$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d458a78b-64b5-381e-b718-9f31a167f59b.roa File: d458a78b-64b5-381e-b718-9f31a167f59b.roa (raw, json) Hash identifier: +LawFoGEAWVQEIQqT9mOpk3qM3kpPY0kGx6tmlA1DRA= Subject key identifier: 96:52:2F:F5:C2:E1:10:9A:64:49:61:2F:75:03:CD:27:CC:AB:E5:03 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B0D4B78B25B4C49E39160 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d458a78b-64b5-381e-b718-9f31a167f59b.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:0d:4b:78:b2:5b:4c:49:e3:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=d50a4b31-870a-4ac3-a1a7-eb3d4f4ed398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6a:8c:49:4b:d5:11:cc:aa:00:fb:9d:76:62: 00:6a:e2:dc:a6:86:0e:ac:c5:1f:9a:8e:e7:89:a3: 04:a4:a7:89:2b:99:aa:d3:fc:33:71:78:4e:bb:48: 01:9d:9c:6c:76:8b:19:d0:0e:94:b4:fe:c5:11:7a: 7f:a1:aa:8b:71:6a:2d:33:41:af:b5:8c:ae:31:d5: c4:70:e4:e6:c3:0d:a5:37:5f:5e:fe:61:f2:ab:50: 58:cc:63:e5:da:85:f2:79:42:37:72:80:8d:86:36: 51:03:7f:64:84:f3:67:cb:58:41:32:a4:84:c3:57: e9:e0:cd:f2:1b:93:c9:c2:1c:b9:15:c4:4a:64:0d: 27:59:23:7f:1c:80:d4:b0:64:0d:ed:92:af:4d:81: fb:6f:c7:89:2a:3a:3c:a1:47:a7:50:1f:00:ec:cf: 64:ea:21:81:53:27:1b:a4:3d:d4:c4:6f:74:31:71: 5d:66:6d:d3:ea:01:b1:95:18:d5:bc:34:da:e9:a0: 95:c8:c8:3f:94:0f:36:0b:7f:e9:04:e9:5d:80:25: a2:85:b3:23:73:11:2a:22:a3:5f:9f:4f:27:98:c6: 43:0f:4f:37:5d:95:21:b7:64:11:59:84:66:a7:b8: 1e:f6:b7:3d:d3:d2:b3:81:09:73:f5:d4:52:ab:1c: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:52:2F:F5:C2:E1:10:9A:64:49:61:2F:75:03:CD:27:CC:AB:E5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d458a78b-64b5-381e-b718-9f31a167f59b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:91:2a:0d:5c:7b:f1:92:05:53:6a:c4:f5:32:67:cd:bf:6b: 69:a1:60:ba:5b:47:77:ad:8e:0b:17:ae:a8:7f:66:0e:fd:f8: 36:25:fa:38:5a:5d:32:68:56:a6:bf:42:d5:bf:1d:fd:36:72: 09:89:46:73:86:ae:9b:3b:a6:d2:e7:49:6a:fd:db:5a:d2:7a: 18:bb:43:ff:24:a5:7f:1b:e8:46:c4:c1:1c:f8:a3:b7:3c:2d: b4:ff:7b:75:be:9a:2e:5c:d3:25:6d:aa:d2:a1:c6:c9:5c:26: 0e:ab:c9:d7:39:76:0c:8f:99:0e:5b:ee:25:54:0f:2b:fa:ce: d9:b5:8d:ec:77:86:3c:a8:56:0f:d6:19:ca:43:94:d8:9a:ab: 0d:ff:b2:a3:31:30:2d:cf:83:4c:4a:e7:33:52:fe:ea:91:85: 49:c6:b8:33:47:8e:f0:81:30:13:9e:ea:ce:73:97:59:73:48: f2:c6:28:97:e2:e5:c2:a3:2e:54:02:01:c9:72:65:72:6f:da: 40:d9:21:5b:de:c2:02:27:0a:bc:94:2e:4c:e7:24:b2:3f:7e: 55:77:84:04:76:eb:6d:62:85:74:68:6d:85:f0:cc:e5:da:f6: 82:a3:30:16:8f:b5:b0:85:92:f0:b1:2b:13:fc:6a:12:98:e8: 3a:47:ec:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKw1LeLJbTEnjkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDUwYTRiMzEtODcwYS00YWMzLWExYTctZWIzZDRmNGVkMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmqMSUvVEcyqAPuddmIAauLcpoYOrMUfmo7n iaMEpKeJK5mq0/wzcXhOu0gBnZxsdosZ0A6UtP7FEXp/oaqLcWotM0GvtYyuMdXE cOTmww2lN19e/mHyq1BYzGPl2oXyeUI3coCNhjZRA39khPNny1hBMqSEw1fp4M3y G5PJwhy5FcRKZA0nWSN/HIDUsGQN7ZKvTYH7b8eJKjo8oUenUB8A7M9k6iGBUycb pD3UxG90MXFdZm3T6gGxlRjVvDTa6aCVyMg/lA82C3/pBOldgCWihbMjcxEqIqNf n08nmMZDD083XZUht2QRWYRmp7ge9rc909KzgQlz9dRSqxy+DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZSL/XC4RCaZElhL3UDzSfMq+UDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQ1OGE3OGItNjRiNS0z ODFlLWI3MTgtOWYzMWExNjdmNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmRKg1ce/GSBVNqxPUyZ82/a2mhYLpbR3etjgsXrqh/Zg79+DYl+jha XTJoVqa/QtW/Hf02cgmJRnOGrps7ptLnSWr921rSehi7Q/8kpX8b6EbEwRz4o7c8 LbT/e3W+mi5c0yVtqtKhxslcJg6rydc5dgyPmQ5b7iVUDyv6ztm1jex3hjyoVg/W GcpDlNiaqw3/sqMxMC3Pg0xK5zNS/uqRhUnGuDNHjvCBMBOe6s5zl1lzSPLGKJfi 5cKjLlQCAclyZXJv2kDZIVvewgInCryULkznJLI/flV3hAR2621ihXRobYXwzOXa 9oKjMBaPtbCFkvCxKxP8ahKY6DpH7EE= -----END CERTIFICATE-----Generated at Fri Nov 22 01:36:49 2024 by rpki-client on console-ams.rpki-client.org