$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e84d193b-3fba-3666-8930-53cc3c9a973b.roa File: e84d193b-3fba-3666-8930-53cc3c9a973b.roa (raw, json) Hash identifier: 7xS8kBg6GozxtonS/ZVAA13/k3UrxSoQeepDpVlcyJg= Subject key identifier: 8C:89:51:AC:63:7B:C2:5C:B5:67:C9:62:90:51:89:72:A5:17:9E:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC3C5279239C69E11B380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e84d193b-3fba-3666-8930-53cc3c9a973b.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.242.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c3:c5:27:92:39:c6:9e:11:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=8711d9ac-e92e-4a31-9171-36061748c315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:5d:96:db:93:61:50:ea:46:75:89:5b:85: 34:03:c0:15:49:12:23:fe:ef:c8:e0:34:77:28:14: 3f:dd:b0:fa:60:9e:ab:52:b7:81:cc:e0:5d:45:ec: f7:32:f3:6b:b5:81:d2:e7:86:50:2b:83:a3:77:a2: 7a:4a:5f:11:38:ba:ff:91:4e:d9:3b:4d:01:1b:59: d4:e9:6f:ec:e0:21:0b:cc:b0:73:23:bc:ba:18:d8: 71:6d:21:2a:7e:49:f5:b2:b6:5d:66:b5:84:e6:fe: fb:f2:f7:dc:38:80:c3:ea:6e:20:c4:90:d6:bf:de: 40:a5:7c:84:89:3b:fe:21:e2:ea:e9:9a:95:c6:f3: 42:11:3f:2e:0c:1d:42:e4:41:c2:29:0b:5e:78:64: 01:48:4f:33:4f:f4:43:24:bd:9c:99:96:ab:f2:25: cb:9f:6e:1b:ec:9f:ec:6c:35:5d:bc:71:aa:aa:36: da:99:e3:87:78:4b:d0:af:08:55:99:a9:e2:47:9e: d9:99:3f:8f:0a:83:da:70:11:0a:1b:15:3f:1b:1d: 46:98:6e:44:12:e5:9f:e7:23:f3:b6:5d:9e:aa:0d: dc:ff:be:2d:34:11:71:99:5d:f2:dd:fe:cd:ee:14: ae:8a:6d:e1:7e:17:5f:50:4d:69:a0:21:bd:13:88: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:51:AC:63:7B:C2:5C:B5:67:C9:62:90:51:89:72:A5:17:9E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e84d193b-3fba-3666-8930-53cc3c9a973b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a5:65:87:6f:c0:90:65:3a:f3:82:44:d2:8c:6b:28:93:29: 38:ac:8a:6f:65:47:d8:b2:42:95:65:28:ce:16:dd:27:d1:c7: 87:15:51:e8:33:13:f7:80:11:29:34:12:19:f6:82:79:20:6a: 97:e2:c4:be:26:71:e7:a3:63:16:12:0d:1a:ee:a6:fa:3f:e9: 63:c5:6c:22:80:4e:dc:02:0e:96:ff:55:a3:7f:b7:8c:38:5b: 2d:00:5d:9d:49:8c:9b:8e:38:e8:2a:b9:66:ca:e4:ae:b6:59: a6:b9:67:90:d7:2e:f4:6b:63:6c:66:87:2f:77:6c:0c:77:85: dd:a6:f5:5d:0e:71:3d:0b:54:d2:05:a0:20:e0:7f:94:42:68: 9a:70:31:19:c5:72:2d:d9:9c:81:65:16:bb:ad:14:9f:52:2f: 4e:48:47:8b:a1:e2:76:c2:16:9f:99:11:90:29:c3:35:39:15: 3c:9a:1c:56:08:19:42:ca:e1:ff:03:e0:31:89:3a:ed:e7:2b: cf:5f:ee:24:73:ab:7b:c6:88:93:e8:b7:ec:2a:dc:f8:8e:e3: 0c:6e:1f:5c:02:95:4a:c2:69:0d:6a:c7:44:f6:d6:42:e9:7e: 0e:5e:14:41:9f:e5:f8:2d:3d:85:cc:34:7c:b4:00:12:9f:da: 94:3a:f2:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcPFJ5I5xp4Rs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk ODcxMWQ5YWMtZTkyZS00YTMxLTkxNzEtMzYwNjE3NDhjMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiVdltuTYVDqRnWJW4U0A8AVSRIj/u/I4DR3 KBQ/3bD6YJ6rUreBzOBdRez3MvNrtYHS54ZQK4Ojd6J6Sl8ROLr/kU7ZO00BG1nU 6W/s4CELzLBzI7y6GNhxbSEqfkn1srZdZrWE5v778vfcOIDD6m4gxJDWv95ApXyE iTv+IeLq6ZqVxvNCET8uDB1C5EHCKQteeGQBSE8zT/RDJL2cmZar8iXLn24b7J/s bDVdvHGqqjbameOHeEvQrwhVmaniR57ZmT+PCoPacBEKGxU/Gx1GmG5EEuWf5yPz tl2eqg3c/74tNBFxmV3y3f7N7hSuim3hfhdfUE1poCG9E4i6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyJUaxje8JctWfJYpBRiXKlF55nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTg0ZDE5M2ItM2ZiYS0z NjY2LTg5MzAtNTNjYzNjOWE5NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABClZYdvwJBlOvOCRNKMayiTKTisim9lR9iyQpVlKM4W3SfRx4cVUegz E/eAESk0Ehn2gnkgapfixL4mceejYxYSDRrupvo/6WPFbCKATtwCDpb/VaN/t4w4 Wy0AXZ1JjJuOOOgquWbK5K62Waa5Z5DXLvRrY2xmhy93bAx3hd2m9V0OcT0LVNIF oCDgf5RCaJpwMRnFci3ZnIFlFrutFJ9SL05IR4uh4nbCFp+ZEZApwzU5FTyaHFYI GULK4f8D4DGJOu3nK89f7iRzq3vGiJPot+wq3PiO4wxuH1wClUrCaQ1qx0T21kLp fg5eFEGf5fgtPYXMNHy0ABKf2pQ68pI= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org