$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa File: f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa (raw, json) Hash identifier: 5WcL0kh1NBp8/YAsumOwLaaueEzGvQuDBk2XI4KikE8= Subject key identifier: 44:A8:FE:B3:A0:EF:BC:21:95:7E:30:0D:B2:EA:42:88:07:6E:8D:D6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7ADDBD3DD043CFC85B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7a:dd:bd:3d:d0:43:cf:c8:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=a56f0439-7064-4468-9880-63870437e1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:8e:df:d3:39:06:7d:ef:f9:c9:59:4d:59: 3a:80:13:29:c0:69:b6:49:88:90:73:c7:27:99:71: 21:75:10:d1:ed:18:54:42:52:c2:a8:14:42:6a:03: 4e:db:1b:8f:01:cd:c1:de:cf:13:09:5d:9b:89:64: a6:d9:ef:6c:6e:27:6e:b3:7e:55:b3:ff:4b:d3:9b: fa:91:ef:4f:fe:98:f3:a8:87:e0:1b:93:22:3d:98: 85:db:7a:fb:b4:f0:2b:77:1e:da:54:09:c4:a4:81: c3:c0:aa:30:b3:07:7c:6d:5c:6b:ba:48:c0:86:89: 93:ff:06:27:d8:cf:91:e5:32:b2:0a:28:cc:87:fa: 2c:bc:4b:8b:69:6e:93:9e:65:37:f6:c5:e7:64:fc: db:1a:37:03:64:a0:88:38:a2:ce:50:23:9d:8d:42: ba:5b:c4:ef:e2:27:30:23:9d:8e:be:54:00:8a:a1: a5:a0:20:53:05:f4:28:56:95:75:b3:76:da:cb:e4: 02:e2:8b:15:9b:2d:cb:5f:69:72:09:60:d6:f2:c9: a2:ad:15:5c:5a:27:05:43:1e:60:7b:63:8a:99:42: da:4c:9b:13:90:54:54:7f:94:d6:36:74:92:a9:90: d9:6c:4a:84:de:6d:6f:e6:5d:4c:74:9b:a9:b3:2b: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:FE:B3:A0:EF:BC:21:95:7E:30:0D:B2:EA:42:88:07:6E:8D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:01:d8:54:41:6f:78:5a:68:52:75:3f:ab:dd:0a:78:98:74: 34:fc:d3:b8:1b:bf:4d:33:9b:4f:95:60:5f:05:9d:36:6f:86: d1:78:40:ed:80:d4:15:1c:1a:45:5f:b3:5d:a6:0e:de:89:f6: 22:a5:d4:9a:9c:16:08:13:41:46:92:5f:59:bb:3b:ea:98:ce: 2f:89:26:ec:7b:4c:64:1c:df:cb:c6:57:0b:30:58:c9:08:03: f5:99:20:3f:0f:be:6d:ca:e3:bb:25:22:1b:3e:44:58:f2:3b: 62:66:a4:fe:0c:a5:fd:25:4b:6e:dd:37:0d:ac:a0:12:61:59: df:61:e5:59:83:1a:36:ba:cf:ec:5f:fe:06:bc:6a:49:b4:5c: 48:4b:57:6d:74:d3:99:4d:a4:f6:a1:62:f7:23:9b:93:80:61: e8:46:3b:13:85:b4:af:80:62:16:fd:2e:76:e4:26:dc:bc:d6: 37:82:98:3d:a0:c6:ce:9d:f8:bd:88:d7:97:9d:fe:d3:1d:c8: 0c:a1:86:0a:f9:a2:be:3c:c3:13:23:6e:2a:c7:06:b5:b4:3a: b0:5b:d7:71:5b:eb:62:f1:d9:fe:71:0a:cb:b0:5e:62:2b:8d: ba:5f:0f:35:4e:b4:aa:a1:ba:12:ba:bd:3d:e4:09:60:89:54: c6:86:45:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnrdvT3QQ8/IW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YTU2ZjA0MzktNzA2NC00NDY4LTk4ODAtNjM4NzA0MzdlMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW2O39M5Bn3v+clZTVk6gBMpwGm2SYiQc8cn mXEhdRDR7RhUQlLCqBRCagNO2xuPAc3B3s8TCV2biWSm2e9sbidus35Vs/9L05v6 ke9P/pjzqIfgG5MiPZiF23r7tPArdx7aVAnEpIHDwKowswd8bVxrukjAhomT/wYn 2M+R5TKyCijMh/osvEuLaW6TnmU39sXnZPzbGjcDZKCIOKLOUCOdjUK6W8Tv4icw I52OvlQAiqGloCBTBfQoVpV1s3bay+QC4osVmy3LX2lyCWDW8smirRVcWicFQx5g e2OKmULaTJsTkFRUf5TWNnSSqZDZbEqE3m1v5l1MdJupsyuduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESo/rOg77whlX4wDbLqQogHbo3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjFmMTBlMjAtOGQzOS0z ZWRlLTk2ZWYtZDRiZWVhM2MyZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIB2FRBb3haaFJ1P6vdCniYdDT807gbv00zm0+VYF8FnTZvhtF4QO2A 1BUcGkVfs12mDt6J9iKl1JqcFggTQUaSX1m7O+qYzi+JJux7TGQc38vGVwswWMkI A/WZID8Pvm3K47slIhs+RFjyO2JmpP4Mpf0lS27dNw2soBJhWd9h5VmDGja6z+xf /ga8akm0XEhLV21005lNpPahYvcjm5OAYehGOxOFtK+AYhb9LnbkJty81jeCmD2g xs6d+L2I15ed/tMdyAyhhgr5or48wxMjbirHBrW0OrBb13Fb62Lx2f5xCsuwXmIr jbpfDzVOtKqhuhK6vT3kCWCJVMaGRXI= -----END CERTIFICATE-----Generated at Mon Nov 25 02:51:13 2024 by rpki-client on console-ams.rpki-client.org