$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa File: c9d8e783-12ac-3b61-9dc9-88f74787c212.roa (raw, json) Hash identifier: ItJq9oUVga7yw0W4HDBKvqlSkcK6C/LHRWXP+F4wXik= Subject key identifier: DC:36:B2:F6:43:8C:85:B8:C7:15:50:78:96:69:05:6F:33:E6:6C:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E43EFCDCEE08D400AD080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:43:ef:cd:ce:e0:8d:40:0a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=9057d411-cc79-40f3-8987-d0432ed9707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:65:27:3d:4f:52:59:c4:c8:52:03:e5:88: f6:8f:2c:71:96:a0:7a:28:63:03:db:e7:ec:78:af: cb:ec:70:0c:46:56:71:7a:a8:c6:dd:c0:1f:05:64: d7:57:8e:bb:d2:1e:75:ce:02:24:2f:6a:2f:8f:46: 82:ab:ea:38:71:a8:77:4f:b1:ae:57:71:fa:be:89: 10:3b:d5:cb:9c:aa:2f:77:79:ad:61:58:89:21:fc: 44:fc:95:a2:2d:c6:12:4a:7a:16:02:47:3f:ce:00: e4:c5:28:fd:18:e3:60:f3:70:1f:a5:0b:cb:34:94: 75:b4:a7:85:cf:89:5c:e7:75:8c:a3:5d:2f:de:0d: 63:19:a7:4c:47:2c:ce:f4:a2:08:95:2c:96:d8:a1: 01:e1:d1:e3:52:fa:4f:02:fb:88:e2:3d:67:bb:37: 80:15:c4:91:5a:3f:12:69:da:da:74:b6:45:fd:5f: 39:07:6f:09:a5:71:c2:ad:cb:6f:0e:0a:29:46:cb: 1c:56:17:49:1d:46:bc:89:c0:6c:02:fc:b7:eb:25: d9:70:50:a2:39:35:3a:92:a1:e3:01:8e:83:8a:fb: 0a:39:c9:d5:f4:43:17:4b:ab:f0:7f:f1:c6:97:c1: 9d:9b:a1:6f:1d:cc:f6:e2:d9:ca:6f:e2:99:00:eb: b1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:36:B2:F6:43:8C:85:B8:C7:15:50:78:96:69:05:6F:33:E6:6C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d3:4d:73:97:ed:39:da:a8:53:04:7a:77:7e:70:f6:9e:4b: f4:75:28:05:ae:8a:a3:5e:d7:09:2c:0b:25:21:03:1c:cf:6b: 5b:51:92:67:a9:1d:b8:ad:c8:c2:8a:ce:94:97:d9:98:c0:78: a5:1a:3a:40:2b:5f:29:ab:8a:dd:3b:dd:7c:bb:66:31:bd:3e: ba:e3:2d:f8:89:5c:70:51:7c:d6:af:5f:c7:10:10:82:d7:a6: 58:c3:18:6b:79:82:63:2a:55:7f:ef:60:30:93:49:60:67:e7: 23:be:71:d3:54:2f:eb:e7:f5:1d:8e:d7:de:6e:bd:70:f4:16: 85:bd:6c:ab:ad:73:96:66:a8:b1:6d:76:a8:9b:1f:86:a8:aa: 32:f6:03:de:79:da:7d:38:79:72:ac:14:96:f5:44:da:be:51: 26:0c:33:61:d3:19:e8:f6:2f:a4:43:51:db:73:a1:28:10:8e: a9:2e:41:60:c0:6f:3c:a0:eb:01:98:df:d4:2e:5f:e3:15:ba: 3f:19:fe:28:f1:06:c3:73:d7:bc:4d:c6:18:bf:8e:13:3a:3e: 13:4f:12:d6:0f:25:b5:5d:5e:a3:f3:5d:53:5f:e4:0d:a8:27: a7:a0:f3:a0:f8:d0:33:5c:83:b1:b2:d0:c2:6d:54:4a:b8:17: cc:7b:69:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkPvzc7gjUAK0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OTA1N2Q0MTEtY2M3OS00MGYzLTg5ODctZDA0MzJlZDk3MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsRlJz1PUlnEyFID5Yj2jyxxlqB6KGMD2+fs eK/L7HAMRlZxeqjG3cAfBWTXV4670h51zgIkL2ovj0aCq+o4cah3T7GuV3H6vokQ O9XLnKovd3mtYViJIfxE/JWiLcYSSnoWAkc/zgDkxSj9GONg83AfpQvLNJR1tKeF z4lc53WMo10v3g1jGadMRyzO9KIIlSyW2KEB4dHjUvpPAvuI4j1nuzeAFcSRWj8S adradLZF/V85B28JpXHCrctvDgopRsscVhdJHUa8icBsAvy36yXZcFCiOTU6kqHj AY6DivsKOcnV9EMXS6vwf/HGl8Gdm6FvHcz24tnKb+KZAOuxAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw2svZDjIW4xxVQeJZpBW8z5mxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlkOGU3ODMtMTJhYy0z YjYxLTlkYzktODhmNzQ3ODdjMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7TTXOX7TnaqFMEend+cPaeS/R1KAWuiqNe1wksCyUhAxzPa1tRkmep HbityMKKzpSX2ZjAeKUaOkArXymrit073Xy7ZjG9PrrjLfiJXHBRfNavX8cQEILX pljDGGt5gmMqVX/vYDCTSWBn5yO+cdNUL+vn9R2O195uvXD0FoW9bKutc5ZmqLFt dqibH4aoqjL2A9552n04eXKsFJb1RNq+USYMM2HTGej2L6RDUdtzoSgQjqkuQWDA bzyg6wGY39QuX+MVuj8Z/ijxBsNz17xNxhi/jhM6PhNPEtYPJbVdXqPzXVNf5A2o J6eg86D40DNcg7Gy0MJtVEq4F8x7afY= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org