$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa File: dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa (raw, json) Hash identifier: qcYXk5VzFHt/dHhPedkzquxNQokd7j2kfIR7yugwoSM= Subject key identifier: F0:36:4C:EE:15:DE:BA:FF:92:41:66:BB:1D:54:44:43:A4:C8:07:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E039A41C330F0BA235380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 72.173.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:03:9a:41:c3:30:f0:ba:23:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=90a5f5b9-5018-4f3d-9f12-124a2d5d9b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:4a:28:1f:38:fa:a8:cf:c2:27:5c:59:f2: 81:6f:38:70:21:82:a9:71:68:c4:cd:79:18:02:7d: 24:c3:c8:24:a3:be:18:bd:07:96:e2:1f:2d:d2:f7: 02:d0:7a:1b:f2:46:c0:53:5a:fc:16:39:e0:21:1d: 23:18:31:8c:64:b6:4c:e9:17:79:24:68:03:1f:40: 97:fa:47:8f:40:5f:2c:1c:34:99:07:32:01:f3:07: 40:c7:5f:d6:e0:fe:25:bf:e0:32:0f:b3:d8:ba:59: 7f:30:12:ee:36:a8:87:08:d9:88:59:67:0f:9f:c3: 2a:ff:0a:d6:21:90:0f:63:d9:6f:96:42:46:c1:0c: 23:03:8e:38:4a:06:42:bc:47:a4:16:d0:b9:df:98: 80:b7:56:0e:2f:cb:75:5c:27:42:4a:1b:a0:00:a5: a7:0b:a4:a9:91:f0:01:0a:9f:59:42:a1:29:1e:43: b8:3e:44:32:a5:40:da:a5:e6:3d:44:ee:f9:48:75: 00:f8:f4:1e:66:5d:52:4e:b8:0d:e1:36:de:9c:76: 34:af:97:a0:7a:d1:8c:e5:26:24:a3:ea:db:7b:33: e2:e3:11:1d:5b:76:e8:6f:80:3b:d9:20:8f:a6:8a: b9:81:be:b9:90:a2:43:a8:c6:31:8f:5e:f3:18:57: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:4C:EE:15:DE:BA:FF:92:41:66:BB:1D:54:44:43:A4:C8:07:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:27:1b:b3:30:57:35:d0:a4:9b:cc:ca:24:4e:5d:9e:3b:d7: 4a:73:0f:f5:de:bc:78:a2:12:d3:4f:4a:6b:df:62:35:a5:c9: 5f:7a:cc:1d:b0:9a:eb:b7:f3:31:d3:3e:30:e4:50:b4:0e:6d: 55:8f:b7:cb:9b:27:5e:74:24:f2:61:0c:c2:fc:ed:e4:26:f7: 25:48:7b:39:24:81:55:f4:d8:fe:18:d2:c0:d1:0d:a3:c3:4a: 4d:bf:f4:24:50:da:4f:63:85:ed:8b:86:4a:34:93:f6:b0:bb: 7c:c0:68:7f:9e:9d:0d:8b:2f:ef:18:b6:fe:8e:a8:b0:5c:9b: 45:0d:76:aa:d3:03:d2:78:50:aa:ab:f0:8b:58:df:28:ab:11: 61:41:96:e4:98:b6:53:1e:ef:7a:8e:35:22:ed:5f:0f:5a:da: c3:37:ee:8e:38:14:d0:15:77:e8:7c:9d:49:f6:dc:da:bf:d2: 11:51:e5:b8:ff:89:16:0d:de:35:d9:20:45:e2:09:82:55:d1: 52:b3:dd:e8:9c:b0:89:b9:9c:01:1b:f8:90:7a:16:be:5a:9f: a3:a1:a4:4c:3d:f3:65:4c:a4:c1:b8:49:51:43:b4:24:42:19: 88:85:4e:76:fd:d2:1b:5b:70:40:d8:ae:38:ba:b2:47:b0:5e: f0:4d:2b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPgOaQcMw8LojU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OTBhNWY1YjktNTAxOC00ZjNkLTlmMTItMTI0YTJkNWQ5YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZFKKB84+qjPwidcWfKBbzhwIYKpcWjEzXkY An0kw8gko74YvQeW4h8t0vcC0Hob8kbAU1r8FjngIR0jGDGMZLZM6Rd5JGgDH0CX +kePQF8sHDSZBzIB8wdAx1/W4P4lv+AyD7PYull/MBLuNqiHCNmIWWcPn8Mq/wrW IZAPY9lvlkJGwQwjA444SgZCvEekFtC535iAt1YOL8t1XCdCShugAKWnC6SpkfAB Cp9ZQqEpHkO4PkQypUDapeY9RO75SHUA+PQeZl1STrgN4TbenHY0r5egetGM5SYk o+rbezPi4xEdW3bob4A72SCPpoq5gb65kKJDqMYxj17zGFeB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA2TO4V3rr/kkFmux1UREOkyAc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGM0OWZjMjYtMjBhMi0z MTZlLWIyY2EtZjUxN2I0Y2M0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEnG7MwVzXQpJvMyiROXZ4710pzD/XevHiiEtNPSmvfYjWlyV96zB2w muu38zHTPjDkULQObVWPt8ubJ150JPJhDML87eQm9yVIezkkgVX02P4Y0sDRDaPD Sk2/9CRQ2k9jhe2Lhko0k/awu3zAaH+enQ2LL+8Ytv6OqLBcm0UNdqrTA9J4UKqr 8ItY3yirEWFBluSYtlMe73qONSLtXw9a2sM37o44FNAVd+h8nUn23Nq/0hFR5bj/ iRYN3jXZIEXiCYJV0VKz3eicsIm5nAEb+JB6Fr5an6OhpEw982VMpMG4SVFDtCRC GYiFTnb90htbcEDYrji6skewXvBNK1w= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org