$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa File: e68fab52-4b7b-3186-a6db-24c47ebb3712.roa (raw, json) Hash identifier: FGsIkT4Q0pNcSSpl3ZQ1w/0iYOY6ulS9ynTSBtv/GSg= Subject key identifier: A7:57:8F:67:22:86:8B:D8:D6:16:66:57:FE:9A:8E:B7:AD:39:F3:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC93E7E0CB5E419CF2980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c9:3e:7e:0c:b5:e4:19:cf:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=bcd33eb1-7c8f-4604-b5d4-bf682ecc01a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:62:a0:fe:a2:fd:0d:9b:8b:5a:86:82:a7: a9:6e:da:a1:ad:d3:ba:70:3a:84:f4:ab:f8:a8:a0: db:52:07:22:63:25:ba:c8:c3:16:64:d9:04:49:8c: 44:78:21:59:80:76:3e:18:7c:f5:f3:76:85:03:18: d9:4c:43:53:e0:14:90:99:c3:e4:c2:eb:c8:07:2b: df:9a:81:b6:6d:18:b9:1f:af:35:22:9e:0c:90:8c: 4b:0b:71:4d:2a:ed:da:1e:61:25:a7:f6:d0:3b:da: 4c:a5:a4:03:42:45:37:9c:65:2a:28:5c:5d:cc:8a: 58:8c:08:9b:c2:ec:a3:27:d6:bc:8d:a0:76:57:9e: 13:93:47:8c:72:18:fd:78:9d:f6:42:43:60:81:af: 67:bd:06:4b:59:a5:e1:7b:a7:6f:c3:36:50:c1:23: 5a:a4:a7:24:86:c1:f7:f4:50:d8:13:9b:7c:63:8a: 47:8c:96:e0:e5:6a:68:6c:a3:5b:cc:ee:41:9e:7c: 24:bf:9b:2f:05:13:e4:92:ab:58:ad:9a:78:c3:21: 81:f1:2c:b8:3c:51:f0:6b:d1:69:48:46:51:3b:de: ff:b0:1d:f6:b6:87:65:d9:2d:43:df:2e:bc:11:5a: eb:f9:9a:c3:18:0a:58:61:ff:53:7c:9b:a7:e8:79: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:57:8F:67:22:86:8B:D8:D6:16:66:57:FE:9A:8E:B7:AD:39:F3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d0:2f:f2:cb:e0:db:aa:68:71:68:c1:6a:6d:e2:ed:c8:f6: e3:a9:14:c3:49:ff:cb:de:c4:da:a2:31:36:e5:ea:10:1f:27: 51:83:36:55:53:6b:dd:6b:45:6e:02:f3:20:bf:4a:eb:81:61: 35:63:d9:bb:bf:b2:17:71:a7:8f:57:65:0b:0d:85:1c:02:5c: ce:92:8d:be:0d:6a:01:5c:04:ef:51:79:ae:fa:06:b5:68:79: ec:b6:e9:d3:4e:2d:89:cb:7e:0d:81:e7:91:21:d1:a9:44:a1: 63:00:29:5f:8d:59:6b:84:75:a5:87:15:04:c3:6c:d7:41:24: 22:31:3a:f6:5f:d0:ae:45:d9:8c:04:75:ec:0d:07:2e:c5:67: f3:73:48:9f:60:56:bf:58:1b:76:47:47:0d:ef:0b:d9:bc:41: 72:95:d1:e1:b5:fc:0c:d7:48:30:7b:32:1c:d0:a4:30:76:a9: 5a:33:1f:4e:0f:66:cb:db:9a:dc:de:80:06:18:1d:37:d5:ba: 7e:65:69:47:9c:a9:57:9f:bf:dc:f0:07:10:5b:f9:7a:35:26: 26:58:da:4f:07:fa:2a:ac:b1:02:c1:52:c1:e9:3c:3e:2e:b8: c9:4e:1b:9b:04:1b:76:e7:61:c7:5d:45:e0:81:42:db:e1:e9: 76:28:f8:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPck+fgy15BnPKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YmNkMzNlYjEtN2M4Zi00NjA0LWI1ZDQtYmY2ODJlY2MwMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDBioP6i/Q2bi1qGgqepbtqhrdO6cDqE9Kv4 qKDbUgciYyW6yMMWZNkESYxEeCFZgHY+GHz183aFAxjZTENT4BSQmcPkwuvIByvf moG2bRi5H681Ip4MkIxLC3FNKu3aHmElp/bQO9pMpaQDQkU3nGUqKFxdzIpYjAib wuyjJ9a8jaB2V54Tk0eMchj9eJ32QkNgga9nvQZLWaXhe6dvwzZQwSNapKckhsH3 9FDYE5t8Y4pHjJbg5WpobKNbzO5Bnnwkv5svBRPkkqtYrZp4wyGB8Sy4PFHwa9Fp SEZRO97/sB32todl2S1D3y68EVrr+ZrDGApYYf9TfJun6HlUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdXj2cihovY1hZmV/6ajretOfNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTY4ZmFiNTItNGI3Yi0z MTg2LWE2ZGItMjRjNDdlYmIzNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrQL/LL4NuqaHFowWpt4u3I9uOpFMNJ/8vexNqiMTbl6hAfJ1GDNlVT a91rRW4C8yC/SuuBYTVj2bu/shdxp49XZQsNhRwCXM6Sjb4NagFcBO9Rea76BrVo eey26dNOLYnLfg2B55Eh0alEoWMAKV+NWWuEdaWHFQTDbNdBJCIxOvZf0K5F2YwE dewNBy7FZ/NzSJ9gVr9YG3ZHRw3vC9m8QXKV0eG1/AzXSDB7MhzQpDB2qVozH04P ZsvbmtzegAYYHTfVun5laUecqVefv9zwBxBb+Xo1JiZY2k8H+iqssQLBUsHpPD4u uMlOG5sEG3bnYcddReCBQtvh6XYo+Ns= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org