$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa File: d353c8ed-6445-34cf-b9a6-07c2df0625df.roa (raw, json) Hash identifier: Rlia8kxU7H6Jf13Rqb4YawDW5jUzSU+hcx7czO2n9JM= Subject key identifier: 88:25:C5:0F:24:64:63:F5:A0:56:3E:5D:91:83:24:DC:D5:0D:7E:E4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E46F707F335F5AEED2480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:46:f7:07:f3:35:f5:ae:ed:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=eabaf61e-7027-4b54-9cdc-02c40b97338b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:47:f9:5e:3e:32:24:d6:9e:a2:61:e4:a6:7e: e0:e1:fb:30:ff:19:24:1a:71:cb:79:6e:57:38:a3: 6d:08:e3:32:10:78:36:84:77:f8:75:47:33:4d:d7: 77:b7:3a:c9:4b:32:b9:c4:f1:e0:6b:c7:c6:6e:25: 7c:21:8c:c2:cb:45:a3:49:68:88:5d:42:94:d0:59: 6b:b5:88:d2:ca:f3:33:43:90:f6:43:f9:dc:48:9b: 21:65:84:07:77:ef:5d:82:d2:e7:5c:3f:44:bf:cc: 64:53:3e:7d:d7:7c:bd:f1:63:d6:e1:7b:67:34:ce: 69:fd:b7:a5:da:db:7e:c2:ca:3d:b0:c1:34:3b:1b: 66:a2:b9:0b:2d:96:d6:1e:4b:01:2e:d6:b2:e1:69: 21:c4:5b:ba:10:7d:a9:1e:85:f9:e1:c5:85:37:ee: f1:00:9d:aa:67:2e:10:c8:cc:3c:11:f7:1c:0c:fe: e3:f1:73:a1:b4:92:b8:05:c5:dc:74:39:1a:9e:c5: c9:e5:f6:31:af:0d:46:cd:3a:8d:ab:dd:03:87:9b: fe:18:40:bc:48:d0:32:76:44:e2:db:80:e3:91:2e: 87:ca:66:c4:71:bd:cc:dd:1b:fd:83:7b:4a:7d:af: e6:a5:c5:17:2c:d0:29:a3:68:c8:ce:bc:bb:40:73: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:25:C5:0F:24:64:63:F5:A0:56:3E:5D:91:83:24:DC:D5:0D:7E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:9d:f3:c9:fe:a6:4d:05:ce:0e:58:9d:f3:6a:1f:92:33:44: 04:86:78:16:a1:a5:f5:28:85:13:38:47:5e:99:c7:06:7f:e6: 64:12:95:09:5b:e8:8b:eb:9e:4a:62:a1:7b:95:99:98:c4:63: c7:ae:a1:a5:de:5d:72:93:40:c2:df:2e:f4:39:7b:34:b4:bb: f9:5c:7b:22:1f:12:3b:0e:40:5a:f3:22:b8:f1:2b:4a:99:66: 29:c5:c0:a9:0b:68:1b:29:26:d0:74:8e:db:36:ca:b8:7c:13: e7:07:3c:92:92:b9:3b:41:33:56:17:9b:cf:d7:51:c7:1a:b6: fd:7d:0d:e7:7d:ed:53:5f:04:d6:3a:95:5b:17:db:56:78:ba: 5a:d1:98:40:00:c6:05:c8:1c:8f:0f:c2:19:f2:ad:0e:a6:87: 41:48:8f:a6:bb:61:24:e3:d8:09:71:a2:9c:25:68:e9:6d:98: 19:a4:ce:ff:70:80:04:2f:39:5a:20:38:a1:23:19:1b:e3:17: a7:87:83:21:aa:2a:16:ec:66:05:28:8d:69:4e:92:92:92:b2: e2:ab:9d:88:a0:fc:45:d6:75:be:2d:0d:67:6f:23:71:f8:72: 1c:d6:9e:82:77:02:10:a4:a5:94:9c:1c:b7:50:93:f6:dd:3c: 85:6e:d4:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkb3B/M19a7tJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZWFiYWY2MWUtNzAyNy00YjU0LTljZGMtMDJjNDBiOTczMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEf5Xj4yJNaeomHkpn7g4fsw/xkkGnHLeW5X OKNtCOMyEHg2hHf4dUczTdd3tzrJSzK5xPHga8fGbiV8IYzCy0WjSWiIXUKU0Flr tYjSyvMzQ5D2Q/ncSJshZYQHd+9dgtLnXD9Ev8xkUz5913y98WPW4XtnNM5p/bel 2tt+wso9sME0OxtmorkLLZbWHksBLtay4WkhxFu6EH2pHoX54cWFN+7xAJ2qZy4Q yMw8EfccDP7j8XOhtJK4BcXcdDkansXJ5fYxrw1GzTqNq90Dh5v+GEC8SNAydkTi 24DjkS6HymbEcb3M3Rv9g3tKfa/mpcUXLNApo2jIzry7QHNz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIglxQ8kZGP1oFY+XZGDJNzVDX7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDM1M2M4ZWQtNjQ0NS0z NGNmLWI5YTYtMDdjMmRmMDYyNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmd88n+pk0Fzg5YnfNqH5IzRASGeBahpfUohRM4R16ZxwZ/5mQSlQlb 6IvrnkpioXuVmZjEY8euoaXeXXKTQMLfLvQ5ezS0u/lceyIfEjsOQFrzIrjxK0qZ ZinFwKkLaBspJtB0jts2yrh8E+cHPJKSuTtBM1YXm8/XUccatv19Ded97VNfBNY6 lVsX21Z4ulrRmEAAxgXIHI8PwhnyrQ6mh0FIj6a7YSTj2AlxopwlaOltmBmkzv9w gAQvOVogOKEjGRvjF6eHgyGqKhbsZgUojWlOkpKSsuKrnYig/EXWdb4tDWdvI3H4 chzWnoJ3AhCkpZScHLdQk/bdPIVu1GU= -----END CERTIFICATE-----Generated at Sat Apr 27 15:14:11 2024 by rpki-client on console-ams.rpki-client.org