$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bc5cb92-f7a5-3c33-8986-b5b7aa7327ba.roa File: 7bc5cb92-f7a5-3c33-8986-b5b7aa7327ba.roa (raw, json) Hash identifier: yHwELQ8JBOLuYQGotVDb+scP/zKuKtPB9CHEB0PNF1s= Subject key identifier: F0:59:51:5A:48:43:8D:50:0F:2F:12:E3:06:C0:4D:5F:00:7E:EB:09 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F43285847E0454AC6278E66E28579C1D0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bc5cb92-f7a5-3c33-8986-b5b7aa7327ba.roa Signing time: Thu 14 Nov 2024 11:20:38 +0000 ROA not before: Thu 14 Nov 2024 11:20:38 +0000 ROA not after: Wed 12 Feb 2025 11:20:38 +0000 asID: 3257 IP address blocks: 172.121.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:45:4a:c6:27:8e:66:e2:85:79:c1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Nov 14 11:20:38 2024 GMT Not After : Feb 12 11:20:38 2025 GMT Subject: CN=884ac8fa-c34e-43ad-99eb-6773d9d9fbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fe:2b:5a:e5:09:69:6c:5c:f7:f3:c6:81:06: 9a:e4:d8:3e:35:3f:1a:da:f7:9e:a1:38:ec:f2:38: 9b:1b:5e:50:a0:2d:80:0d:3d:6a:88:e0:a1:25:43: 4e:b3:ae:fd:1e:09:11:ca:a1:62:75:68:25:5b:93: 49:f0:b1:82:79:53:bc:79:5b:28:0f:39:a7:33:a2: 92:b1:5b:f8:89:0d:8f:9f:f0:bc:5c:e9:3a:9a:7f: f8:69:74:5e:ba:f4:8f:ce:9b:2f:75:88:2e:50:1e: 53:cd:15:41:0f:b5:42:14:86:5e:5e:ed:f0:09:9c: 4a:5c:9e:f0:02:51:a2:28:ee:5a:f5:23:fe:f6:80: 8e:29:04:f5:80:23:88:9a:b6:4e:fd:19:1e:da:0c: 9e:38:54:d8:96:68:dd:c3:ec:9f:85:0c:87:de:0e: 5e:bd:b6:57:56:95:5f:23:2b:b6:0e:af:a4:71:86: 34:e4:05:36:cc:8b:19:6b:0d:f5:37:73:79:2c:a3: 09:6b:19:07:d9:07:58:17:b9:4e:9e:a3:cf:32:f4: ae:26:f7:c3:90:06:92:81:0f:e4:a4:15:09:f2:01: e1:70:56:c6:44:bd:45:5f:be:f0:13:4c:73:d3:31: a6:51:d0:1c:f7:83:25:07:04:fe:26:83:31:66:e6: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:59:51:5A:48:43:8D:50:0F:2F:12:E3:06:C0:4D:5F:00:7E:EB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bc5cb92-f7a5-3c33-8986-b5b7aa7327ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:26:1d:8c:66:04:5e:ab:3f:b0:a4:85:32:b3:de:3c:8a:47: 47:58:ce:bf:dd:32:a0:ac:43:51:24:36:a8:a4:3f:53:7b:4c: 44:78:b5:f1:27:67:90:c5:d6:bc:b7:68:8e:4e:86:c6:aa:ab: 5f:f8:4b:c0:4c:66:e8:1e:bc:1e:ec:40:83:6f:9e:0b:1c:05: c1:db:47:d4:c4:d8:cb:5d:59:15:96:04:00:11:d7:c3:da:5a: 58:0f:6f:c1:00:94:49:bf:54:95:c5:ab:38:12:97:d5:b2:3d: 90:28:d1:2b:4b:57:02:b9:64:11:66:b5:22:df:94:f4:bf:f3: 4c:48:8b:a2:a1:a9:6a:e4:de:1b:d7:3e:b1:62:2e:88:6f:06: 46:cb:e1:3c:7c:47:dd:e6:ea:09:60:9c:46:21:f4:ad:8b:28: 65:af:d9:4b:d7:b4:ef:68:3c:ff:84:25:ac:7d:d6:fe:05:af: a4:74:9e:35:31:00:b1:8c:56:fc:19:e1:7b:69:09:86:19:3a: 0e:d7:45:36:e9:b8:44:ca:a4:32:4e:81:71:42:05:a0:3e:53: 3b:fb:37:0b:10:ab:4c:57:a0:59:59:43:2e:10:e8:1e:2c:f7: 6d:21:9f:cb:a7:82:c0:8f:96:89:a3:3a:16:42:ce:43:b9:aa: 5a:f1:23:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfgRUrGJ45m4oV5wdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI0MTExNDExMjAzOFoXDTI1MDIxMjExMjAzOFowLzEtMCsGA1UEAxMk ODg0YWM4ZmEtYzM0ZS00M2FkLTk5ZWItNjc3M2Q5ZDlmYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf4rWuUJaWxc9/PGgQaa5Ng+NT8a2veeoTjs 8jibG15QoC2ADT1qiOChJUNOs679HgkRyqFidWglW5NJ8LGCeVO8eVsoDzmnM6KS sVv4iQ2Pn/C8XOk6mn/4aXReuvSPzpsvdYguUB5TzRVBD7VCFIZeXu3wCZxKXJ7w AlGiKO5a9SP+9oCOKQT1gCOImrZO/Rke2gyeOFTYlmjdw+yfhQyH3g5evbZXVpVf Iyu2Dq+kcYY05AU2zIsZaw31N3N5LKMJaxkH2QdYF7lOnqPPMvSuJvfDkAaSgQ/k pBUJ8gHhcFbGRL1FX77wE0xz0zGmUdAc94MlBwT+JoMxZuYRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBZUVpIQ41QDy8S4wbATV8AfusJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2JjNWNiOTItZjdhNS0z YzMzLTg5ODYtYjViN2FhNzMyN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwmHYxmBF6rP7CkhTKz3jyKR0dYzr/dMqCsQ1EkNqikP1N7TER4tfEn Z5DF1ry3aI5Ohsaqq1/4S8BMZugevB7sQINvngscBcHbR9TE2MtdWRWWBAAR18Pa WlgPb8EAlEm/VJXFqzgSl9WyPZAo0StLVwK5ZBFmtSLflPS/80xIi6KhqWrk3hvX PrFiLohvBkbL4Tx8R93m6glgnEYh9K2LKGWv2UvXtO9oPP+EJax91v4Fr6R0njUx ALGMVvwZ4XtpCYYZOg7XRTbpuETKpDJOgXFCBaA+Uzv7NwsQq0xXoFlZQy4Q6B4s 920hn8ungsCPlomjOhZCzkO5qlrxI6I= -----END CERTIFICATE-----Generated at Mon Nov 25 03:17:28 2024 by rpki-client on console-ams.rpki-client.org