$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa File: ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa (raw, json) Hash identifier: l0uxGdN2zmZyBuVsAQwmkmI2omUf+wg6L1xxrb7+9aE= Subject key identifier: 4F:7D:04:5C:1F:23:74:65:B8:2B:76:D8:66:F4:9F:FF:17:B7:E6:98 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453E4BA8E0F794D6BA845200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 172.243.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3e:4b:a8:e0:f7:94:d6:ba:84:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=8ec85f7c-ea51-4225-b3fe-c5c6c70fbe5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:0a:95:df:85:da:0d:ee:aa:88:d3:8e:f7: c4:73:4b:63:29:8f:d4:09:94:a2:e7:00:bc:c6:c4: 10:4e:a4:f0:1b:a9:07:26:47:ab:9a:2e:89:c2:fd: 5c:d2:2b:7b:40:ed:bd:84:16:11:86:14:5c:23:35: d5:d5:56:f8:e0:cf:64:17:4f:ab:88:77:75:bc:d9: ff:20:3f:ea:1c:d0:5f:bb:80:0c:a4:0c:c4:a7:c2: 43:ee:aa:05:50:76:4c:93:59:7e:33:88:a1:91:96: 47:4d:a6:bc:1f:61:de:d8:32:70:93:96:e6:27:8f: e6:0f:b0:b1:6d:6c:17:64:e3:7f:52:74:56:2f:42: f0:5a:e6:46:90:61:88:11:cb:06:ba:a6:e8:93:8b: 12:f5:0d:36:ad:3a:30:64:72:e4:f2:41:78:27:0a: 55:d2:9d:59:57:a8:db:16:17:0b:5a:38:b9:ea:48: 5b:a9:fe:87:26:22:8e:6e:a8:2e:36:71:21:1d:62: c0:23:6f:38:e5:3f:f8:45:ed:ea:10:b0:09:67:74: 21:94:f2:42:e0:c8:21:39:55:33:4a:c2:40:ee:53: 4c:0e:46:76:36:e0:24:3a:35:20:0b:f8:9d:d8:a5: a8:f5:08:7e:c2:3f:73:0d:3f:69:fb:13:3a:87:61: 59:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7D:04:5C:1F:23:74:65:B8:2B:76:D8:66:F4:9F:FF:17:B7:E6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:15:09:67:40:10:d9:13:a5:26:65:5b:fe:2f:30:01:ce:db: 82:1d:3a:d6:54:79:6a:4e:92:26:2b:29:72:09:73:75:54:7d: 4f:6d:87:3b:20:b0:8f:93:45:3d:f5:5f:50:91:b9:6c:73:8f: 87:34:65:b2:c9:59:9b:bd:4c:55:26:1b:4e:96:ae:93:a2:5a: 5f:ef:8a:54:2f:c6:23:5e:37:2b:7d:38:cd:94:96:6f:b5:ec: e4:78:59:04:c9:77:e0:d3:48:e4:9c:aa:36:af:ca:30:4d:82: d8:11:9e:04:d7:8d:80:03:16:87:7b:b3:fb:20:67:0e:df:9d: 15:95:bb:90:08:8c:d7:17:e0:d9:2c:44:5c:9d:8e:53:ea:00: ec:07:32:2b:b8:ba:56:44:3f:49:b3:a7:ae:f0:16:fd:48:8d: b7:7e:0c:a7:30:bd:0f:10:1e:4e:8d:ce:4d:f8:c7:7e:f0:55: 33:63:76:0b:81:ca:67:cc:cb:d0:31:22:fa:6a:e5:ff:a8:79: e9:55:df:24:aa:a2:60:00:1b:2f:5f:ba:3a:46:20:ac:0d:13: c7:82:d4:64:d9:b2:ec:90:15:59:1f:54:65:c3:bb:fe:1c:04: 46:f3:8e:df:b7:02:38:5d:96:99:10:1a:65:66:54:99:ae:13: 78:c4:2c:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPkuo4PeU1rqEUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk OGVjODVmN2MtZWE1MS00MjI1LWIzZmUtYzVjNmM3MGZiZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwcKld+F2g3uqojTjvfEc0tjKY/UCZSi5wC8 xsQQTqTwG6kHJkermi6Jwv1c0it7QO29hBYRhhRcIzXV1Vb44M9kF0+riHd1vNn/ ID/qHNBfu4AMpAzEp8JD7qoFUHZMk1l+M4ihkZZHTaa8H2He2DJwk5bmJ4/mD7Cx bWwXZON/UnRWL0LwWuZGkGGIEcsGuqbok4sS9Q02rTowZHLk8kF4JwpV0p1ZV6jb FhcLWji56khbqf6HJiKObqguNnEhHWLAI2845T/4Re3qELAJZ3QhlPJC4MghOVUz SsJA7lNMDkZ2NuAkOjUgC/id2KWo9Qh+wj9zDT9p+xM6h2FZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE99BFwfI3RluCt22Gb0n/8Xt+aYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZlOWRmZjgtMDk0NC0z ZTU4LTlkYTUtY2U4YjZmNWYxNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8VCWdAENkTpSZlW/4vMAHO24IdOtZUeWpOkiYrKXIJc3VUfU9thzsg sI+TRT31X1CRuWxzj4c0ZbLJWZu9TFUmG06WrpOiWl/vilQvxiNeNyt9OM2Ulm+1 7OR4WQTJd+DTSOScqjavyjBNgtgRngTXjYADFod7s/sgZw7fnRWVu5AIjNcX4Nks RFydjlPqAOwHMiu4ulZEP0mzp67wFv1Ijbd+DKcwvQ8QHk6Nzk34x37wVTNjdguB ymfMy9AxIvpq5f+oeelV3ySqomAAGy9fujpGIKwNE8eC1GTZsuyQFVkfVGXDu/4c BEbzjt+3AjhdlpkQGmVmVJmuE3jELCU= -----END CERTIFICATE-----Generated at Sun Apr 28 15:54:13 2024 by rpki-client on console-fra.rpki-client.org