$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa File: c65a1971-3cf4-3034-a4a3-4973e93d544d.roa (raw, json) Hash identifier: 9HrTQYn6D1Z5GG01Gu0fY65OouTKlu1V996yw9AHiOk= Subject key identifier: 83:FC:0F:59:9A:A6:D2:EA:68:B0:9A:55:40:DC:2C:0B:8B:B4:5C:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0ECB47F5D0A5D3B64500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0e:cb:47:f5:d0:a5:d3:b6:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=80e772fe-dd5f-4aeb-af62-f64e1cd35645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cb:66:38:0f:cc:22:a7:60:bb:9b:b8:16:f1: ef:a3:c6:27:8a:9b:ad:02:60:b9:cd:c2:44:32:6c: f1:9f:4a:8b:32:2b:4f:7f:0e:cc:81:98:4d:a4:7e: 70:91:9a:b6:cc:9d:aa:60:e0:da:86:91:31:8f:6c: 1c:20:85:ae:4b:1d:4b:00:4c:22:3a:56:8d:4f:d3: 60:9b:02:e5:2d:c7:d7:6d:3a:cb:58:11:d5:90:55: 61:fb:22:40:67:ae:57:d3:e2:2a:42:fe:2f:04:f8: dc:6c:0c:0e:3c:28:1d:49:1f:91:cc:56:86:84:01: bc:1a:c6:85:dd:f0:81:88:5d:6f:39:8a:c7:31:3f: c5:fa:bf:b4:8c:36:3a:94:63:fb:b0:c2:46:e5:b2: 8f:6d:df:1e:2b:85:69:02:d3:81:e5:92:f9:44:19: c8:80:21:bc:4c:6d:8a:5d:fe:7a:46:77:c4:f6:85: 78:21:10:f4:42:50:e1:0d:f7:59:76:1f:4f:2e:31: 8c:57:eb:43:6f:02:26:e7:5c:23:80:47:7e:41:0d: d5:87:e7:af:e2:ca:01:33:94:10:ff:f2:78:39:e3: 02:5b:c6:52:8b:bb:cf:89:a4:52:c6:38:a1:56:5d: a7:45:ce:9f:7e:4b:66:2e:f3:69:87:0f:50:5e:f9: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:0F:59:9A:A6:D2:EA:68:B0:9A:55:40:DC:2C:0B:8B:B4:5C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c65a1971-3cf4-3034-a4a3-4973e93d544d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4e:1e:16:72:c6:8e:53:20:fc:06:9f:4a:fb:40:65:45:4e: b0:c6:20:0d:99:5e:2a:3d:38:00:d1:2c:90:35:5e:dc:75:d3: 50:8d:07:dd:4f:d9:a5:f3:e1:e7:f4:be:5e:fc:37:94:05:f5: 74:ea:98:4d:30:76:f8:be:26:45:39:64:5f:7a:22:e5:22:8b: 30:8e:da:36:94:20:7b:6c:90:f1:fd:7c:af:8c:9e:ce:16:a1: 6f:4e:4f:78:d8:18:c3:86:87:4f:a0:4b:1b:d8:40:dd:51:c2: 03:4c:a4:e7:91:f3:a6:95:6b:76:3a:95:d5:a4:27:d8:4c:86: 3f:99:65:9e:f7:b9:bc:fe:e2:22:d9:13:40:74:94:7d:d1:d9: 32:41:d0:f6:77:d2:6a:e5:ec:9d:e5:b9:4c:b9:b8:e4:4f:62: 46:ca:e3:ad:21:3a:d5:c7:ba:ed:66:04:27:9d:5f:71:9e:01: b0:43:82:42:a6:7a:1d:ae:54:5c:6f:c3:44:c0:7e:66:9b:67: 68:d4:c9:ab:e7:ed:65:ef:17:55:4b:2b:70:7d:47:8d:20:b0: 24:2f:a5:c8:1c:d4:c8:4c:bf:bc:80:4e:ad:cd:b3:01:ec:1b: ad:eb:50:79:36:c1:b7:98:25:e2:ef:ca:4b:66:ac:f7:b3:7d: e6:4e:02:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw7LR/XQpdO2RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ODBlNzcyZmUtZGQ1Zi00YWViLWFmNjItZjY0ZTFjZDM1NjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8tmOA/MIqdgu5u4FvHvo8YniputAmC5zcJE Mmzxn0qLMitPfw7MgZhNpH5wkZq2zJ2qYODahpExj2wcIIWuSx1LAEwiOlaNT9Ng mwLlLcfXbTrLWBHVkFVh+yJAZ65X0+IqQv4vBPjcbAwOPCgdSR+RzFaGhAG8GsaF 3fCBiF1vOYrHMT/F+r+0jDY6lGP7sMJG5bKPbd8eK4VpAtOB5ZL5RBnIgCG8TG2K Xf56RnfE9oV4IRD0QlDhDfdZdh9PLjGMV+tDbwIm51wjgEd+QQ3Vh+ev4soBM5QQ //J4OeMCW8ZSi7vPiaRSxjihVl2nRc6ffktmLvNphw9QXvlI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP8D1maptLqaLCaVUDcLAuLtFwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY1YTE5NzEtM2NmNC0z MDM0LWE0YTMtNDk3M2U5M2Q1NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZOHhZyxo5TIPwGn0r7QGVFTrDGIA2ZXio9OADRLJA1Xtx101CNB91P 2aXz4ef0vl78N5QF9XTqmE0wdvi+JkU5ZF96IuUiizCO2jaUIHtskPH9fK+Mns4W oW9OT3jYGMOGh0+gSxvYQN1RwgNMpOeR86aVa3Y6ldWkJ9hMhj+ZZZ73ubz+4iLZ E0B0lH3R2TJB0PZ30mrl7J3luUy5uORPYkbK460hOtXHuu1mBCedX3GeAbBDgkKm eh2uVFxvw0TAfmabZ2jUyavn7WXvF1VLK3B9R40gsCQvpcgc1MhMv7yATq3NswHs G63rUHk2wbeYJeLvyktmrPezfeZOAu4= -----END CERTIFICATE-----Generated at Mon Nov 25 02:50:56 2024 by rpki-client on console-ams.rpki-client.org