$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa File: e22e9c69-38d0-36a9-a457-71e0def02a42.roa (raw, json) Hash identifier: l2ZjdixIWZ+T+bPEYO+3jCSfH00zgCDnT2rgmoT4wIg= Subject key identifier: E9:49:1C:F7:C2:B6:6E:52:D9:C5:0E:27:80:08:72:7A:CB:5D:86:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E49DE42FF31BA0E98CD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:49:de:42:ff:31:ba:0e:98:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=eca03c9a-b4e1-423b-81b2-0a4c69edf678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:00:a0:ab:74:db:a5:4a:3f:78:b5:d9:15: 00:89:a4:8d:99:da:90:01:46:ea:cd:70:ea:7b:29: 16:47:c9:77:03:e7:ad:6f:de:ca:25:0f:67:62:be: 37:e5:a4:fc:d8:11:c2:6f:6d:ba:4e:59:7b:d3:04: 06:b7:b9:94:91:3e:8b:e1:8c:7e:e1:22:9c:ab:39: 7e:9d:17:68:8d:8b:27:a1:32:06:20:59:54:93:06: 08:ff:96:1c:53:5a:1a:99:36:2c:8f:b3:df:df:44: 4e:da:cf:17:bd:a4:e7:da:cb:e3:55:72:2a:76:32: aa:6a:ae:eb:cb:4d:0c:27:cf:0d:66:ad:9f:af:69: 5d:59:c4:df:d5:71:76:9b:24:f0:36:cb:9e:68:c6: 3b:42:70:20:da:7f:b9:07:0c:7c:fc:94:54:a6:16: 47:cc:ec:cc:2e:c2:50:31:f9:87:63:88:31:25:7b: 56:bb:b4:c5:78:b3:10:47:5e:bc:c0:38:73:34:39: 7b:86:27:3a:4a:80:8e:6b:29:3b:44:d9:4c:2d:a6: fb:9d:50:71:4f:05:7d:67:d2:24:53:44:07:a7:4c: d9:c4:eb:4d:e0:f5:9c:13:1b:d2:07:cd:3d:39:bb: 9f:66:1b:db:dd:28:1f:73:52:3e:05:dc:53:2f:b4: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:49:1C:F7:C2:B6:6E:52:D9:C5:0E:27:80:08:72:7A:CB:5D:86:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e22e9c69-38d0-36a9-a457-71e0def02a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4e:d8:1a:b9:cf:77:50:00:aa:19:4b:bc:4d:86:d6:83:22: 6d:50:08:05:0d:8e:03:43:47:6e:2f:09:57:bc:dd:b4:ae:ba: fb:c9:8e:85:8a:fa:a3:b4:37:99:16:33:68:e1:cd:55:73:91: 67:7a:cc:d4:7c:2b:bb:8b:bf:d2:b2:a5:8d:47:93:ff:95:38: c6:83:30:bb:c3:06:27:e2:2f:38:80:0e:f8:34:04:98:44:22: 9e:68:d3:80:d2:7b:b2:1d:79:dc:ea:05:bb:db:1e:2c:59:4a: 0e:54:d2:4a:5d:33:d5:6f:76:16:bf:69:a1:e5:66:db:97:bd: 06:13:2a:45:54:df:b5:e4:f8:8a:60:df:45:9a:79:58:6a:2f: bf:3a:4d:99:57:6f:d2:b6:64:21:4f:b0:00:ed:e3:44:98:f2: 4f:36:56:c2:8d:0f:56:a9:02:72:e5:7a:95:0e:f0:9e:da:f3: 9c:0b:6b:f8:d2:01:50:3f:7c:85:79:5e:9a:f1:9b:48:d8:b4: 72:ad:ec:60:c2:81:d2:9a:cb:41:ef:f4:5d:cb:0f:0f:40:82: 5f:18:89:26:f9:ed:16:76:c5:8a:34:76:36:59:03:aa:bc:22: ee:88:88:14:7c:0a:59:dc:0b:a4:3a:ed:6f:8a:c9:ff:65:0d: 16:a4:8d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkneQv8xug6YzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ZWNhMDNjOWEtYjRlMS00MjNiLTgxYjItMGE0YzY5ZWRmNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8UAoKt026VKP3i12RUAiaSNmdqQAUbqzXDq eykWR8l3A+etb97KJQ9nYr435aT82BHCb226Tll70wQGt7mUkT6L4Yx+4SKcqzl+ nRdojYsnoTIGIFlUkwYI/5YcU1oamTYsj7Pf30RO2s8XvaTn2svjVXIqdjKqaq7r y00MJ88NZq2fr2ldWcTf1XF2myTwNsueaMY7QnAg2n+5Bwx8/JRUphZHzOzMLsJQ MfmHY4gxJXtWu7TFeLMQR168wDhzNDl7hic6SoCOayk7RNlMLab7nVBxTwV9Z9Ik U0QHp0zZxOtN4PWcExvSB809ObufZhvb3Sgfc1I+BdxTL7TdpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlJHPfCtm5S2cUOJ4AIcnrLXYa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTIyZTljNjktMzhkMC0z NmE5LWE0NTctNzFlMGRlZjAyYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJO2Bq5z3dQAKoZS7xNhtaDIm1QCAUNjgNDR24vCVe83bSuuvvJjoWK +qO0N5kWM2jhzVVzkWd6zNR8K7uLv9KypY1Hk/+VOMaDMLvDBifiLziADvg0BJhE Ip5o04DSe7IdedzqBbvbHixZSg5U0kpdM9Vvdha/aaHlZtuXvQYTKkVU37Xk+Ipg 30WaeVhqL786TZlXb9K2ZCFPsADt40SY8k82VsKND1apAnLlepUO8J7a85wLa/jS AVA/fIV5Xprxm0jYtHKt7GDCgdKay0Hv9F3LDw9Agl8YiSb57RZ2xYo0djZZA6q8 Iu6IiBR8ClncC6Q67W+Kyf9lDRakjdc= -----END CERTIFICATE-----Generated at Sun Apr 28 00:51:20 2024 by rpki-client on console-ams.rpki-client.org