$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa File: fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa (raw, json) Hash identifier: BLVEXYtOPHnLbVSg7ipptQ0clCVN7u4u6lMVbn+6Ibk= Subject key identifier: 09:30:C6:06:30:7E:8C:F3:DB:D0:9A:CA:0C:B0:7F:A8:BA:84:7D:19 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DEAD17FF2244034412780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 198.45.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:ea:d1:7f:f2:24:40:34:41:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=434f4c1c-f839-4d30-ab3b-f6c3ba146f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:2f:9e:39:01:d7:90:93:af:48:1e:29:92: 05:13:fd:4a:1d:53:2e:5e:1e:49:27:81:48:2f:52: e1:f0:03:03:da:77:af:8d:9c:77:c4:2e:32:29:5e: ba:d8:9d:b8:04:20:e9:d1:5f:ac:6b:ce:84:fc:cc: b3:12:1b:9f:06:5b:53:b7:54:4a:25:10:4b:5d:bd: 57:06:80:fc:8c:47:82:70:0a:4b:c3:bb:ba:fd:6c: 2c:02:84:93:8f:3e:7d:77:3e:74:38:c3:77:9a:81: 66:b1:10:f0:ab:61:89:9c:ef:cb:4c:bd:b4:0c:9f: 97:1f:19:1b:af:43:6e:c2:a5:9d:8f:27:4d:7b:ee: df:6a:23:12:0a:e8:0a:a5:b3:9a:1f:5c:b1:fd:81: 7c:46:6c:87:a7:c0:94:85:eb:34:44:41:71:a2:91: 38:ee:03:dc:29:24:c7:2d:ce:6f:0e:86:5a:61:52: 91:1e:ac:eb:f9:39:ed:30:ab:a0:b3:2f:26:f9:85: 25:cc:f0:e0:3d:49:3a:ea:99:6d:e8:55:f2:0a:3d: 22:48:12:61:cb:4f:26:18:0b:26:d5:bd:6d:47:5e: f3:3d:a8:d6:2b:f4:da:78:b6:f1:0a:05:b0:77:da: 60:7b:61:fe:0a:17:81:11:30:db:c3:ca:3a:f7:2a: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:30:C6:06:30:7E:8C:F3:DB:D0:9A:CA:0C:B0:7F:A8:BA:84:7D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc8f89b0-81ee-3d41-82f1-8bcd33242e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ba:f6:dc:db:7a:79:36:d7:89:df:e1:5a:a5:fe:ad:fe:ff: 24:7d:3c:7f:f4:7d:63:ee:8e:0f:24:cd:91:6b:e0:7a:2b:b4: 44:70:20:f8:55:a0:3a:f9:34:0e:72:e4:dd:a7:b4:ae:2a:a1: 91:c5:cb:df:0f:f1:17:24:dc:72:9c:f9:86:27:d9:8d:3b:61: 5d:0e:4e:0b:b6:72:79:a4:ff:6e:63:87:94:f9:59:ee:3a:31: 75:5a:cf:e0:f1:ac:1d:97:4a:79:b9:e8:67:1b:1f:5d:c9:e3: df:fc:9b:26:f5:7e:84:a1:5b:76:48:1c:89:bd:ad:03:c2:f6: 71:bd:29:4a:1e:77:24:a0:82:01:2f:9d:55:0f:bc:df:2e:33: b9:cb:7f:07:9c:84:af:6c:61:1c:76:1c:eb:71:07:0e:39:61: fe:75:33:55:2e:44:f8:e4:21:15:2b:e4:e1:d4:43:a5:be:09: 95:66:da:b9:3b:58:a4:9b:7c:ee:26:22:09:eb:de:72:ea:fd: 0e:54:91:d9:17:17:de:2a:50:34:69:ff:2b:e5:30:13:d0:ff: 1d:c3:02:ab:f1:84:0b:c9:a8:43:b6:d6:46:fe:38:72:d1:25: b6:7c:30:f5:cd:eb:da:61:0c:50:97:d8:56:96:12:ca:93:3b: 68:c2:8e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPerRf/IkQDRBJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NDM0ZjRjMWMtZjgzOS00ZDMwLWFiM2ItZjZjM2JhMTQ2ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2gvnjkB15CTr0geKZIFE/1KHVMuXh5JJ4FI L1Lh8AMD2nevjZx3xC4yKV662J24BCDp0V+sa86E/MyzEhufBltTt1RKJRBLXb1X BoD8jEeCcApLw7u6/WwsAoSTjz59dz50OMN3moFmsRDwq2GJnO/LTL20DJ+XHxkb r0NuwqWdjydNe+7faiMSCugKpbOaH1yx/YF8RmyHp8CUhes0REFxopE47gPcKSTH Lc5vDoZaYVKRHqzr+TntMKugsy8m+YUlzPDgPUk66plt6FXyCj0iSBJhy08mGAsm 1b1tR17zPajWK/TaeLbxCgWwd9pge2H+CheBETDbw8o69yrNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkwxgYwfozz29Caygywf6i6hH0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmM4Zjg5YjAtODFlZS0z ZDQxLTgyZjEtOGJjZDMzMjQyZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm69tzbenk214nf4Vql/q3+/yR9PH/0fWPujg8kzZFr4HortERwIPhV oDr5NA5y5N2ntK4qoZHFy98P8Rck3HKc+YYn2Y07YV0OTgu2cnmk/25jh5T5We46 MXVaz+DxrB2XSnm56GcbH13J49/8myb1foShW3ZIHIm9rQPC9nG9KUoedySgggEv nVUPvN8uM7nLfwechK9sYRx2HOtxBw45Yf51M1UuRPjkIRUr5OHUQ6W+CZVm2rk7 WKSbfO4mIgnr3nLq/Q5UkdkXF94qUDRp/yvlMBPQ/x3DAqvxhAvJqEO21kb+OHLR JbZ8MPXN69phDFCX2FaWEsqTO2jCjvE= -----END CERTIFICATE-----Generated at Sun Apr 28 14:15:35 2024 by rpki-client on console-ams.rpki-client.org