c6:dc: a9:4b:bf:dd:a5:21:70:6c:1e:54:26:b8:73:c2:9e: 27:5f:7f:d3:81:7e:fc:93:31:d9:46:b3:c1:4e:f5: 16:50:e7:8a:94:71:08:51:b0:7b:87:c1:c4:bd:dc: 4c:1a:44:3d:69:e6:69:b2:9f:ab:e2:be:ee:14:bb: 1c:a6:a5:6a:2b:93:fc:58:e3:19:7d:94:08:b6:9c: d9:f2:06:7e:6b:d1:42:d8:39:bd:32:2d:fb:1f:37: 87:f3:b7:e3:12:0a:90:33:7b:4a:f7:d3:d4:2b:02: 02:68:87:5e:2e:0b:b6:61:f7:86:06:f4:67:97:93: 3c:1c:ed:a6:94:15:b9:3d:42:ac:ab:5e:e0:74:de: c5:fd:74:95:ea:83:d1:99:45:65:95:78:09:4f:5e: d8:88:7b:b2:f6:49:83:64:d3:86:28:04:ba:ef:9a: f3:38:c1:43:85:a9:b6:36:73:20:38:f2:79:82:91: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:F0:2F:50:99:03:4A:E2:CD:E0:65:47:B6:D9:3E:77:6A:D6:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af34dd58-8ed2-3543-b763-7807c9f26ff8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 184.20.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6b:ef:c9:00:7a:3f:83:8d:8b:d0:7c:23:87:34:8e:44:59: 85:89:30:73:a4:88:5f:41:65:d5:a5:bf:38:d9:7e:42:52:09: 6e:c2:8c:72:09:c0:6c:62:e0:d0:c9:09:ad:cb:58:6c:30:b3: 00:b7:7d:7f:44:f1:25:a5:c5:a9:f1:e5:87:24:a6:ed:a3:dd: 9b:ad:c1:4d:b5:31:b3:ef:d8:8b:a5:db:f7:27:b9:80:8a:a8: 9a:04:f7:dc:85:ce:68:99:45:f3:17:b1:50:8d:ed:de:84:6b: 0d:fc:5f:2d:f9:bd:72:14:6f:81:2b:35:fd:20:25:b4:e3:74: 05:1d:9f:e3:c0:04:90:8a:89:2e:e8:d3:f3:c6:27:27:f7:28: cc:4a:6c:db:66:27:78:b2:0d:fb:58:b2:96:99:28:02:00:e7: 11:5c:10:85:0b:1d:51:69:21:dd:45:d5:04:95:a3:62:6f:57: 8c:10:ee:b4:98:3a:c5:f0:b7:8a:87:49:b5:35:7f:12:c3:98: 64:b1:c9:22:50:cd:1f:42:3b:2d:a4:98:cb:02:e3:4e:df:77: 89:0c:d3:be:b9:ea:7a:ed:97:4d:01:8e:11:58:ac:4f:b7:9e: fa:38:cf:0f:ee:28:1e:6d:94:fb:d9:e9:62:52:03:a3:4f:f5: b9:6d:1e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPlM/LjbNVsAr+3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MWMzOTE4MzItYmM3MC00NzhhLWIxZGItYTdhNTZhMDdhNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo28aNTE/H3wBrPBGqrl4/sIfeSrAsYGPOtzM Sn6+LJT/xfMdnEbP2uPYq13id5Rd1ns3MhVLO+/CtUzT8sAZHF+sMwx/maQKxtyp S7/dpSFwbB5UJrhzwp4nX3/TgX78kzHZRrPBTvUWUOeKlHEIUbB7h8HEvdxMGkQ9 aeZpsp+r4r7uFLscpqVqK5P8WOMZfZQItpzZ8gZ+a9FC2Dm9Mi37HzeH87fjEgqQ M3tK99PUKwICaIdeLgu2YfeGBvRnl5M8HO2mlBW5PUKsq17gdN7F/XSV6oPRmUVl lXgJT17YiHuy9kmDZNOGKAS675rzOMFDham2NnMgOPJ5gpGInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7K8C9QmQNK4s3gZUe22T53atYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWYzNGRkNTgtOGVkMi0z NTQzLWI3NjMtNzgwN2M5ZjI2ZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtr78kAej+DjYvQfCOHNI5EWYWJMHOkiF9BZdWlvzjZfkJSCW7CjHIJ wGxi4NDJCa3LWGwwswC3fX9E8SWlxanx5Yckpu2j3ZutwU21MbPv2Iul2/cnuYCK qJoE99yFzmiZRfMXsVCN7d6Eaw38Xy35vXIUb4ErNf0gJbTjdAUdn+PABJCKiS7o 0/PGJyf3KMxKbNtmJ3iyDftYspaZKAIA5xFcEIULHVFpId1F1QSVo2JvV4wQ7rSY OsXwt4qHSbU1fxLDmGSxySJQzR9COy2kmMsC407fd4kM07656nrtl00BjhFYrE+3 nvo4zw/uKB5tlPvZ6WJSA6NP9bltHgo= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org