$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa File: bf2c5255-de70-319f-8068-1b8a4e39486f.roa (raw, json) Hash identifier: kkAJ4PZIVUyt+qR03ui7jjQElZAfcPbS2vpd0y/Jt1U= Subject key identifier: 33:9F:8E:0B:C7:12:9B:1C:A7:F4:3D:19:D5:E0:F1:D3:AA:E8:F6:BD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E48A5FFFFC5122C6C9980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:48:a5:ff:ff:c5:12:2c:6c:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=f6648703-c11c-4449-82fc-b97e83cf6e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:2e:0b:9d:22:30:c5:7b:ad:60:76:ed:03: ed:9c:a3:d8:f9:35:3b:6b:58:c1:e0:9d:e9:6a:dc: 2c:a8:62:bf:19:f1:52:d2:bf:3a:d5:ee:a8:ed:06: dc:ba:63:07:f6:b8:80:16:ee:3c:1a:57:3e:ee:2e: d1:b4:04:5b:c6:92:ce:c3:d3:ef:9b:1c:aa:9b:da: ca:5f:58:ec:0e:9e:a1:11:e9:38:2a:98:13:df:1f: 38:d4:8f:23:0e:7c:73:39:c4:3d:6c:93:5d:26:b8: 1b:1b:2b:61:10:37:9b:27:12:ce:b3:db:4e:81:b7: 27:19:09:0b:1a:5a:29:04:1c:87:8f:9e:75:cc:e6: 25:7c:3b:27:65:3e:a7:b9:4d:6c:0a:62:7c:01:0c: b4:0a:80:0f:0e:b1:3e:67:cf:a0:db:1e:41:31:ba: c4:4d:8c:53:c6:f5:a7:9b:50:ab:cb:f2:1a:c0:a8: 5e:7e:5a:7e:7c:cf:06:65:23:c0:9a:ac:04:53:46: 19:9f:20:ff:95:58:3c:5f:29:24:1a:e8:e0:2e:e5: 1d:30:d0:7b:2a:2f:24:82:95:47:46:4a:55:b9:0d: 8b:bf:70:ee:59:55:ff:bc:89:f8:1b:4e:58:e6:92: dc:7b:89:d3:55:95:62:34:17:a2:a4:b0:15:e1:d5: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:8E:0B:C7:12:9B:1C:A7:F4:3D:19:D5:E0:F1:D3:AA:E8:F6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:af:76:08:9d:8a:fe:f2:94:a5:0e:46:22:f4:5f:9e:78:7c: c2:7b:b1:76:55:5d:ff:6b:cd:3d:4c:d4:14:c7:b9:ee:2c:b1: d0:0d:d0:50:0f:5e:d7:21:2a:f1:fd:c8:ac:b0:e3:e2:3a:1c: c6:d6:7f:36:b1:4a:03:e4:ca:15:da:90:4a:fb:df:d2:ed:3d: 30:f4:95:35:d6:e4:5b:93:66:db:c0:e2:06:82:18:9f:53:04: 73:29:6d:83:0a:1f:34:fd:75:39:de:67:64:ba:54:4d:84:fd: 51:94:6d:da:7a:1d:ca:88:6e:84:57:4d:4c:38:6a:47:1d:7a: 9e:a2:57:89:76:9e:00:b6:02:48:ba:da:6d:8b:c3:29:01:77: 90:68:1b:1d:0d:71:3f:49:de:4f:f3:d4:85:94:42:82:0a:5b: 5a:69:71:04:ce:fe:9b:c9:a9:dd:6b:fa:ba:4b:8c:2b:b3:df: 6f:9e:13:ed:31:38:b7:4f:f8:f8:5b:fa:41:3e:f1:35:9f:7b: 7d:75:77:90:ab:ed:24:1e:29:a7:30:f8:37:21:8a:f8:0f:ca: 11:b1:c8:78:c0:e4:16:37:21:ba:66:86:b7:68:3b:74:a9:ac: ff:48:a8:a6:86:2a:28:2f:4b:3f:09:59:d9:3d:6e:ce:47:6d: 31:f0:26:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkil///FEixsmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZjY2NDg3MDMtYzExYy00NDQ5LTgyZmMtYjk3ZTgzY2Y2ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY4uC50iMMV7rWB27QPtnKPY+TU7a1jB4J3p atwsqGK/GfFS0r861e6o7QbcumMH9riAFu48Glc+7i7RtARbxpLOw9Pvmxyqm9rK X1jsDp6hEek4KpgT3x841I8jDnxzOcQ9bJNdJrgbGythEDebJxLOs9tOgbcnGQkL GlopBByHj551zOYlfDsnZT6nuU1sCmJ8AQy0CoAPDrE+Z8+g2x5BMbrETYxTxvWn m1Cry/IawKheflp+fM8GZSPAmqwEU0YZnyD/lVg8XykkGujgLuUdMNB7Ki8kgpVH RkpVuQ2Lv3DuWVX/vIn4G05Y5pLce4nTVZViNBeipLAV4dWhowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOfjgvHEpscp/Q9GdXg8dOq6Pa9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmYyYzUyNTUtZGU3MC0z MTlmLTgwNjgtMWI4YTRlMzk0ODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABavdgidiv7ylKUORiL0X554fMJ7sXZVXf9rzT1M1BTHue4ssdAN0FAP XtchKvH9yKyw4+I6HMbWfzaxSgPkyhXakEr739LtPTD0lTXW5FuTZtvA4gaCGJ9T BHMpbYMKHzT9dTneZ2S6VE2E/VGUbdp6HcqIboRXTUw4akcdep6iV4l2ngC2Aki6 2m2LwykBd5BoGx0NcT9J3k/z1IWUQoIKW1ppcQTO/pvJqd1r+rpLjCuz32+eE+0x OLdP+Phb+kE+8TWfe311d5Cr7SQeKacw+DchivgPyhGxyHjA5BY3IbpmhrdoO3Sp rP9IqKaGKigvSz8JWdk9bs5HbTHwJhg= -----END CERTIFICATE-----Generated at Sun Apr 28 18:13:20 2024 by rpki-client on console-ams.rpki-client.org