$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa File: 4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa (raw, json) Hash identifier: vYV1Af42mOM9VEQ0E+II+SG573GxC4HZYmd1mOgC1aQ= Subject key identifier: 5D:4E:4B:82:6F:88:82:1B:90:97:F8:1A:A4:22:92:8C:BB:4F:1B:C0 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285847DE1158DF1029591E388A1C40 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa Signing time: Wed 13 Nov 2024 16:24:21 +0000 ROA not before: Wed 13 Nov 2024 16:24:21 +0000 ROA not after: Tue 11 Feb 2025 16:24:21 +0000 asID: 174 IP address blocks: 172.252.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:de:11:58:df:10:29:59:1e:38:8a:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 13 16:24:21 2024 GMT Not After : Feb 11 16:24:21 2025 GMT Subject: CN=0a2a6359-8192-4ad4-bb61-7d055a81cea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:df:ed:08:c1:23:07:42:35:a5:c9:1b:0b: 46:d0:c0:4f:3e:13:91:68:0d:3a:04:7d:f3:08:b7: 9b:68:cc:ce:48:9b:3b:bf:63:cc:ec:d3:22:65:f6: 0b:cc:1e:55:b6:c1:86:89:09:91:92:9d:10:12:7a: 56:8b:39:73:80:ac:8c:5b:56:f9:f5:03:78:0f:58: 31:6b:bf:e3:12:66:8b:c4:39:38:79:e4:cf:2a:8f: 3a:51:24:9e:d4:ea:67:e3:09:b2:60:5b:9d:8d:8a: 6a:73:5a:08:d9:22:b7:93:84:8c:0f:80:01:f3:ee: 13:ab:3b:eb:53:c2:43:d7:ee:8b:7b:1f:60:3e:86: 34:76:80:4d:61:19:58:d2:c5:93:6e:bc:9d:0b:1e: 33:f6:b7:7f:c0:fa:d8:b7:5b:07:0d:09:d3:4c:32: 66:e3:b4:87:7e:b2:12:95:ee:b7:fd:5c:57:ae:53: 17:b5:e4:da:6f:32:d5:5e:b5:8f:bb:3e:55:a3:96: 8c:72:96:7e:33:c4:fa:51:29:86:14:f7:85:12:70: b7:ba:29:53:58:06:e4:6c:56:1b:f5:26:18:29:50: 72:4d:81:83:b7:8f:ec:a8:9b:6b:0c:e5:44:a2:43: 30:c1:95:6c:b1:87:43:7b:ad:e5:df:7d:31:13:b3: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:4B:82:6F:88:82:1B:90:97:F8:1A:A4:22:92:8C:BB:4F:1B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4af6ddef-1fb3-3038-aa61-bde0410c0d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.252.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:22:c0:34:26:8f:fa:af:cd:f2:8c:0a:43:e2:e3:d8:e4:98: f4:21:be:68:7d:22:94:ca:27:30:7b:56:52:0a:6f:99:66:90: 46:b4:78:ff:31:dd:9f:ef:c4:c7:0a:36:da:ed:67:6e:32:8f: 29:20:dc:45:19:bf:9f:15:6d:87:e4:dc:d7:de:4b:26:ae:5f: 51:7b:0b:b5:fb:17:41:15:1a:3b:be:0a:2c:10:ea:da:73:96: 25:b4:eb:72:16:c3:c8:6c:20:14:af:76:fb:b9:5f:46:3f:2d: cc:76:36:3e:e3:93:1c:28:f0:45:bf:5b:19:08:24:ab:e6:15: 5a:f3:12:52:56:03:9c:3d:92:09:f0:12:5d:ee:89:3c:c6:6d: cd:95:6c:01:97:32:0c:46:97:80:73:cf:1b:8c:5b:f2:0d:9e: 61:1b:fd:da:73:0d:ce:02:71:e4:5e:95:2a:5f:bb:57:b6:6a: 52:5c:ae:40:41:0d:7a:fc:eb:bc:20:6a:04:cb:92:3f:1a:fd: 2a:5c:5b:7c:8d:1f:44:03:8e:aa:a0:d1:84:c3:db:09:ee:3b: e0:78:7d:ca:22:35:7f:f4:61:56:50:e5:19:db:7b:bf:11:96: 44:f4:88:9a:37:47:00:a4:51:7e:b1:60:ec:31:b8:17:ee:77: e3:c4:eb:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfeEVjfEClZHjiKHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MTExMzE2MjQyMVoXDTI1MDIxMTE2MjQyMVowLzEtMCsGA1UEAxMk MGEyYTYzNTktODE5Mi00YWQ0LWJiNjEtN2QwNTVhODFjZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/7f7QjBIwdCNaXJGwtG0MBPPhORaA06BH3z CLebaMzOSJs7v2PM7NMiZfYLzB5VtsGGiQmRkp0QEnpWizlzgKyMW1b59QN4D1gx a7/jEmaLxDk4eeTPKo86USSe1Opn4wmyYFudjYpqc1oI2SK3k4SMD4AB8+4Tqzvr U8JD1+6Lex9gPoY0doBNYRlY0sWTbrydCx4z9rd/wPrYt1sHDQnTTDJm47SHfrIS le63/VxXrlMXteTabzLVXrWPuz5Vo5aMcpZ+M8T6USmGFPeFEnC3uilTWAbkbFYb 9SYYKVByTYGDt4/sqJtrDOVEokMwwZVssYdDe63l330xE7OdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1OS4JviIIbkJf4GqQikoy7TxvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGFmNmRkZWYtMWZiMy0z MDM4LWFhNjEtYmRlMDQxMGMwZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPy+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkiwDQmj/qvzfKMCkPi49jkmPQhvmh9IpTKJzB7VlIKb5lmkEa0eP8x 3Z/vxMcKNtrtZ24yjykg3EUZv58VbYfk3NfeSyauX1F7C7X7F0EVGju+CiwQ6tpz liW063IWw8hsIBSvdvu5X0Y/Lcx2Nj7jkxwo8EW/WxkIJKvmFVrzElJWA5w9kgnw El3uiTzGbc2VbAGXMgxGl4BzzxuMW/INnmEb/dpzDc4CceRelSpfu1e2alJcrkBB DXr867wgagTLkj8a/SpcW3yNH0QDjqqg0YTD2wnuO+B4fcoiNX/0YVZQ5Rnbe78R lkT0iJo3RwCkUX6xYOwxuBfud+PE660= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:54 2024 by rpki-client on console-ams.rpki-client.org