$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b09ca888-134f-3cbe-a06a-f1352f774844.roa File: b09ca888-134f-3cbe-a06a-f1352f774844.roa (raw, json) Hash identifier: j0lN6I/WOQuXciPl72DR5ojUy3lM7geFfvU4JXKfA78= Subject key identifier: 86:60:93:AB:B0:8B:EA:B8:83:5F:09:F4:66:0F:07:33:CE:A1:53:31 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E42B2AEC7B9A2057A1A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b09ca888-134f-3cbe-a06a-f1352f774844.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:42:b2:ae:c7:b9:a2:05:7a:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=8f5f3f48-e840-48a4-bf30-9d203593feb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:46:5a:a5:4a:0f:ef:3f:55:09:49:49:21: e9:ac:6b:ed:97:cc:39:4a:7d:e8:ee:bc:32:ba:a5: 3b:b5:00:de:45:d0:14:11:e9:52:26:e5:30:01:21: fe:23:dc:05:1b:bb:49:38:e6:b4:3d:9a:b2:63:2b: 03:6b:85:c8:f9:65:e1:2a:f9:8c:b6:0a:2c:d7:4f: 36:a2:08:a2:72:c4:92:aa:cd:2b:29:59:cc:f0:72: 6b:46:a0:eb:67:94:90:0f:08:15:57:d0:04:d6:e6: b2:45:85:12:b5:2d:4e:3f:57:97:7e:96:c0:95:83: e9:85:2f:29:b9:e8:e8:c2:b6:0b:f4:47:06:e1:3d: 19:40:6d:44:09:a8:46:2f:6d:fd:bc:b6:7b:79:26: 99:37:16:e5:5f:bf:24:47:27:0c:8d:62:08:9b:59: d1:06:fa:97:85:f4:3f:96:4e:e6:b2:e6:02:1c:f9: 69:f3:5c:88:82:93:46:b2:2c:4a:c3:55:18:3f:24: c9:a0:2b:77:79:0d:c6:83:25:8a:57:d5:5b:b7:e6: 0d:de:4e:9a:ef:ba:b0:a3:0d:9f:a7:7e:7d:2e:f4: 67:02:63:8c:71:e9:05:6f:5a:85:78:13:02:8a:b6: 8f:cd:64:83:b2:1f:6b:48:e7:53:1b:41:cd:df:b9: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:60:93:AB:B0:8B:EA:B8:83:5F:09:F4:66:0F:07:33:CE:A1:53:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b09ca888-134f-3cbe-a06a-f1352f774844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:70:7f:70:b9:ae:69:5c:b4:a2:63:cc:b1:f5:fb:26:fe:c9: d9:3c:71:e7:5d:24:3d:63:1b:a0:b4:27:3e:68:57:db:78:4b: 86:0f:ca:bb:a7:b3:7b:9b:ed:04:02:d1:91:5b:01:83:5c:15: 8b:35:d7:30:a3:ea:05:15:0b:db:b5:f8:0b:98:d7:ac:19:84: 38:0c:fd:77:c8:cd:12:f6:a1:a1:b5:d1:d0:69:ff:f4:f5:d3: 94:f0:35:7b:4f:84:b9:28:0c:c3:d6:af:c1:1d:be:9e:39:76: 49:d4:e5:e2:03:eb:0d:c6:a2:ec:dd:f7:60:56:1f:e6:77:f2: 6a:97:b6:40:44:3d:d8:5d:49:1f:f1:33:e0:ed:6d:83:21:86: 1b:71:e8:07:67:cc:72:0b:2e:45:f6:46:16:16:4b:35:49:74: 64:0d:a6:2e:5e:1a:5f:70:2b:b3:cc:fa:77:0e:0d:ed:ed:9c: 87:0d:74:3c:c5:7f:c6:c1:44:5c:af:30:54:b4:2b:2e:cc:79: c5:a6:fc:3c:e5:07:6d:e7:8d:12:c9:de:d7:a9:31:96:c0:cb: 49:75:d1:08:f2:da:03:5b:55:19:8a:06:4f:10:23:9e:cd:de: c7:99:96:8f:31:1a:98:9e:a7:63:de:dd:60:d5:5b:43:8e:d3: 08:f0:ea:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkKyrse5ogV6GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OGY1ZjNmNDgtZTg0MC00OGE0LWJmMzAtOWQyMDM1OTNmZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoFGWqVKD+8/VQlJSSHprGvtl8w5Sn3o7rwy uqU7tQDeRdAUEelSJuUwASH+I9wFG7tJOOa0PZqyYysDa4XI+WXhKvmMtgos1082 ogiicsSSqs0rKVnM8HJrRqDrZ5SQDwgVV9AE1uayRYUStS1OP1eXfpbAlYPphS8p uejowrYL9EcG4T0ZQG1ECahGL239vLZ7eSaZNxblX78kRycMjWIIm1nRBvqXhfQ/ lk7msuYCHPlp81yIgpNGsixKw1UYPyTJoCt3eQ3GgyWKV9Vbt+YN3k6a77qwow2f p359LvRnAmOMcekFb1qFeBMCiraPzWSDsh9rSOdTG0HN37mmlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZgk6uwi+q4g18J9GYPBzPOoVMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjA5Y2E4ODgtMTM0Zi0z Y2JlLWEwNmEtZjEzNTJmNzc0ODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1wf3C5rmlctKJjzLH1+yb+ydk8ceddJD1jG6C0Jz5oV9t4S4YPyrun s3ub7QQC0ZFbAYNcFYs11zCj6gUVC9u1+AuY16wZhDgM/XfIzRL2oaG10dBp//T1 05TwNXtPhLkoDMPWr8Edvp45dknU5eID6w3Gouzd92BWH+Z38mqXtkBEPdhdSR/x M+DtbYMhhhtx6AdnzHILLkX2RhYWSzVJdGQNpi5eGl9wK7PM+ncODe3tnIcNdDzF f8bBRFyvMFS0Ky7MecWm/DzlB23njRLJ3tepMZbAy0l10Qjy2gNbVRmKBk8QI57N 3seZlo8xGpiep2Pe3WDVW0OO0wjw6ms= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org