$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc931694-90b2-3f7b-a8ad-f9320a37db10.roa File: bc931694-90b2-3f7b-a8ad-f9320a37db10.roa (raw, json) Hash identifier: FeKEXP7ffldbDsnoTL0hm/Vd94I4Xq6iVQwbsxtryPA= Subject key identifier: 92:73:B2:33:9C:FF:51:B2:52:38:EF:83:68:79:55:13:12:C9:69:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC01789F0F79D26134D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc931694-90b2-3f7b-a8ad-f9320a37db10.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c0:17:89:f0:f7:9d:26:13:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=1d4b0fb1-e2b6-4341-bcd2-15fae6db3669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:f1:ee:3a:49:bc:69:eb:a7:57:b3:b0:0d: 7b:f9:43:9c:de:ea:72:4c:12:e0:43:b7:b8:d2:e9: 12:da:5a:1e:bf:65:ff:60:5f:e0:e8:bb:15:bf:8c: f2:9f:3d:e2:26:d9:7b:c8:55:8f:fe:9c:6b:1f:a6: 5a:eb:fb:f8:04:62:ff:e9:b0:0b:19:21:08:a2:d1: 22:23:95:a9:eb:8f:ec:4d:e9:2d:6b:8b:dd:ac:3c: 95:74:d2:83:07:eb:c2:4b:90:ff:9c:09:a0:26:b5: c0:ce:e9:42:98:da:6b:74:3a:1b:1e:4b:0e:45:7f: 4b:08:28:40:14:02:29:6d:48:88:b3:d2:17:4a:2d: 64:94:6c:25:31:fa:c1:60:8e:60:50:a9:7b:13:70: a5:2d:bb:54:17:5e:9d:a3:54:d7:34:56:55:f6:8d: 37:af:71:5d:41:cb:18:cb:6d:6d:85:05:3c:b4:08: c4:b5:f0:88:56:ae:37:21:5a:e7:b8:81:d2:34:3b: 18:12:6e:b5:6c:c9:2b:0e:f9:2f:8e:a7:20:c0:78: 9c:db:b3:25:fe:09:02:8d:c0:65:a2:ff:7b:31:e7: 24:c8:45:bc:e5:7c:25:48:0b:0b:f9:5b:07:ea:97: d5:72:2e:40:27:12:c3:36:58:53:85:83:a8:7d:b0: 1d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:B2:33:9C:FF:51:B2:52:38:EF:83:68:79:55:13:12:C9:69:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc931694-90b2-3f7b-a8ad-f9320a37db10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:e5:37:f3:fb:15:a9:ed:85:85:34:91:4e:55:8b:ea:cd:1b: 82:cf:2d:54:87:37:de:fe:32:ca:0c:a8:bd:cf:12:43:94:1e: d0:9f:08:33:fb:48:80:24:ed:04:0c:2a:7c:2c:13:f7:cf:d0: 1d:d1:9a:76:ae:ea:3b:64:10:ed:c6:cb:df:8b:e8:13:1d:d7: 5c:f7:db:48:f0:53:d9:fb:e3:09:ea:e5:fa:fe:74:7d:b7:00: 86:ba:a6:f7:d9:a8:6f:4c:d9:80:56:d6:9b:20:56:72:d4:07: af:7f:6e:ca:3c:0a:70:86:80:54:62:0d:e7:51:52:a5:a2:c4: ba:22:f4:8d:c0:55:8d:7c:cc:32:9d:3f:a0:21:8d:84:8d:5d: 7a:0a:ed:e9:3f:c9:aa:6d:d6:50:77:5f:1a:58:33:4e:5b:01: a8:2f:57:73:cf:b9:5d:58:77:a6:01:e6:ab:3f:20:42:7e:69: c5:63:da:ac:ad:c7:63:3b:7b:8f:a0:b6:cb:70:2e:53:fe:60: 92:37:ac:59:cb:f1:d0:00:bb:9d:29:ff:6f:e8:21:b3:82:3b: b8:63:67:07:98:62:a5:3a:fd:f9:c9:7a:20:dc:a9:71:b9:06: 04:05:d5:f0:3c:b3:00:5b:29:a1:58:13:2d:58:02:8e:69:3b: 5c:25:00:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcAXifD3nSYTTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MWQ0YjBmYjEtZTJiNi00MzQxLWJjZDItMTVmYWU2ZGIzNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybTx7jpJvGnrp1ezsA17+UOc3upyTBLgQ7e4 0ukS2loev2X/YF/g6LsVv4zynz3iJtl7yFWP/pxrH6Za6/v4BGL/6bALGSEIotEi I5Wp64/sTekta4vdrDyVdNKDB+vCS5D/nAmgJrXAzulCmNprdDobHksORX9LCChA FAIpbUiIs9IXSi1klGwlMfrBYI5gUKl7E3ClLbtUF16do1TXNFZV9o03r3FdQcsY y21thQU8tAjEtfCIVq43IVrnuIHSNDsYEm61bMkrDvkvjqcgwHic27Ml/gkCjcBl ov97MeckyEW85XwlSAsL+VsH6pfVci5AJxLDNlhThYOofbAdawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJzsjOc/1GyUjjvg2h5VRMSyWlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmM5MzE2OTQtOTBiMi0z ZjdiLWE4YWQtZjkzMjBhMzdkYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXlN/P7FanthYU0kU5Vi+rNG4LPLVSHN97+MsoMqL3PEkOUHtCfCDP7 SIAk7QQMKnwsE/fP0B3Rmnau6jtkEO3Gy9+L6BMd11z320jwU9n74wnq5fr+dH23 AIa6pvfZqG9M2YBW1psgVnLUB69/bso8CnCGgFRiDedRUqWixLoi9I3AVY18zDKd P6AhjYSNXXoK7ek/yapt1lB3XxpYM05bAagvV3PPuV1Yd6YB5qs/IEJ+acVj2qyt x2M7e4+gtstwLlP+YJI3rFnL8dAAu50p/2/oIbOCO7hjZweYYqU6/fnJeiDcqXG5 BgQF1fA8swBbKaFYEy1YAo5pO1wlAPM= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org