$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e52c1dc6-8252-3809-9b32-fab94157760d.roa File: e52c1dc6-8252-3809-9b32-fab94157760d.roa (raw, json) Hash identifier: iMiLXVj8nUXUXT9EDLFL1s2NCgHDK6tBGDDuj5estxM= Subject key identifier: AB:A6:AE:9A:72:A3:3F:EC:FC:32:7B:5A:EE:4B:99:B7:26:2B:DA:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7A2FB3ECEA5D70E68F20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e52c1dc6-8252-3809-9b32-fab94157760d.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7a:2f:b3:ec:ea:5d:70:e6:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=22fa2ef4-4f94-4e3b-bdb8-bfd6585f7d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:91:7b:ea:b8:ca:41:c7:c3:bb:e2:e4:51: 92:64:1d:db:08:9f:0c:98:7f:3c:46:3d:ef:27:63: 98:91:79:45:55:00:fe:62:76:93:75:2f:a3:fe:a3: 4a:bc:29:69:84:bd:b5:35:7f:ed:58:24:27:f1:3e: 57:75:ec:5e:8f:8a:00:ce:3e:f6:68:84:37:34:ab: c6:51:b7:c1:5e:09:c1:b9:e0:35:59:22:2d:8d:58: b6:b8:1e:45:56:d6:87:b8:ab:f0:f4:e1:53:25:9a: 64:9b:97:8f:fd:f4:70:8f:87:7e:b2:b2:6b:1f:45: 02:b0:cd:72:0d:a5:7d:95:2c:07:6d:87:21:5e:f9: ec:96:1f:8a:cb:e9:c3:5a:90:c7:21:5b:3e:a5:6c: 7e:46:02:bb:40:fe:4e:0d:4b:eb:f8:52:4d:94:f3: 41:04:e6:77:11:50:c9:38:bc:2e:27:01:f1:f6:b2: 72:76:58:24:84:17:08:64:a7:25:99:1d:6d:ec:90: 3d:0a:f4:44:d5:b9:d0:8a:3f:7d:cb:11:40:5c:c0: 47:73:2a:87:42:06:1a:77:95:e7:57:6b:11:99:83: 38:37:28:39:67:9a:34:a4:ca:f1:4b:19:24:ac:11: da:c6:c8:5f:de:ec:15:90:47:d4:2b:15:ef:b8:c7: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A6:AE:9A:72:A3:3F:EC:FC:32:7B:5A:EE:4B:99:B7:26:2B:DA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e52c1dc6-8252-3809-9b32-fab94157760d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:57:2b:c8:9b:e8:07:f5:dd:d2:4b:35:a2:c1:0c:70:33:27: 7b:35:51:34:35:b5:39:64:5f:bd:89:bd:5c:11:e1:a4:d4:17: 04:dd:a7:5a:14:1a:60:24:14:43:14:b3:70:f0:03:d3:1a:13: 43:ec:6b:2a:03:0c:f6:e9:7a:b4:ef:42:e4:9d:c1:82:95:28: fc:35:01:39:92:1e:39:23:0d:48:0a:25:c5:00:e6:73:c7:36: 46:99:1e:5a:d7:6d:42:fb:71:be:44:44:b9:88:1e:c7:dd:6b: df:d4:54:8b:1e:5f:07:62:ee:6d:10:11:c4:2f:2b:5f:07:77: 5c:ad:28:5a:43:4c:41:53:d3:0b:7b:f8:67:0a:54:86:ca:ed: df:7c:a2:99:df:d5:12:b1:d2:4c:4e:c7:7e:f2:09:78:c1:33: 2a:35:9a:20:55:c3:6f:74:43:3e:dc:68:30:05:3c:3d:98:cb: af:65:81:23:65:67:94:77:6c:95:ec:74:18:54:b7:ac:9e:a5: b6:1c:33:6d:0e:e8:18:45:ad:3f:54:f8:77:89:cb:41:e8:a9: 98:0d:82:53:ab:9b:46:ab:11:2e:62:d0:b3:e6:71:2c:37:df: 57:81:24:5a:f0:34:48:41:25:cb:09:a3:93:2b:d4:02:54:a0: 9a:11:4e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnovs+zqXXDmjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MjJmYTJlZjQtNGY5NC00ZTNiLWJkYjgtYmZkNjU4NWY3ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5eRe+q4ykHHw7vi5FGSZB3bCJ8MmH88Rj3v J2OYkXlFVQD+YnaTdS+j/qNKvClphL21NX/tWCQn8T5Xdexej4oAzj72aIQ3NKvG UbfBXgnBueA1WSItjVi2uB5FVtaHuKvw9OFTJZpkm5eP/fRwj4d+srJrH0UCsM1y DaV9lSwHbYchXvnslh+Ky+nDWpDHIVs+pWx+RgK7QP5ODUvr+FJNlPNBBOZ3EVDJ OLwuJwHx9rJydlgkhBcIZKclmR1t7JA9CvRE1bnQij99yxFAXMBHcyqHQgYad5Xn V2sRmYM4Nyg5Z5o0pMrxSxkkrBHaxshf3uwVkEfUKxXvuMdr0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKumrppyoz/s/DJ7Wu5LmbcmK9ppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTUyYzFkYzYtODI1Mi0z ODA5LTliMzItZmFiOTQxNTc3NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVXK8ib6Af13dJLNaLBDHAzJ3s1UTQ1tTlkX72JvVwR4aTUFwTdp1oU GmAkFEMUs3DwA9MaE0PsayoDDPbperTvQuSdwYKVKPw1ATmSHjkjDUgKJcUA5nPH NkaZHlrXbUL7cb5ERLmIHsfda9/UVIseXwdi7m0QEcQvK18Hd1ytKFpDTEFT0wt7 +GcKVIbK7d98opnf1RKx0kxOx37yCXjBMyo1miBVw290Qz7caDAFPD2Yy69lgSNl Z5R3bJXsdBhUt6yepbYcM20O6BhFrT9U+HeJy0HoqZgNglOrm0arES5i0LPmcSw3 31eBJFrwNEhBJcsJo5Mr1AJUoJoRTm4= -----END CERTIFICATE-----Generated at Fri Nov 22 01:37:03 2024 by rpki-client on console-ams.rpki-client.org