$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa File: e4af146f-4186-31c6-aa18-e49d99a4017d.roa (raw, json) Hash identifier: 5UZNSvxzQyb8XOtLcf8AbuplN1bjsdokMMeaiEdpCmU= Subject key identifier: 0A:38:34:1D:3C:F0:5E:3A:C9:CA:A0:9A:0B:F7:1D:F5:6B:61:4E:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62B06407217C1FD03B04E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.242.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:06:40:72:17:c1:fd:03:b0:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=fd361bd9-3b3e-451c-ab3a-fc721b91fea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:37:ed:8e:4e:ef:6f:77:83:bb:03:fe:6e: b4:ba:ec:35:3f:41:00:20:b7:0d:70:c9:4e:b3:ec: af:5f:88:cf:2c:b9:72:89:97:54:2b:81:16:02:11: d1:fe:a6:94:71:22:1a:c5:7a:c0:7e:e8:3b:55:91: 77:88:bd:6a:6b:0f:eb:11:38:db:4d:a4:13:6c:50: 7c:68:71:bf:72:0d:c8:9c:b1:ef:a6:98:1a:ef:a3: c3:7a:e1:8c:02:9b:42:8b:a7:15:4b:c6:4d:84:a6: 2e:3b:af:3b:ff:17:6c:83:ea:43:df:95:b8:a4:61: 77:13:b1:d0:24:46:ad:5f:36:ee:42:fa:78:4e:31: 28:21:8f:0b:2f:3c:70:83:68:5b:38:b9:02:16:5c: 6e:27:f6:fa:f4:5f:c4:0b:46:81:1f:43:d8:e5:2c: 89:e3:52:b4:32:96:47:48:45:bc:39:8c:c5:50:bf: 50:5c:41:3c:b0:c9:f8:41:5d:af:1a:c3:cb:8c:48: 2e:a8:c5:0e:3e:e6:93:8f:81:40:cb:37:0c:92:69: fc:f2:99:b7:26:9a:78:7c:21:91:78:88:12:8d:f3: ea:15:64:34:cd:19:e3:f0:79:36:0d:03:f6:fd:00: 15:8a:7c:b5:d3:35:68:20:e2:63:bb:a9:b3:72:c3: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:34:1D:3C:F0:5E:3A:C9:CA:A0:9A:0B:F7:1D:F5:6B:61:4E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a4:08:5d:8a:a5:67:e4:9c:34:28:c7:76:15:d5:c6:73:6d: 8e:67:60:81:f5:0f:22:f4:78:55:2d:75:25:6f:0b:f4:a1:ff: 96:c4:17:19:a7:9c:5c:5e:ee:ea:94:89:0c:00:f7:de:7d:28: 6c:bd:c5:00:4a:71:db:86:ef:80:cf:11:76:90:cd:72:c4:d1: 6b:19:da:46:2d:0f:e9:99:f7:3a:45:12:f9:cc:bf:e2:8e:8c: b0:5d:8c:40:62:58:53:52:e4:70:31:01:2f:9d:3d:f9:dc:ae: c4:0c:08:cd:a7:ac:2c:da:5b:ae:5b:a7:70:79:b1:c0:a1:8c: 84:24:3c:7c:68:24:e7:27:7b:9b:b0:bc:4f:6e:28:52:fe:21: 21:23:21:5f:37:d9:9f:fe:82:b9:df:43:7a:e9:df:d5:f2:d0: d7:9e:7d:9c:fc:6b:16:b6:d9:87:43:b4:20:0f:6d:bf:e4:f3: 9b:79:34:5e:03:52:41:ba:7c:b8:e2:82:44:ab:a2:56:7e:f6: 4d:8d:f9:29:46:c3:95:f2:69:1f:f0:fb:09:03:58:57:ab:91: 1d:88:09:5b:92:f1:7b:3d:92:79:db:3a:2c:11:0c:a6:5c:d0: 17:66:9a:10:9f:9c:db:fc:c9:24:03:1a:99:b2:75:9c:ee:a8: de:a0:10:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKwZAchfB/QOwTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmQzNjFiZDktM2IzZS00NTFjLWFiM2EtZmM3MjFiOTFmZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNA37Y5O7293g7sD/m60uuw1P0EAILcNcMlO s+yvX4jPLLlyiZdUK4EWAhHR/qaUcSIaxXrAfug7VZF3iL1qaw/rETjbTaQTbFB8 aHG/cg3InLHvppga76PDeuGMAptCi6cVS8ZNhKYuO687/xdsg+pD35W4pGF3E7HQ JEatXzbuQvp4TjEoIY8LLzxwg2hbOLkCFlxuJ/b69F/EC0aBH0PY5SyJ41K0MpZH SEW8OYzFUL9QXEE8sMn4QV2vGsPLjEguqMUOPuaTj4FAyzcMkmn88pm3Jpp4fCGR eIgSjfPqFWQ0zRnj8Hk2DQP2/QAViny10zVoIOJju6mzcsNVHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo4NB088F46ycqgmgv3HfVrYU6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTRhZjE0NmYtNDE4Ni0z MWM2LWFhMTgtZTQ5ZDk5YTQwMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmkCF2KpWfknDQox3YV1cZzbY5nYIH1DyL0eFUtdSVvC/Sh/5bEFxmn nFxe7uqUiQwA9959KGy9xQBKcduG74DPEXaQzXLE0WsZ2kYtD+mZ9zpFEvnMv+KO jLBdjEBiWFNS5HAxAS+dPfncrsQMCM2nrCzaW65bp3B5scChjIQkPHxoJOcne5uw vE9uKFL+ISEjIV832Z/+grnfQ3rp39Xy0NeefZz8axa22YdDtCAPbb/k85t5NF4D UkG6fLjigkSrolZ+9k2N+SlGw5XyaR/w+wkDWFerkR2ICVuS8Xs9knnbOiwRDKZc 0BdmmhCfnNv8ySQDGpmydZzuqN6gEP4= -----END CERTIFICATE-----Generated at Mon Nov 25 01:04:12 2024 by rpki-client on console-ams.rpki-client.org