$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1329dc6-332f-35b5-ba11-802855cb8116.roa File: d1329dc6-332f-35b5-ba11-802855cb8116.roa (raw, json) Hash identifier: XYoSwTQGkT1RqsSaXxHQtK2U9eg8DboNnnKtnJNcsD0= Subject key identifier: 41:E5:BD:E2:08:86:86:61:1A:11:8F:FE:DB:4D:F0:D9:55:D5:FF:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E45B0ADEA36F17D3D8400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1329dc6-332f-35b5-ba11-802855cb8116.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:45:b0:ad:ea:36:f1:7d:3d:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=c3af3648-b273-4aa2-8b39-ef6e6780b885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:60:e7:fb:b4:80:c7:49:0a:71:a6:e7:8e: 93:4e:53:5e:7a:b8:51:d5:35:51:35:26:e6:4a:ee: ab:97:6d:c8:d5:36:45:00:57:99:32:f3:9f:8b:2b: c5:6a:65:ea:6c:f8:61:14:54:74:c6:1d:97:4d:9f: 8d:74:fd:14:fe:5e:40:3e:0b:c4:e0:28:79:34:41: 71:db:e6:f1:b9:f5:da:4f:f6:8a:4f:2a:99:49:66: 0b:eb:ec:21:af:82:89:e7:a0:13:48:b3:7d:7e:df: fd:69:c2:34:18:10:dc:bd:0b:ad:6a:03:fe:73:cf: 05:28:1e:4c:0d:86:ac:0e:84:83:e7:90:17:4c:45: c5:46:a7:21:c2:63:1e:e1:61:17:e6:2a:5b:6f:19: ef:12:a5:3c:8a:f2:9c:49:23:fa:3f:60:ac:30:83: 5e:ca:ac:2e:a1:ec:60:a0:4b:c6:74:ad:a2:b7:62: 72:46:b5:79:c5:76:58:98:6b:d6:59:47:9b:49:2c: 99:1b:52:44:35:8d:6b:94:e1:0b:c1:fb:e1:a4:a2: 87:e8:92:1e:4e:ae:2d:5f:15:62:c8:84:ce:89:ab: 59:1c:ca:49:a2:c8:aa:33:20:62:7d:b5:bd:ac:54: 94:3b:0a:be:36:74:3f:03:42:db:a8:58:45:f3:f0: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E5:BD:E2:08:86:86:61:1A:11:8F:FE:DB:4D:F0:D9:55:D5:FF:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1329dc6-332f-35b5-ba11-802855cb8116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:40:11:70:5f:4b:a6:5a:1f:45:d2:38:c1:52:46:cb:2e:28: 83:2a:49:03:f0:ea:2f:89:1a:21:af:e4:bc:6d:67:e2:c1:f6: 89:40:9e:60:b9:d1:82:fc:11:1e:ff:6f:58:ee:de:0a:da:16: a9:0f:7a:a8:c4:3f:9d:17:3f:75:89:02:bd:4d:59:bb:d6:28: 8e:fd:9d:5b:31:d8:4f:c0:94:ce:34:0a:bd:fe:a7:7c:ab:12: 40:e6:34:8c:c6:ac:80:9d:53:08:a7:4e:09:73:62:2b:93:9e: 4b:c2:6c:1b:d7:25:ef:ef:25:af:2a:87:1f:13:ba:99:f9:dc: c4:06:f6:d9:26:ee:b9:20:9f:0a:bd:a1:55:29:d7:75:21:ce: 46:0e:30:b8:9b:68:08:35:55:1b:80:47:39:6c:e3:63:43:2d: 55:f1:65:71:41:5f:a8:31:eb:1b:05:3f:5b:5a:50:3a:1a:c2: 78:25:fe:d8:c4:66:cc:21:47:55:e7:2d:37:f1:bd:04:a1:35: 3c:bb:05:33:6c:41:30:ed:07:b8:2a:5c:d0:15:ca:ad:7a:e7: aa:fd:87:c1:a9:e0:ea:3f:54:8c:b5:f3:69:e3:31:58:a0:cc: ca:7e:d8:0b:1c:42:5a:3e:44:c7:8e:0b:68:3f:3b:db:23:59: f4:61:81:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkWwreo28X09hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YzNhZjM2NDgtYjI3My00YWEyLThiMzktZWY2ZTY3ODBiODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFg5/u0gMdJCnGm546TTlNeerhR1TVRNSbm Su6rl23I1TZFAFeZMvOfiyvFamXqbPhhFFR0xh2XTZ+NdP0U/l5APgvE4Ch5NEFx 2+bxufXaT/aKTyqZSWYL6+whr4KJ56ATSLN9ft/9acI0GBDcvQutagP+c88FKB5M DYasDoSD55AXTEXFRqchwmMe4WEX5ipbbxnvEqU8ivKcSSP6P2CsMINeyqwuoexg oEvGdK2it2JyRrV5xXZYmGvWWUebSSyZG1JENY1rlOELwfvhpKKH6JIeTq4tXxVi yITOiatZHMpJosiqMyBifbW9rFSUOwq+NnQ/A0LbqFhF8/BAHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHlveIIhoZhGhGP/ttN8NlV1f+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEzMjlkYzYtMzMyZi0z NWI1LWJhMTEtODAyODU1Y2I4MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdAEXBfS6ZaH0XSOMFSRssuKIMqSQPw6i+JGiGv5LxtZ+LB9olAnmC5 0YL8ER7/b1ju3graFqkPeqjEP50XP3WJAr1NWbvWKI79nVsx2E/AlM40Cr3+p3yr EkDmNIzGrICdUwinTglzYiuTnkvCbBvXJe/vJa8qhx8Tupn53MQG9tkm7rkgnwq9 oVUp13UhzkYOMLibaAg1VRuARzls42NDLVXxZXFBX6gx6xsFP1taUDoawngl/tjE ZswhR1XnLTfxvQShNTy7BTNsQTDtB7gqXNAVyq1656r9h8Gp4Oo/VIy182njMVig zMp+2AscQlo+RMeOC2g/O9sjWfRhgWs= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org