$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa File: e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa (raw, json) Hash identifier: XKSfmtYlghWU9ijXSbdvBrZ6FXgorBLzomN73liFFo8= Subject key identifier: A1:86:F5:05:02:EB:31:E4:7A:AC:0F:3F:41:C5:BB:3E:AF:DD:74:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4C40A54051EC07AA93C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4c:40:a5:40:51:ec:07:aa:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=6a70e78e-cdef-4bf4-869a-1b642f8d25df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:2a:fe:50:44:41:2c:69:80:f6:a7:4a:5a: d6:bd:ad:6f:83:37:18:d2:44:da:ec:04:79:13:38: 91:02:0e:5d:ed:a4:3d:70:b6:06:93:83:01:a3:e4: 73:9a:d1:5e:0c:82:db:0b:8b:dc:ef:cb:f6:f5:de: c0:02:d0:cb:dd:8c:08:68:e0:d7:45:31:b3:1c:4c: 57:ef:cc:2a:ed:82:1a:9e:8c:85:a0:1a:94:25:51: aa:09:d3:52:7f:f2:ea:63:5a:e9:56:53:0f:42:4e: 95:8d:ba:ed:9d:3e:47:10:19:a7:b8:59:3e:1d:fb: 41:b8:ee:f5:19:59:c3:0c:02:76:e9:c7:60:c9:af: 02:1f:5b:f5:53:77:ff:d3:63:71:44:bd:ba:79:2f: 58:3b:a3:6a:03:e3:46:a2:21:d1:ba:fb:f6:fc:23: 99:1c:b4:fe:d5:e4:5e:10:d6:78:5c:bf:0a:f6:9f: 49:bd:e8:f8:35:b9:4f:c5:76:6c:e3:49:f6:96:2a: 51:36:74:0a:e8:be:29:79:26:25:a0:72:df:6a:9f: 2f:1b:58:35:da:88:c6:7e:1a:00:af:15:22:b4:69: 31:67:9f:bd:a2:a5:ec:d8:b9:fd:b6:02:82:ac:99: 1b:70:fe:bd:ca:2c:e2:ff:11:fc:4d:7b:0f:17:c2: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:86:F5:05:02:EB:31:E4:7A:AC:0F:3F:41:C5:BB:3E:AF:DD:74:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4576aaa-f2b3-324a-a0ed-eb0b969105fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:17:a6:b3:24:cf:0e:3b:6f:03:29:ad:f5:54:aa:16:1e:fa: 31:75:45:c7:7f:a5:5f:09:ac:f6:16:07:a7:9c:6d:76:ce:03: 83:ce:ca:86:6c:ee:f8:06:2f:97:2c:2e:d8:fb:5e:03:ae:63: ba:e1:2a:3a:91:36:75:e4:87:7e:e7:2d:30:17:ff:13:a3:b0: 66:5f:67:e0:d3:b4:0b:22:40:fd:74:2a:5e:d6:ca:72:11:ab: ad:fc:d6:43:b6:51:82:21:f8:12:ed:02:bd:11:d5:93:43:f5: f8:64:8b:02:f3:34:b0:58:e0:2d:da:a8:9f:b4:c3:87:3e:48: a7:32:6f:af:e3:27:1e:b4:2f:c0:b9:ba:86:43:4d:fa:d1:9f: 97:2c:5e:08:82:cc:fe:f0:d4:4d:b3:87:30:64:85:1d:bf:45: cc:41:96:d8:bf:4f:83:81:1d:1a:77:99:aa:c5:16:02:87:79: e1:20:b0:4f:1a:77:d0:22:bf:79:82:fe:c7:8a:7d:26:bf:56: ab:22:d7:f0:4f:82:ba:a4:8d:4e:72:7a:10:79:99:58:f0:63: 7e:ed:bd:70:c8:c3:65:0a:28:2f:c7:ec:88:cc:f1:75:95:77: 30:39:27:70:81:53:66:ac:9c:94:99:55:68:96:51:61:f1:c0: e6:71:d5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkxApUBR7Aeqk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NmE3MGU3OGUtY2RlZi00YmY0LTg2OWEtMWI2NDJmOGQyNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ4q/lBEQSxpgPanSlrWva1vgzcY0kTa7AR5 EziRAg5d7aQ9cLYGk4MBo+RzmtFeDILbC4vc78v29d7AAtDL3YwIaODXRTGzHExX 78wq7YIanoyFoBqUJVGqCdNSf/LqY1rpVlMPQk6VjbrtnT5HEBmnuFk+HftBuO71 GVnDDAJ26cdgya8CH1v1U3f/02NxRL26eS9YO6NqA+NGoiHRuvv2/COZHLT+1eRe ENZ4XL8K9p9Jvej4NblPxXZs40n2lipRNnQK6L4peSYloHLfap8vG1g12ojGfhoA rxUitGkxZ5+9oqXs2Ln9tgKCrJkbcP69yizi/xH8TXsPF8L50wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGG9QUC6zHkeqwPP0HFuz6v3XRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTQ1NzZhYWEtZjJiMy0z MjRhLWEwZWQtZWIwYjk2OTEwNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIXprMkzw47bwMprfVUqhYe+jF1Rcd/pV8JrPYWB6ecbXbOA4POyoZs 7vgGL5csLtj7XgOuY7rhKjqRNnXkh37nLTAX/xOjsGZfZ+DTtAsiQP10Kl7WynIR q6381kO2UYIh+BLtAr0R1ZND9fhkiwLzNLBY4C3aqJ+0w4c+SKcyb6/jJx60L8C5 uoZDTfrRn5csXgiCzP7w1E2zhzBkhR2/RcxBlti/T4OBHRp3marFFgKHeeEgsE8a d9Aiv3mC/seKfSa/Vqsi1/BPgrqkjU5yehB5mVjwY37tvXDIw2UKKC/H7IjM8XWV dzA5J3CBU2asnJSZVWiWUWHxwOZx1QQ= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org