$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa File: dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa (raw, json) Hash identifier: 2IPCUxiQmrgM5zCqGp8Ykd6AvkNqQVa634G7W6jNI7w= Subject key identifier: C0:A2:EA:F6:5D:AB:4A:BC:D8:29:B0:ED:3A:6B:22:34:08:A6:C3:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E44EB5D33AE836ADE3080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:44:eb:5d:33:ae:83:6a:de:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=55ac03bd-e8c6-4508-b58a-1205f423ed1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:95:e9:b6:0e:5d:77:83:b7:e2:36:7a:77: 25:41:22:67:94:50:e0:f2:5f:20:ca:0b:a0:6a:70: 76:7d:f7:84:e6:38:36:87:e5:0a:50:6a:59:0a:e0: c7:c0:be:08:45:d7:2d:99:5b:37:2e:c4:83:5d:5a: 44:4e:31:31:cb:38:fc:09:fc:35:68:cf:15:df:bd: 6e:16:ca:45:eb:5b:4f:d1:ac:48:ac:6e:72:3b:ad: ad:f6:d2:3d:f6:a6:ad:73:b1:3d:a7:c8:48:e8:9e: 8b:c3:14:20:db:80:86:f6:48:81:31:d1:c4:03:97: 44:50:41:a8:ad:28:91:8e:c5:b6:b8:b7:98:59:82: c4:be:15:fc:09:08:aa:23:37:f7:6c:50:87:7c:44: 64:71:9e:48:56:d0:aa:82:cb:5c:b1:65:bb:ad:4e: 9e:72:3a:40:bf:2f:c5:6c:21:27:71:19:d2:e6:bd: 01:e1:28:ad:39:c7:bb:d7:bb:61:35:56:06:b6:59: 34:60:20:ef:86:ed:c8:88:48:22:85:3b:63:ce:d2: b4:76:61:ad:6d:fd:38:c3:5e:cc:eb:74:a4:94:23: ef:1f:08:e2:72:22:7c:fe:99:9a:ab:8b:ef:93:d7: 3e:cc:e0:a0:71:db:25:cf:b0:75:0a:17:17:12:c9: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:EA:F6:5D:AB:4A:BC:D8:29:B0:ED:3A:6B:22:34:08:A6:C3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:26:f9:51:d7:f5:17:1b:d6:bc:26:26:f4:ad:a6:df:81:c1: 3a:d9:b2:4a:0c:48:ab:10:b8:2d:a9:8b:db:97:11:9b:d7:a9: ca:e5:56:a5:0a:d2:87:e3:78:e9:c5:1a:cc:a5:99:2e:cf:0c: 28:a5:ff:8e:6b:07:20:b4:ed:78:b4:23:8b:5a:db:9c:3b:b0: 6d:4b:ca:61:6a:01:2d:15:9a:b4:fd:67:85:cb:82:31:03:d8: 30:87:b1:4a:ca:b5:4e:e4:6b:c9:20:6e:79:69:90:7b:93:67: 7b:9c:80:42:24:ad:4e:ab:12:f8:6e:d1:22:e1:e4:17:0a:1a: 58:e0:a8:27:00:7a:5c:c1:9a:51:d5:58:a4:8d:a8:1c:e0:8b: 05:f4:1e:5e:5b:1a:c6:de:4a:a5:d9:2a:c0:88:6f:48:b3:45: 8a:8d:e3:2d:bb:13:de:b5:70:a8:24:1c:a8:f4:fa:06:6b:b4: 48:ea:f8:35:c2:54:6a:49:d3:6a:af:2d:2c:0c:c9:7a:e9:53: 9f:09:72:f6:6b:ab:02:93:be:ae:a8:b5:ae:c8:11:ba:f5:83: db:26:db:8e:df:35:25:35:84:f3:fd:2c:4b:0c:16:5e:57:58: 81:5c:dc:2d:e2:bc:48:22:f6:dd:ef:a4:c1:34:7b:0b:28:43: 56:c6:5c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkTrXTOug2reMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NTVhYzAzYmQtZThjNi00NTA4LWI1OGEtMTIwNWY0MjNlZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke2V6bYOXXeDt+I2enclQSJnlFDg8l8gygug anB2ffeE5jg2h+UKUGpZCuDHwL4IRdctmVs3LsSDXVpETjExyzj8Cfw1aM8V371u FspF61tP0axIrG5yO62t9tI99qatc7E9p8hI6J6LwxQg24CG9kiBMdHEA5dEUEGo rSiRjsW2uLeYWYLEvhX8CQiqIzf3bFCHfERkcZ5IVtCqgstcsWW7rU6ecjpAvy/F bCEncRnS5r0B4SitOce717thNVYGtlk0YCDvhu3IiEgihTtjztK0dmGtbf04w17M 63SklCPvHwjiciJ8/pmaq4vvk9c+zOCgcdslz7B1ChcXEslQlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCi6vZdq0q82Cmw7TprIjQIpsMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQ3NTI4ZmMtN2Y1Mi0z MjNiLWFhZTMtOWFhMWNhMTIzNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8m+VHX9Rcb1rwmJvStpt+BwTrZskoMSKsQuC2pi9uXEZvXqcrlVqUK 0ofjeOnFGsylmS7PDCil/45rByC07Xi0I4ta25w7sG1LymFqAS0VmrT9Z4XLgjED 2DCHsUrKtU7ka8kgbnlpkHuTZ3ucgEIkrU6rEvhu0SLh5BcKGljgqCcAelzBmlHV WKSNqBzgiwX0Hl5bGsbeSqXZKsCIb0izRYqN4y27E961cKgkHKj0+gZrtEjq+DXC VGpJ02qvLSwMyXrpU58JcvZrqwKTvq6ota7IEbr1g9sm247fNSU1hPP9LEsMFl5X WIFc3C3ivEgi9t3vpME0ewsoQ1bGXOE= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org