$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa File: b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa (raw, json) Hash identifier: 9rd0yBZBuNkwNS2gHqbmWyOpOB5sACydN0iCCTA9o+g= Subject key identifier: 3E:F7:7C:3C:DF:9C:A5:93:6B:F7:EC:53:35:63:52:B5:0A:CF:0C:25 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E049D5794BDBF4DD86610 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:04:9d:57:94:bd:bf:4d:d8:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=3fd0d30f-3795-4655-bc1f-091b13bd9251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:57:27:17:35:f9:40:0c:3d:f9:72:18:7c:01: 8b:a7:14:d4:5b:2c:d1:3c:b7:73:9b:65:90:4c:d6: 29:d8:a8:fa:ac:46:c1:1a:ea:ae:43:32:e6:94:a2: 08:c2:8b:43:cf:71:9d:24:a9:6f:c0:6d:7a:cd:29: 90:3c:47:c8:66:6d:41:b9:0f:a4:67:5b:9a:bb:2b: 19:7e:4b:42:d5:07:d1:f5:1a:90:bc:d8:1b:7e:39: d2:64:67:01:cb:05:e4:b6:29:b3:db:8f:41:34:47: 51:b7:f4:dc:11:c4:cf:9f:1b:26:20:23:8b:75:66: 39:c5:5e:31:86:e2:33:6e:59:cd:cf:92:eb:92:b7: 52:8c:64:ef:6b:0f:7a:65:50:4c:78:4b:18:2e:c5: 40:35:4c:6f:02:58:51:3c:db:ae:86:a0:de:f8:fc: c5:b2:37:8b:42:2e:11:ba:ab:b1:4e:ca:a2:a8:e5: df:f6:68:fa:94:ad:00:dc:1f:58:53:ec:73:49:78: e1:0b:27:b3:8e:cd:56:10:5d:1a:27:93:0c:d5:8e: 35:e1:8b:96:8d:44:9b:17:b8:fb:d1:72:e6:e4:ca: 7f:a1:28:f5:5f:a3:08:b1:74:00:25:26:7d:f1:7d: 99:0d:c5:f5:59:80:80:72:44:fe:e0:f5:cb:35:12: c9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F7:7C:3C:DF:9C:A5:93:6B:F7:EC:53:35:63:52:B5:0A:CF:0C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:c2:f1:1c:e5:2e:40:e5:7a:bd:2b:ad:36:0a:f3:64:89:4d: 9e:33:b9:c9:91:0a:48:de:0a:10:a3:92:ba:51:7d:c1:f7:2a: b4:03:aa:05:47:be:de:f5:d2:e6:e7:10:49:f0:29:f3:b2:3b: 1c:10:22:5a:46:91:ca:a5:f9:34:75:95:75:a3:49:01:59:f7: 92:a5:46:18:6d:f6:1c:05:ec:20:81:01:84:a0:3b:52:27:b3: 31:e2:e1:1f:3b:5f:3b:a4:b2:0f:ee:2f:df:e8:65:35:5d:bd: ca:3a:87:03:d7:39:c3:cb:99:68:12:d7:68:ba:4a:e6:cc:9d: 9a:b7:47:5c:4e:9c:ba:3d:05:23:5e:0b:d1:37:28:44:69:ae: 4e:d2:9a:cc:54:ac:f2:28:99:fa:ad:24:5f:37:1c:da:05:1b: cf:fd:59:d9:d0:c2:11:0e:1d:14:92:a3:3e:c0:4f:a6:44:48: bf:3f:ad:5d:67:96:8d:14:3b:7e:d5:b5:56:79:3c:6a:16:11: 44:f3:02:72:a4:be:4a:e5:11:4f:fc:c6:e4:a6:58:94:ae:eb: 65:31:ba:03:a3:07:4c:d0:27:67:c1:3b:85:83:1c:1d:7d:d2: cc:ed:f1:86:35:8c:22:6f:f5:65:8e:df:6b:6e:80:27:69:8b: b2:4e:6d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPgSdV5S9v03YZhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk M2ZkMGQzMGYtMzc5NS00NjU1LWJjMWYtMDkxYjEzYmQ5MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilcnFzX5QAw9+XIYfAGLpxTUWyzRPLdzm2WQ TNYp2Kj6rEbBGuquQzLmlKIIwotDz3GdJKlvwG16zSmQPEfIZm1BuQ+kZ1uauysZ fktC1QfR9RqQvNgbfjnSZGcBywXktimz249BNEdRt/TcEcTPnxsmICOLdWY5xV4x huIzblnNz5LrkrdSjGTvaw96ZVBMeEsYLsVANUxvAlhRPNuuhqDe+PzFsjeLQi4R uquxTsqiqOXf9mj6lK0A3B9YU+xzSXjhCyezjs1WEF0aJ5MM1Y414YuWjUSbF7j7 0XLm5Mp/oSj1X6MIsXQAJSZ98X2ZDcX1WYCAckT+4PXLNRLJxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD73fDzfnKWTa/fsUzVjUrUKzwwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk1ZTIyZDktMDZiMC0z NWE3LWIxNTItN2I0ZjY3NGM4Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnC8RzlLkDler0rrTYK82SJTZ4zucmRCkjeChCjkrpRfcH3KrQDqgVH vt710ubnEEnwKfOyOxwQIlpGkcql+TR1lXWjSQFZ95KlRhht9hwF7CCBAYSgO1In szHi4R87Xzuksg/uL9/oZTVdvco6hwPXOcPLmWgS12i6SubMnZq3R1xOnLo9BSNe C9E3KERprk7SmsxUrPIomfqtJF83HNoFG8/9WdnQwhEOHRSSoz7AT6ZESL8/rV1n lo0UO37VtVZ5PGoWEUTzAnKkvkrlEU/8xuSmWJSu62UxugOjB0zQJ2fBO4WDHB19 0szt8YY1jCJv9WWO32tugCdpi7JObUE= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org