$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa File: be55dd29-53b4-3391-846b-2b9a27ba2450.roa (raw, json) Hash identifier: okfS6MB3g3ZZo8FGhtJVoJsLjSFzvsc949ZsMvtTgQE= Subject key identifier: 90:91:FA:6F:95:68:59:37:80:9A:BB:6F:D5:24:E4:A7:C6:B9:AF:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4A7D1A5FDD1107F48D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4a:7d:1a:5f:dd:11:07:f4:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=616304ed-275c-4db8-84ac-3096856bc00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:1a:15:04:8f:7a:91:d6:36:21:3f:8b:69: 90:80:e7:84:6d:0a:87:f3:36:f3:59:c4:6d:5f:5b: e8:06:27:da:d1:f0:01:9d:07:94:d8:da:8f:5b:a0: 8b:b2:73:6e:68:96:cb:8b:49:7f:37:81:15:12:f5: bd:0c:17:fb:10:28:5d:77:fa:ed:35:9a:4b:f9:12: e8:e1:10:02:24:c1:ec:3b:b2:ea:04:9f:d6:f0:32: 9b:ec:50:29:1f:63:fe:c7:89:3e:69:37:db:6e:be: 06:1c:56:2e:8b:d2:37:34:2a:b4:14:78:2d:e9:23: c5:cc:da:d2:59:4b:61:b6:36:0e:d8:c5:47:15:f8: 21:be:5c:30:09:e1:6c:ff:52:da:7b:16:a8:43:14: 67:55:95:3a:40:19:3f:73:61:d0:cd:2c:91:1b:90: 59:f2:72:2d:bb:23:fd:ce:a4:95:03:ef:7b:8f:86: 20:5f:b6:5f:b2:63:7b:40:76:a6:01:c2:49:15:1f: 47:50:a5:5e:9f:08:fb:40:a4:2d:24:88:15:2a:73: 9f:d5:8c:92:68:58:d6:b0:35:a5:1a:a1:3e:f8:db: cb:95:6d:9b:b1:7e:2b:31:d5:12:35:56:a7:0d:62: 3d:34:58:ab:5c:03:65:01:22:be:32:c6:25:9e:94: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:91:FA:6F:95:68:59:37:80:9A:BB:6F:D5:24:E4:A7:C6:B9:AF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:40:a9:c5:1b:98:8b:a2:fe:43:97:da:16:d4:96:75:f7:84: b3:01:04:b5:f6:77:02:ed:71:0a:09:44:c0:71:ff:5e:9a:df: 35:03:59:e7:cc:43:60:b0:0a:b4:95:50:70:fd:7a:4f:6d:cb: bf:22:d3:3f:7d:36:7e:7e:86:0a:0c:00:fc:67:4f:21:23:22: b7:cc:16:a4:2c:34:76:95:39:f1:51:f2:81:e4:71:1a:42:e0: 67:c8:70:03:1d:8e:9e:f9:2a:3f:c1:9e:dd:ad:f5:42:fc:8e: e5:18:d3:4e:f0:2c:21:d7:fa:aa:46:bc:a7:e7:69:09:34:b4: 42:78:a6:c0:02:d5:c5:28:2f:54:1c:00:cc:d2:a7:65:5a:8f: d4:b5:3b:29:9b:29:1b:91:c9:71:bd:4b:16:5d:7b:df:0b:a7: fa:64:18:2b:b8:fd:c1:1f:07:fd:c1:f9:2e:c6:fb:00:b4:79: eb:e6:9c:3c:08:5f:5c:07:33:d7:de:80:3b:39:22:a3:cb:7c: 90:3e:c9:fd:f3:4b:53:72:07:24:4e:f9:c2:4a:48:ba:ae:de: 07:a2:5c:c7:6e:97:8f:f2:e2:e1:9f:53:77:d3:7a:40:e7:ef: 00:3e:6f:46:9d:f9:cd:5b:87:25:97:b8:3c:cf:66:9c:4a:b1: c2:11:79:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkp9Gl/dEQf0jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NjE2MzA0ZWQtMjc1Yy00ZGI4LTg0YWMtMzA5Njg1NmJjMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tUaFQSPepHWNiE/i2mQgOeEbQqH8zbzWcRt X1voBifa0fABnQeU2NqPW6CLsnNuaJbLi0l/N4EVEvW9DBf7EChdd/rtNZpL+RLo 4RACJMHsO7LqBJ/W8DKb7FApH2P+x4k+aTfbbr4GHFYui9I3NCq0FHgt6SPFzNrS WUthtjYO2MVHFfghvlwwCeFs/1LaexaoQxRnVZU6QBk/c2HQzSyRG5BZ8nItuyP9 zqSVA+97j4YgX7ZfsmN7QHamAcJJFR9HUKVenwj7QKQtJIgVKnOf1YySaFjWsDWl GqE++NvLlW2bsX4rMdUSNVanDWI9NFirXANlASK+MsYlnpS+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCR+m+VaFk3gJq7b9Uk5KfGua8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmU1NWRkMjktNTNiNC0z MzkxLTg0NmItMmI5YTI3YmEyNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpAqcUbmIui/kOX2hbUlnX3hLMBBLX2dwLtcQoJRMBx/16a3zUDWefM Q2CwCrSVUHD9ek9ty78i0z99Nn5+hgoMAPxnTyEjIrfMFqQsNHaVOfFR8oHkcRpC 4GfIcAMdjp75Kj/Bnt2t9UL8juUY007wLCHX+qpGvKfnaQk0tEJ4psAC1cUoL1Qc AMzSp2Vaj9S1OymbKRuRyXG9SxZde98Lp/pkGCu4/cEfB/3B+S7G+wC0eevmnDwI X1wHM9fegDs5IqPLfJA+yf3zS1NyByRO+cJKSLqu3geiXMdul4/y4uGfU3fTekDn 7wA+b0ad+c1bhyWXuDzPZpxKscIReSk= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org