$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47493d8-e41f-3519-b496-a2ab6504e2cd.roa File: d47493d8-e41f-3519-b496-a2ab6504e2cd.roa (raw, json) Hash identifier: xlquTDxtPjeKaZpYgP1kQ7fXCC279HW2jrzX0tLIVvw= Subject key identifier: 0A:0A:80:78:EC:89:71:09:88:06:A3:F4:66:06:90:3E:26:F0:A8:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D85E09BB87506FA41B900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47493d8-e41f-3519-b496-a2ab6504e2cd.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:85:e0:9b:b8:75:06:fa:41:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=2a57c74c-3b44-41a6-863f-1def3f1f5c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:2c:b0:7f:79:6b:ce:cf:b2:9b:6a:91:d5: 28:49:c4:e2:34:fd:91:4d:9f:22:c7:57:d2:30:9f: 69:91:b7:e4:2e:53:da:80:f5:da:fd:d3:e7:be:2e: 60:e3:72:6c:1d:ac:e5:a1:fc:d1:98:88:3c:73:79: 35:8a:14:7c:e7:c6:8f:8c:53:62:b7:9b:7b:6b:5b: 13:d3:ee:46:07:b6:ab:53:f3:4d:69:b8:df:67:f1: 9f:da:98:b2:37:82:1b:72:e4:53:13:33:6d:bf:48: 61:33:68:86:28:8b:0c:07:4a:da:18:c8:9e:75:3f: 42:7e:bb:50:ca:c5:15:85:2f:fd:e7:58:43:1d:d0: 9c:fa:81:23:50:3f:d3:a4:d8:fe:23:34:67:01:48: fb:7b:56:26:43:8d:c0:a8:69:c2:68:29:07:97:7b: 5f:b1:b0:f1:f4:b1:91:ce:00:dc:42:8b:0e:c1:a0: 20:a0:28:10:3c:06:97:36:64:21:bd:27:50:a1:31: 04:9b:33:15:50:f6:d7:a1:e7:17:c1:9b:ee:44:dd: 74:09:8a:88:8d:78:a0:59:d4:23:b9:08:13:db:16: b8:43:8f:bd:a8:40:57:b3:da:05:c3:bf:7e:78:27: 38:3f:31:41:1d:ec:84:94:67:31:86:27:42:cd:37: c8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0A:80:78:EC:89:71:09:88:06:A3:F4:66:06:90:3E:26:F0:A8:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d47493d8-e41f-3519-b496-a2ab6504e2cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:17:34:40:62:b9:db:28:a3:18:12:f2:26:8e:84:f7:f8:e9: 74:45:fc:29:c7:dc:fd:48:c1:d1:d0:e1:06:2a:62:52:ca:17: 84:92:57:ca:dd:5e:9c:20:a9:4a:5e:2d:f2:0b:10:3c:47:f1: 7b:26:ff:4f:d4:96:e9:9c:05:cf:de:a0:61:37:23:a3:23:c3: 87:81:a5:40:f5:16:9b:bb:25:aa:e2:4e:4d:97:f6:5c:ca:d6: c3:49:63:d0:17:48:f2:0e:3b:d5:50:f6:c4:98:c3:31:97:4f: c1:93:f6:14:c0:3f:5c:16:e2:4b:34:7a:a6:48:1b:9a:59:ef: 85:7a:8c:4f:b1:f5:f0:fc:75:be:35:e1:7e:c0:21:bc:8c:11: 25:32:40:bd:1c:d3:09:ea:22:1a:8c:18:65:bd:68:a2:02:a6: 1a:1a:54:1c:33:4b:65:f6:f6:bc:9a:40:bd:1a:78:cf:95:78: 31:ad:c7:30:8e:a8:3f:e8:6d:e4:61:f9:a0:ce:48:a8:bd:0e: ca:8c:3b:be:07:d9:c0:0a:e5:35:e9:ff:ab:4b:c7:b7:54:70: f7:a6:29:68:5d:3d:d4:9f:4a:0f:74:86:d3:df:31:4f:a1:79: 8f:15:78:46:a4:a8:9b:77:e4:a7:27:77:4b:d6:ab:03:80:a3: 95:35:43:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPYXgm7h1BvpBuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MmE1N2M3NGMtM2I0NC00MWE2LTg2M2YtMWRlZjNmMWY1YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8ossH95a87PsptqkdUoScTiNP2RTZ8ix1fS MJ9pkbfkLlPagPXa/dPnvi5g43JsHazlofzRmIg8c3k1ihR858aPjFNit5t7a1sT 0+5GB7arU/NNabjfZ/Gf2piyN4IbcuRTEzNtv0hhM2iGKIsMB0raGMiedT9CfrtQ ysUVhS/951hDHdCc+oEjUD/TpNj+IzRnAUj7e1YmQ43AqGnCaCkHl3tfsbDx9LGR zgDcQosOwaAgoCgQPAaXNmQhvSdQoTEEmzMVUPbXoecXwZvuRN10CYqIjXigWdQj uQgT2xa4Q4+9qEBXs9oFw79+eCc4PzFBHeyElGcxhidCzTfImQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoKgHjsiXEJiAaj9GYGkD4m8KiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQ3NDkzZDgtZTQxZi0z NTE5LWI0OTYtYTJhYjY1MDRlMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEXNEBiudsooxgS8iaOhPf46XRF/CnH3P1IwdHQ4QYqYlLKF4SSV8rd XpwgqUpeLfILEDxH8Xsm/0/UlumcBc/eoGE3I6Mjw4eBpUD1Fpu7JariTk2X9lzK 1sNJY9AXSPIOO9VQ9sSYwzGXT8GT9hTAP1wW4ks0eqZIG5pZ74V6jE+x9fD8db41 4X7AIbyMESUyQL0c0wnqIhqMGGW9aKICphoaVBwzS2X29ryaQL0aeM+VeDGtxzCO qD/obeRh+aDOSKi9DsqMO74H2cAK5TXp/6tLx7dUcPemKWhdPdSfSg90htPfMU+h eY8VeEakqJt35Kcnd0vWqwOAo5U1Q7g= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org