$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c48d6c3e-2194-3a97-bcbf-aca018485e33.roa File: c48d6c3e-2194-3a97-bcbf-aca018485e33.roa (raw, json) Hash identifier: 4asRxfsw502ocyxgzyg7tUMDDHkFD63K7pL48SfgQ4I= Subject key identifier: FE:D2:4E:D9:64:93:05:61:D0:E4:21:4D:27:76:34:48:71:11:29:00 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B102EE33F572F465217C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c48d6c3e-2194-3a97-bcbf-aca018485e33.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:10:2e:e3:3f:57:2f:46:52:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=cb88f3e6-9a75-415a-afb0-759dcefeaa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:6d:ba:56:30:6f:48:de:67:52:cd:51:d9: a8:eb:b3:00:c6:e5:7c:ec:26:ce:7a:bc:8b:33:8d: 72:0f:7c:9e:ae:24:9a:d8:0f:a5:ab:27:0b:dd:32: 8a:10:ad:c1:8b:14:46:e4:de:0d:e1:c5:75:f1:b5: 76:3c:5f:3f:23:c6:1f:fd:e0:47:fb:ff:15:7e:d7: a5:a2:40:a6:4d:0c:d6:a5:04:1e:d7:9d:06:36:46: 34:ad:b1:54:d9:c3:d5:ea:20:a7:36:5d:2c:26:c4: 63:80:7a:aa:53:ba:de:fa:63:58:b2:74:f4:85:60: b6:a3:06:f9:57:c4:53:17:08:8a:39:cb:09:09:7e: f3:16:2e:74:cf:a9:23:ca:f8:d7:f0:e2:a9:0e:7c: 1f:a9:08:63:25:ff:df:0b:50:83:ee:ae:c4:09:de: b9:0f:8d:dd:d8:7f:0a:46:65:15:eb:f5:13:b3:13: 87:7f:40:46:f6:1d:b8:80:1b:72:e4:64:0a:36:23: 47:b2:af:0a:db:3f:cf:3d:c4:07:e4:ed:50:c5:f8: a6:84:12:0f:15:0b:f6:5f:95:89:ef:21:ba:b1:8e: fd:8d:c9:e3:9f:6d:f9:f3:c7:af:4e:dc:9c:21:3f: 8a:7f:de:c4:7e:ab:6e:0e:9f:63:90:e0:09:c9:5d: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D2:4E:D9:64:93:05:61:D0:E4:21:4D:27:76:34:48:71:11:29:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c48d6c3e-2194-3a97-bcbf-aca018485e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3a:28:62:aa:6e:0b:4d:70:b2:24:b7:ee:31:83:60:e4:43: fb:8f:c9:fc:42:1f:59:f8:bc:82:4b:ff:74:05:6e:5f:43:9d: ef:02:7c:70:4b:a4:11:6f:e5:bd:57:a2:e7:58:86:98:68:46: 24:24:69:e8:84:e0:fd:0b:77:d4:c3:ce:aa:76:32:62:cf:f5: 9e:83:a2:ea:d1:cf:7a:06:37:78:98:bb:5b:a3:41:a3:c3:09: ef:22:56:0e:d4:60:5d:3e:f2:04:02:6f:bf:41:33:31:b6:76: c8:ed:24:ba:8d:eb:58:13:e4:45:5e:c0:01:b4:7b:5c:11:8e: c0:51:d4:21:f7:6a:2f:f7:f7:49:5e:f4:3e:3a:ef:cc:d2:43: ea:27:95:61:a1:c1:ff:6b:70:51:c5:42:a9:0e:6e:42:31:15: 53:2b:87:a8:35:b8:5c:c8:69:b6:3a:2f:d6:4f:06:00:2f:38: 2b:1d:fc:b4:ac:3f:43:d4:f1:1a:00:ef:97:80:31:69:40:d9: 89:73:c6:18:56:67:d2:c4:e1:e8:02:f6:d6:48:97:19:a8:f9: f0:20:b3:10:d6:85:ab:f2:2d:c3:cc:d0:99:fb:45:13:5f:20: 82:93:a1:62:8a:70:65:f2:1f:c7:3f:92:16:9a:ed:d6:d1:2f: 5f:57:7f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKxAu4z9XL0ZSF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2I4OGYzZTYtOWE3NS00MTVhLWFmYjAtNzU5ZGNlZmVhYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAJtulYwb0jeZ1LNUdmo67MAxuV87CbOeryL M41yD3yeriSa2A+lqycL3TKKEK3BixRG5N4N4cV18bV2PF8/I8Yf/eBH+/8Vftel okCmTQzWpQQe150GNkY0rbFU2cPV6iCnNl0sJsRjgHqqU7re+mNYsnT0hWC2owb5 V8RTFwiKOcsJCX7zFi50z6kjyvjX8OKpDnwfqQhjJf/fC1CD7q7ECd65D43d2H8K RmUV6/UTsxOHf0BG9h24gBty5GQKNiNHsq8K2z/PPcQH5O1QxfimhBIPFQv2X5WJ 7yG6sY79jcnjn23588evTtycIT+Kf97EfqtuDp9jkOAJyV1oKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7STtlkkwVh0OQhTSd2NEhxESkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzQ4ZDZjM2UtMjE5NC0z YTk3LWJjYmYtYWNhMDE4NDg1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE6KGKqbgtNcLIkt+4xg2DkQ/uPyfxCH1n4vIJL/3QFbl9Dne8CfHBL pBFv5b1XoudYhphoRiQkaeiE4P0Ld9TDzqp2MmLP9Z6DourRz3oGN3iYu1ujQaPD Ce8iVg7UYF0+8gQCb79BMzG2dsjtJLqN61gT5EVewAG0e1wRjsBR1CH3ai/390le 9D4678zSQ+onlWGhwf9rcFHFQqkObkIxFVMrh6g1uFzIabY6L9ZPBgAvOCsd/LSs P0PU8RoA75eAMWlA2YlzxhhWZ9LE4egC9tZIlxmo+fAgsxDWhavyLcPM0Jn7RRNf IIKToWKKcGXyH8c/khaa7dbRL19Xf28= -----END CERTIFICATE-----Generated at Mon Nov 25 01:03:57 2024 by rpki-client on console-ams.rpki-client.org