$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: GKe8O4lKzQN8AciYVoCfRUm6CoGIMwQQB3Dd0YzEvbc= Subject key identifier: E6:F3:40:D2:0F:39:E0:60:71:49:75:C1:DF:BB:E5:ED:75:B7:7C:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D88D2B4B98ECD97529400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:88:d2:b4:b9:8e:cd:97:52:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=f3d1c2f2-4616-4d63-ab48-cde9286fac14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:16:5b:83:ac:90:e7:a1:e8:ea:20:8a:95: e5:53:51:22:66:31:4a:2b:97:09:27:fc:5e:6e:3c: ed:08:cc:04:67:35:1a:5d:62:8c:6a:72:87:38:28: f6:c2:b3:bf:bb:6f:b9:8f:35:3a:4b:6f:2f:35:c9: 58:8c:56:a9:6c:06:dc:20:86:6f:76:ee:ae:76:58: fb:d6:4e:aa:71:1b:48:b7:57:7a:5e:a1:5f:bd:43: fd:0a:7f:34:ef:21:a6:76:43:6e:53:86:fd:d2:43: 27:3e:5a:90:88:9d:af:1a:52:52:36:3a:22:7b:8b: 8c:82:87:60:73:09:d2:b6:d3:c0:6f:0a:16:36:20: 75:5b:42:01:aa:90:65:6c:3b:7c:91:31:c9:96:75: 38:5f:62:d3:95:fd:be:10:3d:41:be:6d:1a:78:4d: a3:7f:28:5c:4e:ab:1d:f1:0c:d6:a5:b0:41:8f:ba: fc:fc:dc:12:f5:30:d7:90:2b:84:53:f1:62:29:22: 10:50:e1:52:95:0d:bd:75:06:21:54:9c:cb:b7:eb: d6:e0:00:7d:03:d8:fe:12:f2:19:a9:87:f8:50:ba: 94:00:46:ca:c9:06:0a:12:4f:68:c4:3f:61:6d:7c: e1:81:06:3d:dc:8d:e6:63:fd:21:9b:5b:fc:a4:e9: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:40:D2:0F:39:E0:60:71:49:75:C1:DF:BB:E5:ED:75:B7:7C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:35:d2:26:63:78:fa:ee:f1:35:bb:5a:d0:ac:2f:6c:66:48: e9:db:42:ce:1d:e9:7d:d7:fe:5c:a1:30:5d:4e:3b:ca:79:97: 0b:d5:52:68:77:56:38:84:a9:52:cf:cb:2d:88:72:7d:57:86: e4:8d:e3:a4:3f:9f:05:ea:df:ed:d7:1c:d4:e9:33:4f:c9:1e: 9f:b9:19:14:f7:d7:36:c8:e9:29:0e:39:ea:72:95:3a:19:1e: 10:d1:1b:b4:ad:64:d1:a8:ee:7a:2a:9e:d6:72:36:a3:b2:13: 84:a2:88:0e:50:05:62:c3:c0:e4:fb:1c:73:9c:2b:cf:3d:85: 53:67:3e:27:59:51:11:ed:3e:88:d4:d0:f4:e4:87:fc:2c:06: a1:94:a7:46:60:40:e6:4f:ef:64:50:82:f0:e7:2d:27:1f:02: aa:8b:40:31:a3:f8:d1:55:9f:2a:6d:c2:2a:b5:09:70:3b:ad: ee:96:ea:5e:aa:a7:ac:03:75:8a:c4:30:29:1b:fc:4e:fe:ae: ba:e2:49:89:8f:93:a5:ec:5e:59:6a:b7:39:97:92:9e:37:35: 0d:26:dc:c7:12:0c:3b:1a:3e:17:24:64:93:3a:40:6d:91:53: e7:fd:0e:e2:19:9d:93:f6:76:d9:24:f5:48:4b:9e:bc:6a:43: 26:c6:bb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPYjStLmOzZdSlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZjNkMWMyZjItNDYxNi00ZDYzLWFiNDgtY2RlOTI4NmZhYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW4WW4OskOeh6OogipXlU1EiZjFKK5cJJ/xe bjztCMwEZzUaXWKManKHOCj2wrO/u2+5jzU6S28vNclYjFapbAbcIIZvdu6udlj7 1k6qcRtIt1d6XqFfvUP9Cn807yGmdkNuU4b90kMnPlqQiJ2vGlJSNjoie4uMgodg cwnSttPAbwoWNiB1W0IBqpBlbDt8kTHJlnU4X2LTlf2+ED1Bvm0aeE2jfyhcTqsd 8QzWpbBBj7r8/NwS9TDXkCuEU/FiKSIQUOFSlQ29dQYhVJzLt+vW4AB9A9j+EvIZ qYf4ULqUAEbKyQYKEk9oxD9hbXzhgQY93I3mY/0hm1v8pOltkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObzQNIPOeBgcUl1wd+75e11t3xHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg10iZjePru8TW7WtCsL2xmSOnbQs4d6X3X/lyhMF1OO8p5lwvVUmh3 VjiEqVLPyy2Icn1XhuSN46Q/nwXq3+3XHNTpM0/JHp+5GRT31zbI6SkOOepylToZ HhDRG7StZNGo7noqntZyNqOyE4SiiA5QBWLDwOT7HHOcK889hVNnPidZURHtPojU 0PTkh/wsBqGUp0ZgQOZP72RQgvDnLScfAqqLQDGj+NFVnyptwiq1CXA7re6W6l6q p6wDdYrEMCkb/E7+rrriSYmPk6XsXllqtzmXkp43NQ0m3McSDDsaPhckZJM6QG2R U+f9DuIZnZP2dtkk9UhLnrxqQybGu3c= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org