$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa File: d2cd914b-9844-3840-b55c-c3161da53a80.roa (raw, json) Hash identifier: OEVV53ypCuw7ppF9LpNA7TN1qPOnmAmAp6cI9gEwd3g= Subject key identifier: 63:4B:7F:C9:88:75:C0:9F:0F:D2:7A:AA:10:74:CF:C2:D4:C0:FA:A8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DCCFF1A8D718819EDC300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:cc:ff:1a:8d:71:88:19:ed:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=73cd9e3d-35ee-46a4-9360-3ef6b878c081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:66:1a:06:6b:45:ab:1d:d2:55:1a:35:1e: 3e:34:9e:7d:fe:fc:85:28:42:70:3a:8c:0e:6b:11: 51:23:ec:e9:8f:55:52:dc:d6:50:b2:6a:be:d6:7d: fc:93:6e:0e:d7:f5:ef:0d:a0:88:91:5c:ac:ca:36: 4d:6a:b5:9b:62:78:9b:e6:8a:b8:99:9c:e8:7f:6b: f2:03:93:e9:38:7a:b5:e6:d6:78:0a:c3:c4:2c:c5: 39:8d:b8:cf:68:93:e7:80:17:93:d2:32:5a:ff:c9: 32:b8:9e:3b:3e:bd:b7:21:a6:59:69:df:b1:b5:44: ff:e5:c9:2e:6c:3e:25:9c:ed:ba:24:46:4b:86:35: 9a:7b:6a:e8:4b:59:29:1b:ad:11:be:2f:b7:16:10: ec:3c:4e:93:5b:dc:b4:ca:e7:f0:c8:84:d1:b2:96: 80:7a:25:be:63:61:85:00:59:77:39:99:83:8f:22: 5d:60:6c:2d:17:eb:f9:46:8f:d8:da:07:bf:5f:e7: 18:3a:96:d1:cc:51:62:59:70:62:4f:4c:26:4f:d0: 32:e2:f2:36:3d:80:ea:15:11:78:d1:c3:f9:8f:77: 0a:e8:cb:7e:f2:35:d2:03:07:e2:1c:43:7a:c7:7e: 8f:92:46:f0:9d:bf:4c:bb:3e:04:39:1e:50:bf:7f: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4B:7F:C9:88:75:C0:9F:0F:D2:7A:AA:10:74:CF:C2:D4:C0:FA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2b:de:4a:96:67:c4:54:71:18:2b:48:21:b7:f9:85:ac:f6: 0d:04:af:5b:7a:c0:9f:3c:1c:27:ac:6f:9a:c3:e4:87:ea:85: 7c:80:db:48:96:62:71:a2:5f:84:b5:43:8a:9c:7f:32:25:05: e3:2b:05:b7:d5:d3:a5:87:df:0a:d8:62:af:19:4e:d2:3f:10: 2f:11:04:7c:ad:59:21:74:f3:52:82:f8:46:a9:51:1e:02:dd: 67:fd:54:66:7e:c7:68:c7:3d:e1:c0:37:36:0e:10:30:6f:79: 37:2a:c2:68:b1:d3:07:ba:0a:ad:24:5e:c2:94:9f:b1:52:3d: d2:ee:d6:d3:d0:10:75:79:10:d6:31:f6:04:8c:9d:7d:a2:6e: b1:cc:1d:49:f9:12:6a:7d:ca:60:41:d1:8d:d9:8a:2d:43:95: fd:fc:17:e3:45:a2:b8:c4:ed:54:40:ff:0b:c7:57:76:65:21: 76:11:19:b6:53:9b:2b:04:29:ae:6a:57:84:3a:ff:39:0d:04: 90:d7:13:e3:c9:db:9e:e4:57:ef:2a:ea:f6:e7:a8:2e:28:6d: 7c:16:78:c3:43:1b:82:37:2b:85:dd:90:50:75:44:bc:ac:07: 08:7b:c3:44:74:e9:5e:c4:2c:c7:cb:53:8e:c2:5a:fc:88:3a: 48:be:80:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcz/Go1xiBntwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NzNjZDllM2QtMzVlZS00NmE0LTkzNjAtM2VmNmI4NzhjMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlepmGgZrRasd0lUaNR4+NJ59/vyFKEJwOowO axFRI+zpj1VS3NZQsmq+1n38k24O1/XvDaCIkVysyjZNarWbYnib5oq4mZzof2vy A5PpOHq15tZ4CsPELMU5jbjPaJPngBeT0jJa/8kyuJ47Pr23IaZZad+xtUT/5cku bD4lnO26JEZLhjWae2roS1kpG60Rvi+3FhDsPE6TW9y0yufwyITRspaAeiW+Y2GF AFl3OZmDjyJdYGwtF+v5Ro/Y2ge/X+cYOpbRzFFiWXBiT0wmT9Ay4vI2PYDqFRF4 0cP5j3cK6Mt+8jXSAwfiHEN6x36Pkkbwnb9Muz4EOR5Qv3/ajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNLf8mIdcCfD9J6qhB0z8LUwPqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJjZDkxNGItOTg0NC0z ODQwLWI1NWMtYzMxNjFkYTUzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcr3kqWZ8RUcRgrSCG3+YWs9g0Er1t6wJ88HCesb5rD5IfqhXyA20iW YnGiX4S1Q4qcfzIlBeMrBbfV06WH3wrYYq8ZTtI/EC8RBHytWSF081KC+EapUR4C 3Wf9VGZ+x2jHPeHANzYOEDBveTcqwmix0we6Cq0kXsKUn7FSPdLu1tPQEHV5ENYx 9gSMnX2ibrHMHUn5Emp9ymBB0Y3Zii1Dlf38F+NForjE7VRA/wvHV3ZlIXYRGbZT mysEKa5qV4Q6/zkNBJDXE+PJ257kV+8q6vbnqC4obXwWeMNDG4I3K4XdkFB1RLys Bwh7w0R06V7ELMfLU47CWvyIOki+gNM= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org