$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4a5b541-18b5-3f13-9ddb-6e34cf1e5c26.roa File: c4a5b541-18b5-3f13-9ddb-6e34cf1e5c26.roa (raw, json) Hash identifier: wnZYoA4Ap44xWaSUFbrN94XyrNHM5mccrpq+6k7O0nA= Subject key identifier: 73:5D:B8:67:FA:47:66:D7:F5:35:E0:2A:42:86:CC:29:85:4A:09:1A Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285845AD3A156F5FA4679DE1512580 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4a5b541-18b5-3f13-9ddb-6e34cf1e5c26.roa Signing time: Fri 26 Apr 2024 18:57:57 +0000 ROA not before: Fri 26 Apr 2024 18:57:57 +0000 ROA not after: Thu 25 Jul 2024 18:57:57 +0000 asID: 397630 IP address blocks: 172.252.224.0/24 maxlen: 24 172.252.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ad:3a:15:6f:5f:a4:67:9d:e1:51:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Apr 26 18:57:57 2024 GMT Not After : Jul 25 18:57:57 2024 GMT Subject: CN=19eea827-bfbd-4877-9b14-6b50b74b995a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:56:e6:f6:d0:d5:67:3b:f7:67:8a:9a:0e: 91:47:c3:50:51:8e:21:f3:bc:d7:5f:87:30:cf:7b: 1c:4a:74:f8:01:c0:21:bb:f1:0f:53:e5:01:01:5b: 8e:3e:1d:a1:a6:7d:69:df:0b:ac:19:92:1e:40:43: 38:07:25:f1:c4:94:e3:08:c7:35:17:be:e8:1d:a9: 82:b4:54:c3:30:06:09:a4:0b:6f:c9:29:5e:c6:c4: f6:c9:36:d1:e4:90:d0:d2:56:6c:75:a9:5a:2b:1f: 9d:cf:9f:e1:66:f4:a0:7a:03:9a:d4:15:45:34:6e: 3e:a1:9b:95:1a:83:e8:d3:5c:d8:ab:0d:85:be:e6: 62:27:8b:b6:58:29:63:b5:7d:37:60:16:a7:17:aa: 60:81:3a:4c:e9:7d:b1:b9:08:02:83:7f:e6:62:e4: 60:79:18:59:19:17:50:e7:32:4f:05:3e:d1:ba:2d: 54:eb:e4:8f:d2:1e:a5:a9:63:91:4b:f9:ef:4f:8e: b2:ce:85:7e:54:ad:60:28:ae:0c:3c:29:57:ff:8e: 65:5e:8a:51:18:d7:52:55:3d:4d:b1:f9:23:65:eb: 70:53:92:34:84:79:13:dc:1e:ba:da:c6:02:d3:2c: 37:50:71:2b:32:a7:d7:37:f8:3f:9f:db:d0:88:43: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5D:B8:67:FA:47:66:D7:F5:35:E0:2A:42:86:CC:29:85:4A:09:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c4a5b541-18b5-3f13-9ddb-6e34cf1e5c26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.224.0/24 172.252.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a0:4a:52:5b:d7:9d:c2:f7:de:48:34:0a:a9:bc:c3:ea:f3: 1a:5a:c4:9a:d5:b5:1c:3e:7a:04:14:e0:4e:b9:80:45:f9:e4: f1:7b:8d:70:e9:5e:9e:0c:5a:df:97:b4:89:95:b3:77:5e:66: 86:88:6c:e7:0e:ac:9b:0f:79:77:5c:4e:21:c7:45:cb:7e:35: 3e:60:65:ac:45:db:60:70:05:b6:8c:af:4c:9f:03:e6:04:fa: d6:ba:53:b0:46:10:92:d5:ed:1d:fa:30:19:61:0b:30:23:98: da:f5:34:fc:29:ad:5a:49:de:ff:47:dd:73:a9:49:f5:75:02: d7:6c:c0:f8:b8:66:ec:5c:ae:28:ea:45:c4:d7:28:9a:8a:08: 94:40:42:b4:b7:8d:a9:a4:98:86:a9:5d:1f:25:11:b6:b1:9a: c9:04:3f:a9:22:7c:8c:94:0f:2b:c4:2b:ac:41:61:1f:08:37: e0:3f:81:76:ad:61:f3:00:85:e1:c8:13:3c:34:31:d0:14:fb: bf:6c:29:fb:cc:d1:2b:59:f6:30:90:93:8e:5b:9b:25:de:e8: b6:73:ae:95:ce:62:1e:f3:d8:5e:0b:5b:94:46:2c:91:18:8c: 80:7b:f4:e0:09:c1:96:9b:45:53:5e:5e:c7:c3:48:7b:98:4b: c3:45:e8:98 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEWtOhVvX6RnneFRJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MDQyNjE4NTc1N1oXDTI0MDcyNTE4NTc1N1owLzEtMCsGA1UEAxMk MTllZWE4MjctYmZiZC00ODc3LTliMTQtNmI1MGI3NGI5OTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6VW5vbQ1Wc792eKmg6RR8NQUY4h87zXX4cw z3scSnT4AcAhu/EPU+UBAVuOPh2hpn1p3wusGZIeQEM4ByXxxJTjCMc1F77oHamC tFTDMAYJpAtvySlexsT2yTbR5JDQ0lZsdalaKx+dz5/hZvSgegOa1BVFNG4+oZuV GoPo01zYqw2FvuZiJ4u2WCljtX03YBanF6pggTpM6X2xuQgCg3/mYuRgeRhZGRdQ 5zJPBT7Rui1U6+SP0h6lqWORS/nvT46yzoV+VK1gKK4MPClX/45lXopRGNdSVT1N sfkjZetwU5I0hHkT3B662sYC0yw3UHErMqfXN/g/n9vQiEMO2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHNduGf6R2bX9TXgKkKGzCmFSgkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzRhNWI1NDEtMThiNS0z ZjEzLTlkZGItNmUzNGNmMWU1YzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArPzgAwQA rPznMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHKgSlJb153C995INAqpvMPq8xpaxJrVtRw+egQU4E65gEX5 5PF7jXDpXp4MWt+XtImVs3deZoaIbOcOrJsPeXdcTiHHRct+NT5gZaxF22BwBbaM r0yfA+YE+ta6U7BGEJLV7R36MBlhCzAjmNr1NPwprVpJ3v9H3XOpSfV1AtdswPi4 ZuxcrijqRcTXKJqKCJRAQrS3jamkmIapXR8lEbaxmskEP6kifIyUDyvEK6xBYR8I N+A/gXatYfMAheHIEzw0MdAU+79sKfvM0StZ9jCQk45bmyXe6LZzrpXOYh7z2F4L W5RGLJEYjIB79OAJwZabRVNeXsfDSHuYS8NF6Jg= -----END CERTIFICATE-----Generated at Sat May 18 19:56:36 2024 by rpki-client on console-fra.rpki-client.org