$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa File: bccc062f-8e57-31cd-9ca2-081d4382b174.roa (raw, json) Hash identifier: ZwrmzsX9CQP6QtRTi7NX3bHHoJc5wIw2Vjasm35yM1E= Subject key identifier: 1D:6C:74:5E:32:CA:35:F1:9B:D3:77:47:92:FD:56:EC:CE:50:79:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E42CB9ED87662A1DDE500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:42:cb:9e:d8:76:62:a1:dd:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=0959d270-809c-4818-8206-1c2992d237ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:40:65:9b:fe:81:ad:5e:97:ac:86:5d:ab: 40:1d:86:7e:5d:d5:7b:56:33:ae:79:f8:35:52:1e: b7:5c:8f:96:cb:11:5f:bb:3d:f2:66:bb:45:3d:50: e1:be:51:56:03:d8:8f:8e:c0:96:e1:ec:00:3f:19: 4c:f5:95:7b:07:77:23:02:e4:3c:ec:12:62:30:9e: 26:d7:22:f6:68:fc:b2:ea:25:0b:47:b1:28:4d:23: 17:30:a1:7e:2a:79:14:1c:0e:a9:52:c1:59:d0:06: 68:23:77:c4:7d:22:1f:3c:00:21:80:94:fd:37:73: 4e:05:7e:e5:4f:09:64:92:1c:05:f9:2f:1b:67:ab: eb:64:ad:da:c0:01:b0:8e:1a:65:22:52:d1:3d:f2: 03:93:cb:94:c3:69:ae:8e:14:34:be:17:89:6d:88: 73:15:ee:c0:2b:be:2b:61:a9:86:76:fe:62:74:b2: 73:3c:f9:d5:c8:63:a8:96:90:35:12:83:28:65:de: 79:cb:de:0c:ad:eb:61:fb:c5:9c:bb:2c:a4:a8:16: 93:a4:bc:a1:9b:22:59:03:15:d3:01:aa:68:57:e6: 5f:d1:bc:67:df:82:90:45:10:df:84:48:86:fd:65: 30:3f:01:d3:3e:bc:22:8b:be:3e:01:08:58:b6:f8: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6C:74:5E:32:CA:35:F1:9B:D3:77:47:92:FD:56:EC:CE:50:79:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f7:72:75:8b:4f:c2:b6:6c:a6:24:72:ff:4e:bb:d8:40:2b: c7:8c:19:95:7e:97:58:ba:4c:f4:44:41:d6:38:a1:58:cc:78: b5:37:e9:e2:32:0d:3c:40:6b:f5:fd:39:42:3e:ea:c3:a0:69: 14:e7:29:b5:5f:d1:22:47:d5:c4:f5:7a:04:11:24:65:ac:b8: fb:fd:1c:46:0a:91:80:16:60:d0:c0:55:15:fe:be:71:68:45: 0c:fe:d5:fc:73:8d:ed:e7:ec:27:23:64:b5:ca:88:6e:36:57: cd:3f:ee:6d:8c:c8:4e:1a:83:a0:8c:8b:26:cb:4e:8c:66:45: 06:f9:7d:82:ac:15:c0:7f:3a:4e:0e:80:2d:cf:09:72:b0:28: 2b:90:ef:a3:42:7e:5f:a8:eb:81:d6:1a:37:27:6c:27:b4:ef: 0e:20:96:57:03:cb:37:13:ba:cd:c7:bc:80:7e:34:ce:f6:0e: 2a:9a:f5:7f:b5:ae:e9:2e:0b:06:27:75:79:e4:cc:76:7d:a3: 54:69:e5:c8:92:b0:89:a7:68:14:60:da:26:d7:8b:32:5a:2f: 49:8c:27:13:68:b0:65:98:b7:36:e8:bb:2a:cf:35:f8:bd:37: 18:36:57:14:ab:ac:a0:e3:6f:b4:55:b1:8c:c6:37:33:38:54: 8c:f4:3c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkLLnth2YqHd5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MDk1OWQyNzAtODA5Yy00ODE4LTgyMDYtMWMyOTkyZDIzN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZAZZv+ga1el6yGXatAHYZ+XdV7VjOuefg1 Uh63XI+WyxFfuz3yZrtFPVDhvlFWA9iPjsCW4ewAPxlM9ZV7B3cjAuQ87BJiMJ4m 1yL2aPyy6iULR7EoTSMXMKF+KnkUHA6pUsFZ0AZoI3fEfSIfPAAhgJT9N3NOBX7l TwlkkhwF+S8bZ6vrZK3awAGwjhplIlLRPfIDk8uUw2mujhQ0vheJbYhzFe7AK74r YamGdv5idLJzPPnVyGOolpA1EoMoZd55y94Mreth+8WcuyykqBaTpLyhmyJZAxXT AapoV+Zf0bxn34KQRRDfhEiG/WUwPwHTPrwii74+AQhYtvinXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1sdF4yyjXxm9N3R5L9VuzOUHkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNjYzA2MmYtOGU1Ny0z MWNkLTljYTItMDgxZDQzODJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE33cnWLT8K2bKYkcv9Ou9hAK8eMGZV+l1i6TPREQdY4oVjMeLU36eIy DTxAa/X9OUI+6sOgaRTnKbVf0SJH1cT1egQRJGWsuPv9HEYKkYAWYNDAVRX+vnFo RQz+1fxzje3n7CcjZLXKiG42V80/7m2MyE4ag6CMiybLToxmRQb5fYKsFcB/Ok4O gC3PCXKwKCuQ76NCfl+o64HWGjcnbCe07w4gllcDyzcTus3HvIB+NM72Diqa9X+1 rukuCwYndXnkzHZ9o1Rp5ciSsImnaBRg2ibXizJaL0mMJxNosGWYtzbouyrPNfi9 Nxg2VxSrrKDjb7RVsYzGNzM4VIz0PF8= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org