$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa File: c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa (raw, json) Hash identifier: 8EM2b4TI/l4mbW6KMj3HD15iZj8QMyaEPVj3iBiU2dc= Subject key identifier: 04:CB:30:E6:30:1A:6E:78:8F:9B:9D:C6:E5:A0:23:62:E3:11:29:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0F81F6C729E21AD30480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0f:81:f6:c7:29:e2:1a:d3:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=4bb7fd9a-e3c4-4294-b532-730027a0584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:9f:ff:3b:a7:69:62:48:49:33:6b:42:18: 0b:01:d9:1a:bd:44:fd:ca:c8:2c:6d:43:79:de:9c: e5:8c:26:ac:51:b6:94:d9:b8:9b:94:c9:09:3a:a3: 3c:18:24:e3:6e:d4:34:ff:2b:38:de:a3:5c:e3:d8: b9:2a:ad:22:65:56:dd:7f:d8:b5:05:d4:30:ae:7d: 13:f2:45:27:02:ed:cf:c7:31:f0:9b:07:ec:46:94: b6:80:cf:b0:40:6a:e9:55:8e:7c:75:f7:58:39:39: 79:51:7e:a1:2a:97:88:43:27:f7:97:0f:6f:a5:52: 29:0e:e8:27:95:6d:f1:8f:ef:d2:54:bf:8c:69:e7: 23:a3:c5:cd:a0:2c:7d:d3:47:fc:64:79:25:78:42: 6f:7b:fa:ad:2f:ab:81:e5:dc:10:ab:8e:47:65:92: 9e:96:63:7e:24:84:6d:90:c5:ad:f1:d9:0a:2b:db: 3e:9f:99:22:3a:c1:5a:b4:8e:90:52:4e:70:46:0e: 59:10:14:f2:a7:30:37:85:f4:e7:ca:04:a2:bd:ae: f7:72:d4:38:99:d1:2e:97:04:8b:64:41:16:68:7d: 30:1a:ee:9c:0d:e1:a6:08:f0:bd:3a:16:d2:3b:e6: f8:c6:d5:87:85:51:75:41:97:42:a1:10:38:70:d7: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CB:30:E6:30:1A:6E:78:8F:9B:9D:C6:E5:A0:23:62:E3:11:29:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f5:76:8b:58:b8:d8:b2:4b:b3:2e:9b:84:59:d1:ad:b0:7e: fe:ba:51:70:09:65:8e:05:08:d3:e6:f3:61:43:e5:11:c3:d4: 6e:44:21:e7:39:40:de:58:11:5b:ac:b1:c9:8c:55:42:15:f3: 29:00:1a:ed:d8:20:b2:3a:8a:f0:98:99:dc:3a:e3:ce:80:24: 85:16:9e:11:24:b5:73:01:2d:4d:3a:85:86:36:5b:e5:13:d9: b4:75:ec:8a:b9:40:c3:83:e8:78:74:da:a1:b2:5e:4c:50:d0: c4:ec:0f:b9:6e:7c:fd:e5:1b:0b:df:18:6d:78:75:a7:2e:78: 37:21:ae:c2:8a:66:64:33:ea:fe:93:4b:c6:fc:24:ed:50:86: 78:bf:18:31:92:02:ef:91:a0:43:4e:66:8e:10:58:42:2a:ab: 76:6c:bc:5b:5b:42:10:55:68:79:70:21:de:c5:01:97:bc:aa: 55:9a:2c:b3:05:af:d3:61:24:ee:88:f3:7c:89:12:58:9f:0a: 12:89:8a:8e:1e:00:91:cf:78:58:6c:83:2d:95:e7:74:f2:6c: b7:13:3b:05:f9:4c:50:d6:b1:28:7f:b3:1c:a9:96:22:47:41: 83:44:aa:ff:65:8b:46:ed:ef:25:08:20:27:2a:36:52:e6:1b: 6a:17:04:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw+B9scp4hrTBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NGJiN2ZkOWEtZTNjNC00Mjk0LWI1MzItNzMwMDI3YTA1ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYKf/zunaWJISTNrQhgLAdkavUT9ysgsbUN5 3pzljCasUbaU2biblMkJOqM8GCTjbtQ0/ys43qNc49i5Kq0iZVbdf9i1BdQwrn0T 8kUnAu3PxzHwmwfsRpS2gM+wQGrpVY58dfdYOTl5UX6hKpeIQyf3lw9vpVIpDugn lW3xj+/SVL+Maecjo8XNoCx900f8ZHkleEJve/qtL6uB5dwQq45HZZKelmN+JIRt kMWt8dkKK9s+n5kiOsFatI6QUk5wRg5ZEBTypzA3hfTnygSiva73ctQ4mdEulwSL ZEEWaH0wGu6cDeGmCPC9OhbSO+b4xtWHhVF1QZdCoRA4cNe1FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATLMOYwGm54j5udxuWgI2LjESkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZjOThhMGMtMGQwYi0z MzdlLWE0Y2QtZDY4Y2RkY2Y4M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz1dotYuNiyS7Mum4RZ0a2wfv66UXAJZY4FCNPm82FD5RHD1G5EIec5 QN5YEVusscmMVUIV8ykAGu3YILI6ivCYmdw6486AJIUWnhEktXMBLU06hYY2W+UT 2bR17Iq5QMOD6Hh02qGyXkxQ0MTsD7lufP3lGwvfGG14dacueDchrsKKZmQz6v6T S8b8JO1Qhni/GDGSAu+RoENOZo4QWEIqq3ZsvFtbQhBVaHlwId7FAZe8qlWaLLMF r9NhJO6I83yJElifChKJio4eAJHPeFhsgy2V53TybLcTOwX5TFDWsSh/sxypliJH QYNEqv9li0bt7yUIICcqNlLmG2oXBJo= -----END CERTIFICATE-----Generated at Fri Nov 22 01:36:39 2024 by rpki-client on console-ams.rpki-client.org