$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa File: c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa (raw, json) Hash identifier: Tp+yOKcPkHjTXA0Cfm8wFbh8yksNO6XenkX0Ypv7nyo= Subject key identifier: 61:83:2E:4A:26:6D:66:C6:AB:3F:D7:09:CB:12:8D:A1:AD:E0:80:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E40E66CCEDC3B9AD3FC20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:40:e6:6c:ce:dc:3b:9a:d3:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=6d8ae76d-11e1-443d-bb7a-af80911ceacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:28:d9:2e:54:fd:cc:8a:fa:fa:80:45:02: ca:f8:61:23:83:4d:52:8a:4a:4c:6f:db:5e:9e:05: f2:bc:f0:d5:31:4b:a5:a7:28:1c:a7:76:a2:c8:d1: e7:76:dd:d6:27:5b:32:b3:81:19:27:f2:9d:b8:b9: 17:13:52:0f:4d:c4:45:3f:7b:2a:d3:35:da:85:ce: 1b:ff:e7:5a:08:09:f3:8a:ef:e9:cf:50:58:60:5b: ba:33:b8:45:a5:ad:ee:38:fe:74:71:f2:10:b3:76: 90:53:f0:bb:93:82:ee:ee:65:a9:44:95:55:d4:e2: 98:14:ee:1b:e6:1c:70:3d:13:44:62:66:2b:6f:cc: b9:f9:b7:4a:ae:e8:d4:08:dd:61:a0:86:a6:bf:ec: 5b:27:74:a0:fc:0e:47:7a:c4:74:f7:26:1f:02:ad: d5:cd:b3:d7:4f:0e:2b:5f:4e:c1:56:95:48:a8:78: 84:b0:3e:cb:5e:75:bc:58:17:0d:fa:f8:55:7a:16: ad:c8:4e:98:de:f3:07:c4:88:31:58:02:02:fc:c7: 72:ba:d8:f9:d4:5b:1e:23:b5:c0:3e:1e:90:83:fe: 6a:b0:14:45:31:4b:c3:0a:13:ce:2f:4c:03:67:a9: 26:62:d5:bc:05:f9:14:cf:e7:4b:e2:5e:96:0e:0f: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:2E:4A:26:6D:66:C6:AB:3F:D7:09:CB:12:8D:A1:AD:E0:80:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c647f0d7-37f4-3e7f-9e5a-be2574de3f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:64:ef:22:a1:fc:24:a9:cf:82:20:e4:3c:85:8f:40:2f: ce:d7:d7:0c:89:09:0c:0b:78:ef:5e:22:15:d7:3e:07:4a:96: 36:e5:9f:79:36:bf:80:76:e8:7c:27:b5:78:21:d8:01:df:5c: 4a:8f:57:91:5d:c4:67:e2:9c:68:16:ad:af:2b:5e:22:a3:74: 1f:da:20:70:4b:a4:eb:12:c9:ef:24:6c:bc:94:6a:53:90:35: 4a:c5:e7:8d:e1:88:4a:cd:ea:76:ae:42:56:da:a0:f7:a1:3a: f4:18:b2:78:f9:8c:cd:1d:8d:93:b9:af:c3:6a:32:5d:ca:96: 43:77:1a:8b:4f:64:9b:02:89:dc:f4:44:2e:fd:36:32:8e:e7: 09:ce:15:ab:96:55:9e:11:35:5d:6a:16:b3:bd:8f:27:45:f3: bd:69:b0:46:a2:11:00:f8:f9:30:c2:3b:63:18:bd:6c:cc:23: f8:8b:50:65:f9:92:20:20:19:5c:6c:6c:c1:a5:0f:d1:96:b1: 96:f1:dd:8f:71:8a:c1:88:94:ba:33:ac:16:f5:3a:fb:90:fa: bd:35:c9:e4:47:15:ac:42:7a:66:1c:05:28:6d:0d:93:e5:8d: 55:b8:73:02:1f:a1:14:ac:a8:f2:91:28:08:d7:46:c8:4d:04: f0:c1:60:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkDmbM7cO5rT/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NmQ4YWU3NmQtMTFlMS00NDNkLWJiN2EtYWY4MDkxMWNlYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjIo2S5U/cyK+vqARQLK+GEjg01SikpMb9te ngXyvPDVMUulpygcp3aiyNHndt3WJ1sys4EZJ/KduLkXE1IPTcRFP3sq0zXahc4b /+daCAnziu/pz1BYYFu6M7hFpa3uOP50cfIQs3aQU/C7k4Lu7mWpRJVV1OKYFO4b 5hxwPRNEYmYrb8y5+bdKrujUCN1hoIamv+xbJ3Sg/A5HesR09yYfAq3VzbPXTw4r X07BVpVIqHiEsD7LXnW8WBcN+vhVehatyE6Y3vMHxIgxWAIC/Mdyutj51FseI7XA Ph6Qg/5qsBRFMUvDChPOL0wDZ6kmYtW8BfkUz+dL4l6WDg/gSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGDLkombWbGqz/XCcsSjaGt4IDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY0N2YwZDctMzdmNC0z ZTdmLTllNWEtYmUyNTc0ZGUzZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHGZO8iofwkqc+CIOQ8hY9AL87X1wyJCQwLeO9eIhXXPgdKljbln3k2 v4B26HwntXgh2AHfXEqPV5FdxGfinGgWra8rXiKjdB/aIHBLpOsSye8kbLyUalOQ NUrF543hiErN6nauQlbaoPehOvQYsnj5jM0djZO5r8NqMl3KlkN3GotPZJsCidz0 RC79NjKO5wnOFauWVZ4RNV1qFrO9jydF871psEaiEQD4+TDCO2MYvWzMI/iLUGX5 kiAgGVxsbMGlD9GWsZbx3Y9xisGIlLozrBb1OvuQ+r01yeRHFaxCemYcBShtDZPl jVW4cwIfoRSsqPKRKAjXRshNBPDBYHM= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org