$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe0dab01-a3a5-3937-8e43-3d5f5f3919a7.roa File: fe0dab01-a3a5-3937-8e43-3d5f5f3919a7.roa (raw, json) Hash identifier: 2XbMB7Lz9a2C/8vTQBhnxTbImHo3lv3dDU5YC+Ctkic= Subject key identifier: 36:F0:A5:3B:02:04:48:C3:CA:8B:CB:A5:39:7B:17:C0:34:43:C7:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DC6E544843001EDCFB830 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe0dab01-a3a5-3937-8e43-3d5f5f3919a7.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:c6:e5:44:84:30:01:ed:cf:b8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=0a307763-4992-452b-8eaa-863dd09097c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:1e:18:b4:f1:5c:eb:cf:73:c0:cc:be:96: 93:1d:be:b4:af:eb:06:d1:a1:ec:cf:64:89:75:75: 44:a1:40:73:9e:a9:e6:43:ca:2a:ff:dc:5e:f3:cd: 6f:3f:43:58:b6:b8:da:75:95:9c:18:68:ea:24:83: c7:e8:0f:87:2f:4e:75:37:e4:49:74:db:3c:b2:de: 54:94:67:17:fc:a6:9d:7f:e5:58:2e:46:c4:c5:79: 20:5d:e6:b2:47:6a:92:3d:52:1f:7b:7b:d3:96:73: 3e:86:5d:18:b4:00:4f:68:f7:b8:7d:ff:33:10:18: bb:d9:58:91:b3:83:82:ea:2b:a1:60:cc:49:f3:37: 09:77:4e:bb:53:d5:e8:08:fc:a5:df:ef:0f:2b:e6: 2d:a0:9c:3c:4c:e8:04:b6:e1:2e:69:12:b5:47:11: 20:aa:68:82:6c:af:91:c7:63:f1:f1:9a:0d:30:f4: 76:48:23:59:fe:e4:cb:a8:bb:55:e5:f5:a0:a2:b1: 1d:73:ad:7f:30:24:16:71:91:b4:8f:82:a7:8b:63: a6:ff:56:0a:01:14:90:52:4d:82:87:8a:6d:0e:3d: 5c:32:c5:12:11:99:06:c6:52:ea:da:67:14:9b:da: 27:a9:e1:35:04:b3:de:46:e4:be:8d:a7:31:11:57: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F0:A5:3B:02:04:48:C3:CA:8B:CB:A5:39:7B:17:C0:34:43:C7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe0dab01-a3a5-3937-8e43-3d5f5f3919a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:15:09:95:9f:bc:94:80:a2:95:61:92:ca:3f:a0:d0:bb:6d: 59:fb:0f:11:71:86:5d:a1:c7:48:47:a5:4c:9b:66:63:b1:f4: d0:a0:03:86:b0:e4:c2:fe:75:3c:33:11:7f:87:df:40:27:94: e1:06:2d:fb:37:5d:ce:05:f9:95:3e:d6:52:e3:36:ba:c3:13: e1:9d:c5:91:08:10:54:ea:36:38:3b:a5:a5:c1:1b:2d:ef:5a: 36:e7:6b:78:3e:a1:b7:54:a8:cd:28:1a:42:cf:d5:9d:ad:7f: 72:2a:f4:3d:30:2b:a5:45:b7:24:3a:b8:a2:22:14:40:b8:8d: f9:fc:d9:3b:38:50:b7:a0:9b:c8:7e:5a:75:99:b1:ae:52:b9: ea:a6:e8:ce:c2:0d:87:79:67:07:a0:cc:d7:ef:14:20:f8:90: e3:37:9b:89:6c:37:84:13:54:1e:22:4f:5a:d4:7d:f9:9e:34: bf:f9:19:09:1c:58:68:c8:1a:32:63:98:3a:16:53:d6:8b:d2: 65:67:b0:f0:6a:78:2e:55:84:00:88:c7:68:6a:d1:80:f3:12: 86:93:78:28:d8:c9:05:d5:b5:c0:aa:86:a0:55:ea:bc:2d:a2: c8:41:8c:4b:05:97:d7:1b:67:0a:93:14:b0:81:03:69:21:e6: 81:19:55:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPcblRIQwAe3PuDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MGEzMDc3NjMtNDk5Mi00NTJiLThlYWEtODYzZGQwOTA5N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwoeGLTxXOvPc8DMvpaTHb60r+sG0aHsz2SJ dXVEoUBznqnmQ8oq/9xe881vP0NYtrjadZWcGGjqJIPH6A+HL051N+RJdNs8st5U lGcX/Kadf+VYLkbExXkgXeayR2qSPVIfe3vTlnM+hl0YtABPaPe4ff8zEBi72ViR s4OC6iuhYMxJ8zcJd067U9XoCPyl3+8PK+YtoJw8TOgEtuEuaRK1RxEgqmiCbK+R x2Px8ZoNMPR2SCNZ/uTLqLtV5fWgorEdc61/MCQWcZG0j4Kni2Om/1YKARSQUk2C h4ptDj1cMsUSEZkGxlLq2mcUm9onqeE1BLPeRuS+jacxEVdJRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbwpTsCBEjDyovLpTl7F8A0Q8fSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmUwZGFiMDEtYTNhNS0z OTM3LThlNDMtM2Q1ZjVmMzkxOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkVCZWfvJSAopVhkso/oNC7bVn7DxFxhl2hx0hHpUybZmOx9NCgA4aw 5ML+dTwzEX+H30AnlOEGLfs3Xc4F+ZU+1lLjNrrDE+GdxZEIEFTqNjg7paXBGy3v Wjbna3g+obdUqM0oGkLP1Z2tf3Iq9D0wK6VFtyQ6uKIiFEC4jfn82Ts4ULegm8h+ WnWZsa5Sueqm6M7CDYd5ZwegzNfvFCD4kOM3m4lsN4QTVB4iT1rUffmeNL/5GQkc WGjIGjJjmDoWU9aL0mVnsPBqeC5VhACIx2hq0YDzEoaTeCjYyQXVtcCqhqBV6rwt oshBjEsFl9cbZwqTFLCBA2kh5oEZVQc= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:40 2024 by rpki-client on console-ams.rpki-client.org