$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa File: bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa (raw, json) Hash identifier: bZgKVmCCozTjKU4rqYjsoqgMg+34N4PFUzzjvMJUMEc= Subject key identifier: D3:BC:90:E3:79:C9:C5:21:18:A5:A8:EC:33:1F:5D:0F:E4:8A:7A:0E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E0218CAF4DF05CE062320 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:02:18:ca:f4:df:05:ce:06:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=e4ba7e92-5dd4-41da-aa17-1041447565fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:13:30:6a:a3:30:5a:a4:02:0e:4e:5b:f8: ad:0d:b3:4b:8b:2b:bf:a6:ea:12:23:7d:5d:94:40: dd:02:7b:04:01:90:18:ab:b5:a7:7c:e5:37:53:ca: 0b:d7:03:5e:47:58:2a:e3:d5:f2:72:83:eb:29:12: dd:d5:bc:15:74:4b:79:84:08:2a:95:bc:ba:76:5b: 0e:df:36:1d:3c:57:7f:21:e2:98:15:7d:56:ac:8d: ac:25:12:51:c7:60:e3:59:89:5b:3d:a1:21:ba:8f: 07:70:00:dd:ea:b7:3c:66:06:36:5f:31:d2:f9:ba: 52:fe:d0:43:17:e6:9c:50:31:5d:59:32:9c:e9:b1: 8a:15:2a:91:15:b7:cf:fc:18:cb:77:88:0a:87:a1: 91:83:30:34:5d:12:d6:be:51:75:84:a5:39:f4:af: d4:63:b1:c0:4d:7f:50:da:f2:95:a1:32:02:7a:2d: 98:95:a7:79:a9:8b:c0:30:d9:16:e9:7e:bf:7b:67: ac:6c:a5:24:7f:1f:5b:60:b6:57:12:41:5d:4f:9f: 87:8c:11:e2:c6:26:42:54:3c:1e:f4:cf:02:47:57: 2f:c2:c4:c1:6d:72:08:22:aa:fb:79:5b:a9:da:16: a8:e6:62:1a:ab:6d:95:e9:c9:0e:1c:80:69:a1:3f: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BC:90:E3:79:C9:C5:21:18:A5:A8:EC:33:1F:5D:0F:E4:8A:7A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc4595f9-4cd7-33b7-94d2-e585336dbfa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8d:b5:26:53:64:3d:71:b5:d2:68:a2:79:d1:5e:74:50:fc: ea:c5:c1:e3:b2:75:4e:50:d8:12:90:f3:95:9c:f5:72:bf:97: cd:77:5a:1c:26:2a:72:7d:de:f2:b1:cb:46:8f:a2:4b:79:1b: 60:01:65:22:17:a7:34:7a:91:2f:b1:09:13:62:78:dc:d6:6b: 04:b9:94:67:ba:e3:dd:e0:12:d5:91:7d:31:8d:cc:58:b5:af: 79:4d:ef:de:3c:e7:a7:fa:e4:3e:bb:58:cf:28:02:74:11:ed: f3:7f:8b:5b:b4:5c:c9:e1:5a:d2:95:ae:eb:06:b0:d1:66:f8: ff:59:07:8f:3f:b1:45:97:c3:8f:70:e3:a4:e7:58:bb:58:e9: 20:3d:74:b2:01:94:2c:0f:01:90:f3:a2:51:a8:38:aa:5f:79: 47:64:29:99:af:66:51:c2:bc:e0:b3:ac:38:9a:9d:69:2e:e5: 8f:19:7b:d5:2a:46:0a:dc:03:b9:1c:9f:ae:5f:65:91:a7:ff: 3c:1a:c1:21:fc:0b:78:11:9d:6e:f5:58:6c:e6:c7:39:55:25: b4:be:aa:c7:84:c0:3e:15:7f:f7:4e:27:82:a6:d8:96:2f:86: c0:2b:9e:a4:56:64:98:7e:64:31:4b:d1:65:c0:3b:9b:35:15: bf:ec:d4:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPgIYyvTfBc4GIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZTRiYTdlOTItNWRkNC00MWRhLWFhMTctMTA0MTQ0NzU2NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi84TMGqjMFqkAg5OW/itDbNLiyu/puoSI31d lEDdAnsEAZAYq7WnfOU3U8oL1wNeR1gq49XycoPrKRLd1bwVdEt5hAgqlby6dlsO 3zYdPFd/IeKYFX1WrI2sJRJRx2DjWYlbPaEhuo8HcADd6rc8ZgY2XzHS+bpS/tBD F+acUDFdWTKc6bGKFSqRFbfP/BjLd4gKh6GRgzA0XRLWvlF1hKU59K/UY7HATX9Q 2vKVoTICei2Ylad5qYvAMNkW6X6/e2esbKUkfx9bYLZXEkFdT5+HjBHixiZCVDwe 9M8CR1cvwsTBbXIIIqr7eVup2hao5mIaq22V6ckOHIBpoT9zTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO8kON5ycUhGKWo7DMfXQ/kinoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmM0NTk1ZjktNGNkNy0z M2I3LTk0ZDItZTU4NTMzNmRiZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiNtSZTZD1xtdJoonnRXnRQ/OrFweOydU5Q2BKQ85Wc9XK/l813Whwm KnJ93vKxy0aPokt5G2ABZSIXpzR6kS+xCRNieNzWawS5lGe6493gEtWRfTGNzFi1 r3lN794856f65D67WM8oAnQR7fN/i1u0XMnhWtKVrusGsNFm+P9ZB48/sUWXw49w 46TnWLtY6SA9dLIBlCwPAZDzolGoOKpfeUdkKZmvZlHCvOCzrDianWku5Y8Ze9Uq RgrcA7kcn65fZZGn/zwawSH8C3gRnW71WGzmxzlVJbS+qseEwD4Vf/dOJ4Km2JYv hsArnqRWZJh+ZDFL0WXAO5s1Fb/s1AA= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:46 2024 by rpki-client on console-ams.rpki-client.org