$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa File: c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa (raw, json) Hash identifier: wbh+BJtN2tbVuunPekKPaG403Pwdivr1mMY2sXimGdg= Subject key identifier: A0:2A:E3:38:76:CF:6E:4B:97:67:B8:A6:6F:2F:1B:81:B6:EA:D5:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC4AAFAD5C195A5FC1460 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c4:aa:fa:d5:c1:95:a5:fc:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=b3065dd6-855a-45a0-af40-13a00d7a9cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:cd:af:61:e5:bf:ee:95:55:92:d4:ef:97: 15:a1:12:39:67:43:e0:26:0b:39:89:1b:d1:ee:dc: 5a:9c:92:47:ab:d3:06:9f:5a:38:ad:52:cd:bd:99: 9d:a5:da:e3:70:df:73:24:78:81:cd:9f:a4:4f:4b: 62:5d:fb:e7:37:cd:26:55:da:a7:ce:2a:22:e6:40: 90:a3:2e:46:e7:99:96:a8:48:f1:d8:c7:fb:9f:93: a2:9f:d8:04:72:6a:42:c9:04:42:8b:f0:5c:e6:5c: 57:1a:cd:a6:f9:21:19:34:78:82:27:16:0c:b5:dc: e6:b4:89:9c:02:95:c4:a1:01:09:bf:f0:32:eb:79: 3b:cb:e7:6a:75:11:7c:d9:16:ac:e6:b7:f0:aa:3c: 35:54:a8:3f:ab:5d:ea:70:71:4d:ed:8b:51:7e:3a: d6:b1:10:49:f6:e0:65:6d:08:29:7b:bb:85:99:ef: ad:a6:49:ee:59:7c:b4:80:48:8d:a3:b8:d3:17:59: 92:9b:ad:18:b6:7e:06:82:e8:72:18:1e:2b:8d:51: b9:b9:d8:47:73:9a:f9:df:ba:75:76:a5:72:d5:46: 6f:da:1e:14:e3:bf:4e:38:93:ed:71:a2:27:34:4b: 8d:42:e9:7e:8b:f9:c3:f9:bc:59:a3:e0:58:b4:5e: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2A:E3:38:76:CF:6E:4B:97:67:B8:A6:6F:2F:1B:81:B6:EA:D5:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:0a:0a:d5:5c:e4:73:aa:d2:0f:52:09:07:77:06:c2:ce:ea: 32:98:a5:42:15:22:a0:26:11:18:09:3e:6b:98:7f:ec:fc:ec: 4c:ea:a7:8c:e8:b3:06:c9:2c:1c:5e:97:9e:ed:80:7b:e8:db: b1:7c:97:55:ad:40:55:1e:b2:8d:9f:af:b3:b2:8f:f3:32:19: 88:07:d4:62:35:9a:fc:9f:ab:82:90:dc:34:85:76:7f:07:b1: f4:e8:14:ec:1c:5f:65:1f:d3:65:81:d1:8f:dd:fa:fc:bc:6a: b2:7a:7b:50:3e:8d:6a:a2:86:ff:0c:fc:c2:3c:16:f1:00:ad: aa:78:e4:02:1e:14:41:e7:0d:a6:e0:5f:91:b1:3a:23:95:75: 2e:87:be:3f:93:f2:4b:05:17:e5:8c:b7:83:31:a5:b4:9d:a1: 59:08:74:6d:7c:24:0d:a2:e4:20:05:05:d3:9d:4b:07:0c:4e: ee:39:d4:00:4d:30:f6:7b:e4:fb:e7:0b:35:4b:1b:e1:9d:08: 88:f9:bc:00:d4:6c:47:88:dc:33:4a:8e:61:12:63:dd:01:cb: 0a:32:7b:e7:02:c2:11:c5:9c:e7:58:8a:aa:a3:c7:c6:c2:5e: d7:e0:8a:af:0c:ea:01:db:a0:58:68:79:73:b2:66:6b:60:a0: 25:fc:f2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcSq+tXBlaX8FGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YjMwNjVkZDYtODU1YS00NWEwLWFmNDAtMTNhMDBkN2E5Y2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou/Nr2Hlv+6VVZLU75cVoRI5Z0PgJgs5iRvR 7txanJJHq9MGn1o4rVLNvZmdpdrjcN9zJHiBzZ+kT0tiXfvnN80mVdqnzioi5kCQ oy5G55mWqEjx2Mf7n5Oin9gEcmpCyQRCi/Bc5lxXGs2m+SEZNHiCJxYMtdzmtImc ApXEoQEJv/Ay63k7y+dqdRF82Ras5rfwqjw1VKg/q13qcHFN7YtRfjrWsRBJ9uBl bQgpe7uFme+tpknuWXy0gEiNo7jTF1mSm60Ytn4GguhyGB4rjVG5udhHc5r537p1 dqVy1UZv2h4U479OOJPtcaInNEuNQul+i/nD+bxZo+BYtF5WmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAq4zh2z25Ll2e4pm8vG4G26tWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM4NDVjNmYtNTJkNC0z NGU1LWE2YTYtN2RkODg4YTRkMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUKCtVc5HOq0g9SCQd3BsLO6jKYpUIVIqAmERgJPmuYf+z87Ezqp4zo swbJLBxel57tgHvo27F8l1WtQFUeso2fr7Oyj/MyGYgH1GI1mvyfq4KQ3DSFdn8H sfToFOwcX2Uf02WB0Y/d+vy8arJ6e1A+jWqihv8M/MI8FvEArap45AIeFEHnDabg X5GxOiOVdS6Hvj+T8ksFF+WMt4MxpbSdoVkIdG18JA2i5CAFBdOdSwcMTu451ABN MPZ75PvnCzVLG+GdCIj5vADUbEeI3DNKjmESY90Bywoye+cCwhHFnOdYiqqjx8bC Xtfgiq8M6gHboFhoeXOyZmtgoCX88kE= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org